<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:e59767f2-e27b-4842-897c-75ad03e960a0" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2025-07-21T11:57:52Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.7</version>
        <hashes>
          <hash alg="MD5">436dfb24c63a322708e4a5143d8543af</hash>
          <hash alg="SHA-1">3ef2e8728dc9eff2f129c34057e46e9d2b10629a</hash>
          <hash alg="SHA-256">c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9</hash>
          <hash alg="SHA-512">41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced</hash>
          <hash alg="SHA-384">f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed</hash>
          <hash alg="SHA3-384">c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414</hash>
          <hash alg="SHA3-256">309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827</hash>
          <hash alg="SHA3-512">c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-python@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-python</name>
      <version>2.1.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-python@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-python</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-python</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-core@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-core</name>
      <version>2.1.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">37daa17c67681b0a2d76e15139ded085</hash>
        <hash alg="SHA-1">572feafa8a9e0fb0ce5c07c4d7b94cc8f9b63b63</hash>
        <hash alg="SHA-256">2a602996acf1f427f1adc03f1ef7e71edaacad38870b47da89b69f6ecbf40fc4</hash>
        <hash alg="SHA-512">6b34f3e8dbbb96e6b4283aef407248bacf3c5c615831e1d425ca26bdd739b6e6e4f1764e3e23d171ae7670f18dfd0768bf35d7523023ff73647a71d7ecf621f6</hash>
        <hash alg="SHA-384">35c3dec55ad13fc07dbf053f6dd58a77882a327a63417349c96105e807265946f507b001d7d9c61b76c96ddd84d62ea8</hash>
        <hash alg="SHA3-384">6909df7fe6fa31a302023e27c53b8343f45f2399f57329889fce292ce6a4cd8a6e6862a5b278361761113832127a369b</hash>
        <hash alg="SHA3-256">7a12d7717afa16aff23a831c5310266dbcd5f37de5853e4b1b09e873b3ecef69</hash>
        <hash alg="SHA3-512">3bc58138399ef70dca64ff815a1fbe2c5b939e0e22d304551023f2faf6572219e3783ccc7e9ac8b9f9b6d84b66d9244103cf2989f6aac801dd7dd963a56b6c32</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-core@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-core</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-core-api@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-core-api</name>
      <version>2.1.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">45339e47d4fc7fa2b90fc7374439e7af</hash>
        <hash alg="SHA-1">f2ed1bd056e475ffe5b4a7d108c92c4d532379b6</hash>
        <hash alg="SHA-256">ed2be0ff39a68efc46396cfb94a60cc84943bea9af6d041555ee93697671247c</hash>
        <hash alg="SHA-512">328059b821576c7e3b8aa3b5a40a8aa4878c0b1289bb27559c5b2cd4b8e9e723bc830af8e4dfe7ac0859a3655ec738d5b24c96f84ee4d43f137eecf688e66624</hash>
        <hash alg="SHA-384">e67b66e292fd6f2cf251c90f58694c027931e2add1fe1746e40d05e971e4a76ae23257b83217e45b305e745e648070fe</hash>
        <hash alg="SHA3-384">25507938434c8b181c5996e0e72869c62554c6a06298aced101768256d5f6f005c2ac515be71239d6e087f4b75df0933</hash>
        <hash alg="SHA3-256">5b873bce4da5945348871465569981d05393378fe33d1ff53e2440bcc1f23190</hash>
        <hash alg="SHA3-512">2eee325cd4cda6827076f64a3d9055ebdc5390b9b59a23ec2f5778c245564c2937798fabb956375cebfe6dc6c35851173a35f85d121bc638d3159aa79c6af275</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-core-api@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-core-api</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-core-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-metrics-core@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-metrics-core</name>
      <version>2.1.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ec194a9ed0735710e9f06789b439b77f</hash>
        <hash alg="SHA-1">6ec021c44877735177390bb8ea56280a67a7e854</hash>
        <hash alg="SHA-256">b5f3b479684d31d6431df24d2de60bde789f9a65c6a9e027bae080a109f15f99</hash>
        <hash alg="SHA-512">7800b76072b683d295535316b6ac6f4fa8dca961db695cf4afa656f99ae75bdc4cdc85572070b9da42999b6340ade1d93e8dfbe4b508b8b2cb5a05f06f4ad37a</hash>
        <hash alg="SHA-384">b9b752eee21e3e7cb4b108d0925d25b67032a3a95aa6a304c632744a7424f677f4f993dfadd6825e42a498c55c938616</hash>
        <hash alg="SHA3-384">927e955776bef31ddfcc4b4515a588547750cbb1293f1a46348e1e1db6bdb619934644e2e1499969757ef0d22a82c876</hash>
        <hash alg="SHA3-256">d00227f97fbb6a7033d42c03738542d7483f35e77920078fa97b0e918f204f3a</hash>
        <hash alg="SHA3-512">1b9cb972f8f6efe6437c87f3425c54edf7471deea879a1d3e7a23479309a6d2a84fc234427fe17c0892b9aa1bec699686a359d5342ccc15cf854ef5157956093</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-metrics-core@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-metrics/flink-metrics-core</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-metrics/flink-metrics-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-annotations@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-annotations</name>
      <version>2.1.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2b60f040d49c5b5034d634d9049613ea</hash>
        <hash alg="SHA-1">f0e759b66ee0dd55529cafc35bfb2934fdd97d38</hash>
        <hash alg="SHA-256">376391c2171379e4e0318e63b58c9b3fff878406504c0d92a585a4ad211aac0a</hash>
        <hash alg="SHA-512">fd19a5f79efdd2ee0a04ac2c588da349c8b312bcb0f2fee30735daefb6175a927d903becd9815eb6b2b6062c78503a3ea6ca8a784e3314b81840a798fce9563e</hash>
        <hash alg="SHA-384">e18ebb1de3b3f7e1cc6466637bac33ba2f18bb024831a7f4e7667dcd0bc1b7373bad85fe01ee6dcca8d35a97e5a23ff9</hash>
        <hash alg="SHA3-384">0234ead268c8411bb93b59bc920db4dfda17162c6f3e30ab6ad60234548a63f4ad420d9289ff2bf6992e7bc7969ad757</hash>
        <hash alg="SHA3-256">e56b7eb423ee2d72343faca09d71ec15229454e819524c0b5463d25e078c5c14</hash>
        <hash alg="SHA3-512">5c75e375a946a4708ac90e8a550fd02193ae3ce8a6f94d2cc09ceed160ca07a7b9ed81fe1f6ba039499fd9afc731ac8d2225176090aa614c82db99917ed326c3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-annotations@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-annotations</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-asm-9</name>
      <version>9.6-20.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">a4a5c6b334d66e9da09de1898229fa87</hash>
        <hash alg="SHA-1">a525b5d84cd529973633605dee9452512d5d3299</hash>
        <hash alg="SHA-256">d2cd34487ee0e67e2a4ccd4d30b73f8ffc09e33b43dcad10a8797815c2ebcca0</hash>
        <hash alg="SHA-512">1d99a84254fcc5631bc90575d2da3dc6b3471c6d3be3c4bf4d95e053f04e230425fd4a4ef4a2c9c9f23633f7c1a8893e63e7b3960cb32ead5820997e02e13ebf</hash>
        <hash alg="SHA-384">15e383b500f480560b0a7e543be678014868937bab6624125360e63242a6fe8a13dd51e1d5a7ece5ab33a729714cc30f</hash>
        <hash alg="SHA3-384">bf558740e47de9f6a88876428db7306e272901ec420950ca494451bae2f5c99a38247a7c856df996a60d016f7aa1ad9d</hash>
        <hash alg="SHA3-256">804c5c1de76a4d49b5fac3383196729db86367405a287e02127c21e5d185ce7a</hash>
        <hash alg="SHA3-512">a4aae40c0aa2b6b097fb41feba6a3b248cbdf7d03cf25cc47454395fdc39b28b76c774fcb7b55f51a5b8de875496168f7f1d8a1ad961166a8523a3771f2418d2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-asm-9</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-asm-9</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-jackson</name>
      <version>2.18.2-20.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5dd27e2ce3b833428a8073fb65841543</hash>
        <hash alg="SHA-1">6fbdfd65d8b31a97bee087cff2bde14936a6ef8a</hash>
        <hash alg="SHA-256">0097d25dd95604e660b6df3b96255661c53e98e3d14e6a88c09b1e63e5603297</hash>
        <hash alg="SHA-512">4ab372182e050e5b2ea9c7b3053fb46c788d5bcc378bc7174de4e34783af6dda2c8b15ea195ac6a1ca0ffc032a36e7b69c24bf4ab94ab1ba09d4e6ef6a6cd8d4</hash>
        <hash alg="SHA-384">59f2d0daedfcb5e128cfd46da9b256e226cd9a90eddc8787410d6a71333b6b974a1f4f468af0a210a580cc3147fe4370</hash>
        <hash alg="SHA3-384">aff04078014631fd7eba89d20beee5ff4df3f1c4d77f69aa22c6619ab2bc2fdfe051fa9900805fde1e8d33cb76d20982</hash>
        <hash alg="SHA3-256">c87e27d3d15f5116edc24405b8e4a07b77ee4f029c1d6303f242700b9014c1e0</hash>
        <hash alg="SHA3-512">8c6a1d32a32e29f7e8265fa673877477e3182c010fe955da3b79fd7cdac6f007f67bd9bfb7985560daefeb475021a8825909ca83ce175463be995cdbeab0fb48</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-jackson-parent/flink-shaded-jackson</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-jackson-parent/flink-shaded-jackson</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar">
      <group>org.snakeyaml</group>
      <name>snakeyaml-engine</name>
      <version>2.6</version>
      <description>Core YAML 1.2 parser and emitter for Java</description>
      <hashes>
        <hash alg="MD5">719bcfb9f917992d0a99a6f7106d8466</hash>
        <hash alg="SHA-1">235a7e571b33eda1a81e0f73a3173ef95dd020e5</hash>
        <hash alg="SHA-256">2652199af40c9aa2f1782400d2dfbbf4e5226208c4e05ddd4059c3d6d9cd1505</hash>
        <hash alg="SHA-512">c3b5e87ce323b37bcd9e65d060157ebb26d116b5dac30c6eaa185b30aa24c0be8dfd0ad604a9a12ce7010acadee54a9cea9f065cd2f434eeaed7bccce2e14a7d</hash>
        <hash alg="SHA-384">edfc3c9a95cc2fa524a322f20ec034ec16b3fad950a58bfd1ed774eaaab946304cddc5e9ea4e117a899ec568ba7fa620</hash>
        <hash alg="SHA3-384">63b9e0ed448431a1d4b34a4b0b97b65c2c7be6ef46f1ce3b10191373e3339422f9c06bc846ae861a982c3c3618abd9c6</hash>
        <hash alg="SHA3-256">19ce75167267903be79122e149ede2916c3e07bab0658db21ab40864e8c920cd</hash>
        <hash alg="SHA3-512">7777f37097a6951dafe18fb038d087e7fe0924bfb2a10c66a76a57d95aa65341d4b674c6ff1d9d453c436ffcb50e281c2bedc854ce687fefc30c9595b7352c8a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://bitbucket.org/snakeyaml/snakeyaml-engine</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bitbucket.org/snakeyaml/snakeyaml-engine/issues</url></reference><reference type="vcs"><url>https://bitbucket.org/snakeyaml/snakeyaml-engine/src</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.10.0</version>
      <description>Apache Commons Text is a library focused on algorithms working on strings.</description>
      <hashes>
        <hash alg="MD5">4afc9bfa2d31dbf7330c98fcc954b892</hash>
        <hash alg="SHA-1">3363381aef8cef2dbc1023b3e3a9433b08b64e01</hash>
        <hash alg="SHA-256">770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018</hash>
        <hash alg="SHA-512">afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831</hash>
        <hash alg="SHA-384">06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a</hash>
        <hash alg="SHA3-384">f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb</hash>
        <hash alg="SHA3-256">0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5</hash>
        <hash alg="SHA3-512">f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-text</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar">
      <group>com.esotericsoftware</group>
      <name>kryo</name>
      <version>5.6.2</version>
      <description>Fast, efficient Java serialization. This is the main Kryo artifact.</description>
      <hashes>
        <hash alg="MD5">972ea0c598accd90d33ed5c31bd004b3</hash>
        <hash alg="SHA-1">c20a8ba517e93cb78001fd64da796f1ac5cd8214</hash>
        <hash alg="SHA-256">4e8b1d2f4977187af8a51a957329722dc1cdc56a7c94fbb5a791e82897629cff</hash>
        <hash alg="SHA-512">0095bf5998f1b45c1e2dd25f22af11b619277d544cd9f4a3a355de7f118b5a9312d261c2f70e9b0691f3bec4212dea60dae191c3f1cab939ce7802472ef9f906</hash>
        <hash alg="SHA-384">b3dc68596ff6341a7cc285fa5db7237c90d46baa2425c20cc1a23686140152c6d0a245881032762e813d70cfdc007364</hash>
        <hash alg="SHA3-384">80dde34c5740a4a0fa3c2886b289eb3f9e34d2c54ad2e4aa3b025c308f2c35a75e3e3ff8a5e0700f9a7732aa89c12f6a</hash>
        <hash alg="SHA3-256">b1e7e4ef6c1aa0f4d4aad9cd3434ad003b4b1b0612417538f8da01c87ce81cb8</hash>
        <hash alg="SHA3-512">cebfb63a44efaadae598d615cd21b8bf67216b3c7b6b5e97a7027026366c8750ce8bd69d39062a5dcc609461896d44def05e8a8e227044951b0d04927b54a966</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/EsotericSoftware/kryo/kryo</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/EsotericSoftware/kryo/kryo</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar">
      <group>com.esotericsoftware</group>
      <name>reflectasm</name>
      <version>1.11.9</version>
      <description>High performance Java reflection using code generation</description>
      <hashes>
        <hash alg="MD5">602377b51e9843ef87ed48b790945c3e</hash>
        <hash alg="SHA-1">fd51ad1705d5e27d8785550172a4ab0cb9b8ad23</hash>
        <hash alg="SHA-256">712b44da79a5b7f47a28cbfcb3d8ecfc872fae349c48aa4d3e38a5d69956afce</hash>
        <hash alg="SHA-512">c9386a11540853c965b5821771a0e99e97a5701c27e47c39b23c32fd9dd05af8231bf680541195625839eafb3471b835613a7cc734c616e571ef2f62aef84fc0</hash>
        <hash alg="SHA-384">f0461aaaa75079737a10ae9f3fcf24e74828715bd4f334140c0a9d68395a84c37c6df81d4d7392ac9e51f8ac253367ec</hash>
        <hash alg="SHA3-384">9115f84613808dbf555e36ea18f9ca84ddabb76e5f030b6c02132ecc3cc0a529fe501d0548cf768b041a2af5833073fd</hash>
        <hash alg="SHA3-256">e3a5cea0f269206b22975f9b4d459da5a3d2d903b075ffbedecd307ccaa2cfb5</hash>
        <hash alg="SHA3-512">8d7e00302607e264e0199db0508771106a291023139307012ee0a7d5a380195494832b6e0087c8892ef70bba290b5a1398194f7ef8e378c8cec8fc385097c870</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/EsotericSoftware/reflectasm</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/EsotericSoftware/reflectasm</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar">
      <group>com.esotericsoftware</group>
      <name>minlog</name>
      <version>1.3.1</version>
      <description>Minimal overhead Java logging</description>
      <hashes>
        <hash alg="MD5">46908e11b408080d53246e4be44e66db</hash>
        <hash alg="SHA-1">a406e29d3a44d5f020d7b3218aee6d0952db4f73</hash>
        <hash alg="SHA-256">5d4d632cfbebfe0a7644501cc303570b691406181bee65e9916b921c767d7c72</hash>
        <hash alg="SHA-512">9a817f66222f9c612ef863b63ad7c1ccd38f2591d80ab9116e675ec52dfc5bba6989b3499c0c95afa42df762584cf0524dbc5a960b3c5dfb126068e446df0eeb</hash>
        <hash alg="SHA-384">d0bc3e4b93edc1519e89d7ac4dcb78fd5240c1b3e61cd5f2ba19ad0133bc0e79298da54a7f5011e64be6f12a26a487dd</hash>
        <hash alg="SHA3-384">995751217162b866f1e69c10607e777a4f5b571fa6c9098bc63933df5754e13e2328b149820c88a30a103fc9d938432b</hash>
        <hash alg="SHA3-256">a799557343159261e72d72f5762262981c16d0e5aa08b16cbf4b989a912bfe81</hash>
        <hash alg="SHA3-512">b333a0eab8cbdce12ab2d9163ccb8b8d3c8138b35bcf4ff1c69f79844272a9666771ae5017519d3301b8d98aaff6a6bc8655e4b636d2949d285a0d386f64d1d7</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/EsotericSoftware/minlog</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/EsotericSoftware/minlog</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/collections/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.26.0</version>
      <description>Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cbc0bb8eca12b747ca21bf998d736e60</hash>
        <hash alg="SHA-1">659feffdd12280201c8aacb8f7be94f9a883c824</hash>
        <hash alg="SHA-256">051aceb8bbcc62d0f5b2b8ac72c53767f9c59bfbd050151e65bef6f51c8ed9c9</hash>
        <hash alg="SHA-512">acbeaa2909b809cd561e7156df18340d96abacb179325622d73bdd6b82cb9b387d6fcb1a44d8195aad4e786da299289e17598a1d337b7c7d1c0bc610cc128714</hash>
        <hash alg="SHA-384">052d4d0cd1929c4299dd9d37dd36eaea6ed2be6b04d6d83a94f8608a6d1138aa81f7a34f25113ac267e7ba25ce948c9a</hash>
        <hash alg="SHA3-384">8b0bf441e8ce793fb6513bc07551cc48ab4507696c18e6037b0fcf35bc4e1eb3e44ed962e2d3765c86d4d912770aa53e</hash>
        <hash alg="SHA3-256">e441768e06092053f4703844ec0c8f2b437e06e7c190d48fec9d7682beb94c40</hash>
        <hash alg="SHA3-512">5984f9f08f83789555677f6800f25fa8e80a9eb2e4d46b5fb117b8efc24753644fa103a2f6b619827661a41677991bc827965172ef25f1313d8a59154e615e8d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-guava</name>
      <version>33.4.0-jre-20.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b96c87d90072d083a2909c4c03cfab36</hash>
        <hash alg="SHA-1">470ecb733c2f6dbd89585a255f348957cf46421b</hash>
        <hash alg="SHA-256">eb7161b07cd21a0a0cf40f26914fe0601c06f4bbb65e9560d78b2463d97b0c34</hash>
        <hash alg="SHA-512">78359308db382fa96af50dd5d50322eaeeef96e88807c77d0d62d5df892bfc026e050ecc4cc8b9c30c270551f797d6d6f31e25ec5076767282bf949980378530</hash>
        <hash alg="SHA-384">982cd6bc823bb9be9e03513bee13027ee5615787bbdbce4a26642917fe64f73081d5aabe3ffbc6941a9f367701bab993</hash>
        <hash alg="SHA3-384">e2b81e5d09916f4024423b81ed570ce83146269b6936b2a6fea8bc5f014c81deec70cecd8a978845cf2a4781aebbcc0e</hash>
        <hash alg="SHA3-256">a9c31cf8335b25ad7a76c1a1bb340f4809624fdce3a00ab77857658218ad7707</hash>
        <hash alg="SHA3-512">9d1b646067ae8172b72be8be0bdcadd1487a1b51fae089dc5cdd2c2759dc9ec314c5fae34a2a918b1edba30b1b196f22f2d39d3e6b40fe12b2824e541b2f9545</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-guava</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-clients@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-clients</name>
      <version>2.1.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c18f5f1397e02ed930e7a7202d757f70</hash>
        <hash alg="SHA-1">47e59a1cf12dae62feee1fa04f6c0f37c5811cee</hash>
        <hash alg="SHA-256">437c4bb639de84d8672ae116f0aea61fe81748047c569b080172324c3921c92c</hash>
        <hash alg="SHA-512">2c28d74f0de52240e7aeec0edf56263b0f93fc56256732a4d3c369ea50a5cd9969c08b110887ad60a96c5f6670f8ee9c97df039f97ebbf117e2e24fa1dec642b</hash>
        <hash alg="SHA-384">6d121024f102b343cd928857f2234448aeebe03cd9a188275c434e670c16252157557d648c2d4e7fcde4f4d5387cc087</hash>
        <hash alg="SHA3-384">2275bf4106910c131f63d659f81a8e30e26fd87725943fdb18fc89aaa29cebf7009c2500d8b03e583132e5ac1fdeeaa0</hash>
        <hash alg="SHA3-256">22d6f46f4915a685d285597c1182d554cc07004eb3f132d30ad9d11d205e0066</hash>
        <hash alg="SHA3-512">e71b01093f11b27a6903b51e9b1902fdda345106de605e7308503ad281ea288a17407c68d20f3b0fe88574dc7c253b8db5dffdd9a20e0b217f7bc0114d4f904c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-clients@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-clients</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-clients</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-runtime@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-runtime</name>
      <version>2.1.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ae164f4007008019dab6f7ba61e1447a</hash>
        <hash alg="SHA-1">50b41a21fe2bb58214c4d1261739561052fe09b8</hash>
        <hash alg="SHA-256">b55588f8ca91e65bdb4eaca9130c5f4dbb23044e19c88e51f50132b42c51540f</hash>
        <hash alg="SHA-512">e74028758b4c7d9ab294b9741d6f0ac349c4485dc5e7d531d965a6ca6d2bedc8fb2fea24bd38ac7463e0de40a33ffa6a0f175764bef34b5cda7fc904702bd718</hash>
        <hash alg="SHA-384">46b7a6640aefe16185399b7bac14917936c721e62333115797ab9d748921d809a78cffc9357d162335f18fdbfd67ca9f</hash>
        <hash alg="SHA3-384">21b6720e8893d8c94aa5353f51e94951c16e04522e2f8ca44748b7609c5452550a4833752a182e899a6663a7666e780c</hash>
        <hash alg="SHA3-256">0b944c664068e68e8670a46c2081e9f63a96a1c1524526911736203ce092086a</hash>
        <hash alg="SHA3-512">8afb0be06da75f82b27be5c661d85f34176b16dec77cf938c9b6b89785bd80dff61b81e56b48f8bf086d240a20e6932445454689619f78e4fcfc777d16bb5f33</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-runtime@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-runtime</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-cli</group>
      <name>commons-cli</name>
      <version>1.5.0</version>
      <description>Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6c3b2052160144196118b1f019504388</hash>
        <hash alg="SHA-1">dc98be5d5390230684a092589d70ea76a147925c</hash>
        <hash alg="SHA-256">bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6</hash>
        <hash alg="SHA-512">b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40</hash>
        <hash alg="SHA-384">a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4</hash>
        <hash alg="SHA3-384">44ca97514a2e34b5bf3de9b5d45c8e871f6eee517db7f3c4b4476eb3e8dfe9a9d8760f3181114708288c373727b42475</hash>
        <hash alg="SHA3-256">a0a47001d3a293f129ffc21f17f575a9d23ce5b88b440e651e4cd01edd0cc421</hash>
        <hash alg="SHA3-512">483dae23d6827a105d17847c8c813527f19042b65c4d09635dfc4bfd25990fe3ba2a997540460fd5b1d72ca3add9a38ca8b32004680764db972a9bb62f7f68d8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-cli/commons-cli@1.5.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-cli/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CLI</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-cli.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-datastream@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-datastream</name>
      <version>2.1.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">91367c2be5ff6f48a8c62ec09f310ed1</hash>
        <hash alg="SHA-1">c7aef4db504b984f8f316c13a5653334fa39141b</hash>
        <hash alg="SHA-256">ac15c8be814cd40502b612b6096a11e7dd183910f135c9983b72af8696f4a580</hash>
        <hash alg="SHA-512">eaff8cad57295fc85ba3bcd55d69ee1256421fb52020ae28a50bdaad1587af06de331a0d97c285ae079cb6556d628ec413ead86addbf92ae5c9d23a20c2e2112</hash>
        <hash alg="SHA-384">191b32087dc642c54fc7b01765cff545c79e51c19404c82aba8d2e95bd8d39bae38b5ba68dc9eef1bc92aca0c627764f</hash>
        <hash alg="SHA3-384">1647b10bbcc805f8a17622e4c2412f4b5188971bbc0a01287ad5bbb285a6415aa2f3b00341ebc2fc135e280c0b15910f</hash>
        <hash alg="SHA3-256">8c290d4a048b4d4cd3cccde22c5ce0e7c407732db87182440fe2628d2c4d69ba</hash>
        <hash alg="SHA3-512">770a02aef71374dd0e8d9e894a0d4875cbaf20167f18c87d708a983f3d322822e6a498ad38d65184136182c3538bd255f6d348f15bf5191ae88cb561741bdd6b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-datastream@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-datastream</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-datastream</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-streaming-java@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-streaming-java</name>
      <version>2.1.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3a92f86b9a0ce1db03302c0babc863a9</hash>
        <hash alg="SHA-1">11e3370e99254c7ab4731a9cf9fa5a4ea1c348d7</hash>
        <hash alg="SHA-256">54f9c33503e0c36cbbdfc6851bb5a5c0d317a7da67286de6a74e888c65f062a4</hash>
        <hash alg="SHA-512">a2ea5bcf7d90f19e19c770c5b95cc0bc13e965c391d130841000a13fbbb6305695ce7294ed05c2414b7e0b6783e7e1705b98434cd6de515ae08a588ec762a26c</hash>
        <hash alg="SHA-384">8be63d353a94c2bef83deb3b9164ff0467ba3c9c5093e884666c4b5cde4b84f32a7fc6a2892297ee1dd22ffd176b0310</hash>
        <hash alg="SHA3-384">d5a03b5352cbcb9a23754845a879d1b7eba4724e4234929ad59c12f0a591bc3c91ba9646721cf28d2b2f62332d34e3cb</hash>
        <hash alg="SHA3-256">7a68df3a7b4933d3f615e8f1ec1f870e2be6592b931ffc98d9363c539bc1b260</hash>
        <hash alg="SHA3-512">ef62b82c1a35e655ee99f8ec8c5af22d6c51dab1aedfc0572b6b779e904add9bd28f83e68df8f972a48f4675527f62347c1fabfa1444c27608716f7a493b30ef</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-streaming-java@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-streaming-java</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-streaming-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-file-sink-common@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-file-sink-common</name>
      <version>2.1.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">f4b6daf3cf7dee5dac9202863809452a</hash>
        <hash alg="SHA-1">a92dfa2d39c036d56dc6c018ad0d23b0a8ee5c89</hash>
        <hash alg="SHA-256">33e1a5333053493d34f71378a46435b8d01d4fe6ca7c5b20d1952a97988f2b6c</hash>
        <hash alg="SHA-512">b248298586085353f479d5287b6465f355dce2c36f5180c843ca9df4a518ebaf70250fc773be557137f5029ad5cb7aceac8ba1eaf45bca83b2f8d27c44b206e9</hash>
        <hash alg="SHA-384">a3708ff6ca8cb87455fccdccaddda62ff19c052ed882c31b655d7a1e72dd354a8e8ca9f8a0f233494b2f4856cbbd1e44</hash>
        <hash alg="SHA3-384">7a9b3e8113a0182cf4811fefb3a6420a03f1dffbf7f1a8162ae35516914b1b2a784a1b6e7f8032effc0048067adf5dfd</hash>
        <hash alg="SHA3-256">a73d9bb7f4e3601858feae0e3bacef6fb6ed159453494f3566eb044fd21300cb</hash>
        <hash alg="SHA3-512">db24a9cd080ed286e5b897b4e3192d3f6cb21830fb596f75f6566031d941283ab1d9634b73fcf488fd5e0e1aefe3c5ad0ac2df20f3b1adb12548f803eaebf5db</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-file-sink-common@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-connectors/flink-file-sink-common</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-connectors/flink-file-sink-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-math3</name>
      <version>3.6.1</version>
      <description>The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.</description>
      <hashes>
        <hash alg="MD5">5b730d97e4e6368069de1983937c508e</hash>
        <hash alg="SHA-1">e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf</hash>
        <hash alg="SHA-256">1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308</hash>
        <hash alg="SHA-512">8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226</hash>
        <hash alg="SHA-384">95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4</hash>
        <hash alg="SHA3-384">f85bb3e46a00fc4940a3be1331301302b0eb728e2d1fe2c1842d4761e5a0bc7a420c0c705ae60250ca1c7b03d3694b9e</hash>
        <hash alg="SHA3-256">919c15ae4b1aef2a58aa6ea4b700bc5562e78dbc382f3393169425ca91ad368c</hash>
        <hash alg="SHA3-512">dbe54d586c898cdbd7df6c31c131ca3525db17fcea5c7f5da8cbfe617e2afc667289290c76771ec5c9567a56fb2b177b0a31d67abcc656410c90287da4d88999</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-math/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/MATH</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-math.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-common@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-common</name>
      <version>2.1.0</version>
      <description>This module contains extension points of the Table/SQL API.
		It allows for implementing user-defined functions, custom
		formats, etc. with minimal dependencies.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f7090acfe6db1745a0927eaa5c521651</hash>
        <hash alg="SHA-1">039c8667ac4bdae3e5389a4483970e6b1cbbe8bb</hash>
        <hash alg="SHA-256">772cee6db41433e11aa94e0f928af19b14e3570336140c561822c2fb52c90b85</hash>
        <hash alg="SHA-512">4835019dd3c940e7c85e0cfb1cd3078900c1c63dd4cf22a19116d218de702e768d5794144870af389e481e56d919f6ec46882a466b50e030ba4faee679f8078a</hash>
        <hash alg="SHA-384">0513c7b9e79db011a5375037ac074149673f6b5caa9921f78c4301594f49f33e8472b9e0d110e1bf2911784ba527032b</hash>
        <hash alg="SHA3-384">486829ad13731ce918477ab20b744fac353c0608ac4ea172d4c1efb7583d0d436a3b1cc5b593e4b5287005dbadb006fb</hash>
        <hash alg="SHA3-256">7b63ac2361342234e87e4b870cc0d93bcccadcb03774c64bc93f64373b3fda01</hash>
        <hash alg="SHA3-512">69f33fc05ecccfa7569543a3c4a44113240c26f453cb3ab03af0926da590caf4980e8d9a530b76e81379a6c672512c83367e263916ff8764d4f386800fb3f57a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-common@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-table/flink-table-common</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-table/flink-table-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar">
      <group>com.ibm.icu</group>
      <name>icu4j</name>
      <version>67.1</version>
      <description>International Component for Unicode for Java (ICU4J) is a mature, widely used Java library
    providing Unicode and Globalization support</description>
      <hashes>
        <hash alg="MD5">046a5f59abf6b67a464dea584d11e59d</hash>
        <hash alg="SHA-1">2e159807158095566726600534034030dddab6d0</hash>
        <hash alg="SHA-256">c4eb904caf5fba968a2f1a3b8aef14df801e9329b21697209ca30bfcf153867d</hash>
        <hash alg="SHA-512">b3036b162356a0a5dad39eee611dae27c6fbe53f9e5ec1f3529ab02d49d97093b58602f43dd855433a0bbe02f6253e46a9d1899911c8e2e73001ab2c9a79d68d</hash>
        <hash alg="SHA-384">c2b28649d0ef9bf68f258a9f432c627a553ead79670f0a7ada3d986091a0001c5ab9eca372f792734bff733370a61fb1</hash>
        <hash alg="SHA3-384">3726bfa8b77bd0cdd66564944044d82dca3ee1fcf2594ebf1a7acc6752faf4c11892a1744af27e5528dc4b991e4cd0c0</hash>
        <hash alg="SHA3-256">cb19cec2baad1dc610267b2c98325f5c742230caf2247ef6297dfe8d9be9f11d</hash>
        <hash alg="SHA3-512">f46e4ead1cc1c05c3825716485ce79c890500a5356f8e7ca578f3080c09fb2460fb1aed81d65d345c402706906ea4e96afc0ff03c50fb0ac5bbacd351a8f11ec</hash>
      </hashes>
      <licenses>
        <license>
          <name>Unicode/ICU License</name>
          <url>https://raw.githubusercontent.com/unicode-org/icu/master/icu4c/LICENSE</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.ibm.icu/icu4j@67.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://icu-project.org/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://unicode-org.atlassian.net/projects/ICU</url></reference><reference type="mailing-list"><url>http://sourceforge.net/mailarchive/forum.php?forum_name=icu-support</url></reference><reference type="vcs"><url>https://github.com/unicode-org/icu</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-runtime@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-runtime</name>
      <version>2.1.0</version>
      <description>This module contains classes that are required by a task manager for
		execution of table programs.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">67d1a5f7fcf364685bb787170349c441</hash>
        <hash alg="SHA-1">9a8bcfd0fb78df7d0e3f4252b587de29b74bf003</hash>
        <hash alg="SHA-256">6978b242f45607e7aecac168838afbb0c6d65979fc528c95a4ae69bf88c258b5</hash>
        <hash alg="SHA-512">f1eda4db150bf9699b675897fc56d715b4c673b5e51d7b52120253b30260ef0095e44432abdc50aa7b2c055712519c7f9bf12ca567671d847d46fd247ca3b929</hash>
        <hash alg="SHA-384">b573d391a64869b32d997634b59fc9c6db26022f45f8fbb5afb030e905afc40bc37b6c82ea485608d994e50e15b79ccb</hash>
        <hash alg="SHA3-384">95ebd95e1bf0fda7c2fd26647496a7febd3b30c2bb89d8c40375538677b4ce420c6604775f4441afe44694defc1b8e42</hash>
        <hash alg="SHA3-256">3b3de6fe6c9c5bec75a33be302d50d65fa131e9bdce50e0bce05a5575e077419</hash>
        <hash alg="SHA3-512">67ff40baaba6c203f8675078483cb40d6aaac601ca4048c8b30f70b82c44796e60aec4396dafc74620e47643f04267da3cc1f9f7237fc8762f25c120da9aa921</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-runtime@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-table/flink-table-runtime</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-table/flink-table-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-api-java@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-api-java</name>
      <version>2.1.0</version>
      <description>This module contains the Table/SQL API for writing table programs
		within the table ecosystem using the Java programming language.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4ba7648017a140c80c150fc3b4b466af</hash>
        <hash alg="SHA-1">908d01054001d046e7d41379637d8ad5f907b4af</hash>
        <hash alg="SHA-256">e3528cb8b9769213aef92f706207b583de36700dfbb1e24643a73f4d6a482960</hash>
        <hash alg="SHA-512">f5e35a4886d35327f7fa6c62002b30ea3ad7f9871b6938d9236f873e1f00a80e1250ced58ba60722272d6f9ca78182796a6011c5034ae046c3e5e7846b11ab0f</hash>
        <hash alg="SHA-384">a9b56b2c09418b72b3bd98481d6546ba8d81c6aace019f0a5883a74b45482c4f2ecf318315080c3a9bbcba611db81384</hash>
        <hash alg="SHA3-384">d19d9524c10a5f0714f8eb2935470904db72f8b6d26f03e2422635f2e9c47480830013ddb2a8a8efba99ef837efd03cb</hash>
        <hash alg="SHA3-256">37f45d06c7bb0332a9192e010aea99890f0d4682efb541588f58ab6bb4312681</hash>
        <hash alg="SHA3-512">aae9f4ccbe043c9ec034b203f5b09565e7cf6dc58657f57281f8b9f9fba52b4d0a28e5a26604539b86911423f84c625f3e01cd8f5c1f841af363f8472980d353</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-api-java@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-table/flink-table-api-java</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-table/flink-table-api-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-api-java-bridge@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-api-java-bridge</name>
      <version>2.1.0</version>
      <description>This module contains the Table/SQL API for writing table programs
		that interact with other Flink APIs using the Java programming language.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">24b06c04644c1af7f86b3f22d62685de</hash>
        <hash alg="SHA-1">5683c1dc18d6fe6107caaf64b5917749ab7bd23d</hash>
        <hash alg="SHA-256">4709edc3b817dff2d0637ac088ff957628a4cce012d42fa0451bfe37a3ae76d2</hash>
        <hash alg="SHA-512">bdc55de08c64c2639d34deb30569acbe7385fdf406e53ce0cdeb160ad2d3c13e5ba760c303746141a20cc1870018d988965c53133ff76e60ebe4debf64b3f844</hash>
        <hash alg="SHA-384">9b693afe6f659c28d7542a7a4ef60593a67c5efb52efa2bbbd79b8fa97361af9069dce8b891e1b09ef9af51c3b303e1c</hash>
        <hash alg="SHA3-384">68a47d117811e4a1a5f0e00acdae8807ae2a5d1b9f3f0ee483aaef90673b2e5b279cb78915bafbfa8b0f39cce932d198</hash>
        <hash alg="SHA3-256">5498189a82a055427abde52c65cd2033d9ca4769b599fe882b66376eea4f8104</hash>
        <hash alg="SHA3-512">033594a63d9fa9c965a14c040b0f809dbed0eb0d1f97acbca602c2ca10b37df31b54b6f25adb6e7b938fdfc6cd0cef8316d9e14437a64c73de3274b7e16dea60</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-api-java-bridge@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-table/flink-table-api-java-bridge</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-table/flink-table-api-java-bridge</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-api-bridge-base@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-api-bridge-base</name>
      <version>2.1.0</version>
      <description>This module contains the base code for bridging between Table API and DataStream API for
		both Java and Scala.</description>
      <hashes>
        <hash alg="MD5">0096f1dfb3a2ce9b7580c758649f2a39</hash>
        <hash alg="SHA-1">da9dba69771a2d2297bbc1d646c60ecfd8c9f57c</hash>
        <hash alg="SHA-256">55fab4deb02d82e0a63e1ba14cb76979d175999e90171a1ee7c7b8411548f209</hash>
        <hash alg="SHA-512">7089872b67340ee4f113f6b95411045fd59d72e0cb50bfde675c528b330bc8427574cc3808dce17f6de017bcb77e4cc3851228c3f0be9875cdc8f37a091d6260</hash>
        <hash alg="SHA-384">2ce6c9b35da428ec9d097298d1e4539a35e19929375fb855258e097ebf5240e06a776e1327dd13663420ded5f51d3182</hash>
        <hash alg="SHA3-384">0e4e95b4aab0d08de481cfcba8a0371bfe77d9a1d311d6ea20081fe93fb3ac6b824b6fbb847ac2d52e2c0cbf69232788</hash>
        <hash alg="SHA3-256">b86b11b411f74f2a56d2fc99b8afeabad6ad4cd9cbb941fef73108bad4b2abaa</hash>
        <hash alg="SHA3-512">3e129adb483d870dbd7b3a9e09eb46b7bcf3759b7b0768fea97d818e4ac784e2f51e3398ccbac116bcf207ce9ab9aa785b1cb881785995226f9a4ab655186a26</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-api-bridge-base@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-table/flink-table-api-bridge-base</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-table/flink-table-api-bridge-base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-cep@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-cep</name>
      <version>2.1.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">b94c062a2e5220276fb8f55929e9e2b2</hash>
        <hash alg="SHA-1">033f9ede0dbaee7d72e5ac30db226179d4dd013f</hash>
        <hash alg="SHA-256">540f5437ddc79eeec37031c3c45aefc1f37f24d3683c0b61a2d726d914aee8db</hash>
        <hash alg="SHA-512">caaaa71a7d36d4abb098e0fe2043acfdd59b282f7f818bc0e6be8847971bd475c83f2107e74df04b4c611b4a4194b403d8dcdc5f269986c4632fd148eab75b60</hash>
        <hash alg="SHA-384">e01d1a6a2f51acc5697cdb86704e2e0ffcb5fbce59b8c3c9e6509c15f7b4963e0da20b23f1bee512231202a56039011e</hash>
        <hash alg="SHA3-384">2d7a2473e2f9ec60a94bea90e396b57bdea6089cd6499818dcefc75bb89db2460a18c1cbcbc35368c6d68f824167a2ab</hash>
        <hash alg="SHA3-256">9fade664e58e39eedce249cce594291eface3cf5ca34b45b9da400a4477f4b13</hash>
        <hash alg="SHA3-512">be304d98f6a668e51afaf5092a0dddc6b9e6c5c1c0f16e0f3a215396cadfc27fa998147d554ade86e5ff9d9835e23bebd23944b26885096e29c7cf5a30cbbda8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-cep@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-libraries/flink-cep</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-libraries/flink-cep</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-connector-files@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-connector-files</name>
      <version>2.1.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">7d2cdf1cabc87af6b253f353690ff58e</hash>
        <hash alg="SHA-1">0d22b8b6e38ac44cec4514601ab8e9a483718ca2</hash>
        <hash alg="SHA-256">39bb47744f60a325fd99f8ea274eee7beb3f1fc600698b5e7ba64b824e23e473</hash>
        <hash alg="SHA-512">f4d22f66b2cc5927f3ce9407808d52556150be1bc892aec679f8a1387ff0c15438e91055351fcf4a99e88117eb5f91746a0ddab38c67a7f61d677adc44c872b1</hash>
        <hash alg="SHA-384">f73fbe247649d9bcdf0b9eef25f11eee9dd4448be21dce624e5af8f4f98fefe28f779c7b3edc7f714bebc20754ded344</hash>
        <hash alg="SHA3-384">c5e7a3fe98f51ddf69f5d571b5ee4b266e7691492d690bfb878d55ecb79fb3440763f3654e1ae5178ee9ce492ecf3906</hash>
        <hash alg="SHA3-256">253fa5f60f7ba194ce5741aa8fab7c5b7c9bb7a301e5e0f7e72d3332a4b9ac69</hash>
        <hash alg="SHA3-512">dabb7bf18a7dcea8246ddfadfce6ecd9b7c0a09dbefc241d8d0c1c9123c854c9c59c8cfadb9855eb464c7238c1314872e55842ca82f020750f3213b0ddd009c1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-connector-files@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-connectors/flink-connector-files</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-connectors/flink-connector-files</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-csv@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-csv</name>
      <version>2.1.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">17eceb24d37af4933037fe184d02c38d</hash>
        <hash alg="SHA-1">93c573149aae4f9575a78fba5877aa30edc5010d</hash>
        <hash alg="SHA-256">6155bbd6952827bf8f8813bf1f9136a48f084c1a8badc517c7be8d57eff59313</hash>
        <hash alg="SHA-512">aa2e0213a4095db666d7da728b6737434b864e6c529f05361d7548c9b9166bfcd422ed49d21e1d6d914047bf72e31b58ee4e2c30eafe33f304830560e8375111</hash>
        <hash alg="SHA-384">d412819640d23d924e49e31a844696f9436dc1f98774a949a8be8d0187816f3191406bf535af774372779aff857640df</hash>
        <hash alg="SHA3-384">4fa40ade3702b4b77e419fe9308b584ae0b760e72de69904e2c9c8a68b6fa27cc90bb84d5d75e90703d7b498d0b5a8f7</hash>
        <hash alg="SHA3-256">49c38a70f00e9cad51aacc7738f4f3f5e420cf01e82f5676d485b460abfcd61d</hash>
        <hash alg="SHA3-512">f02bcf688d484d898009ae547a28a460d7a2591b8d4ee69a5fc38a21ac60d950f74f3c62f5e8465ef45f8e5d2c2606585e56091741c05abdd51d32e9868abb2c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-csv@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-formats/flink-csv</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-formats/flink-csv</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-avro@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-avro</name>
      <version>2.1.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5a7d10f44c14f44f99e322203ce12d23</hash>
        <hash alg="SHA-1">37b32b0778959f59156e20585a0331d4d3697401</hash>
        <hash alg="SHA-256">0a4def008d6f939f812439c03900e7b20bb4fe1905097a1d21d404721bdb26a3</hash>
        <hash alg="SHA-512">d0f5680939eefedb10dac892c4892b8268412d794390794e43f12e745ac4e05029446f5b4b4d2f69a21c5e3aa37caa41fa20154f9f76c8c0eee2a17f11e05495</hash>
        <hash alg="SHA-384">136d98c642d50503b516b87535a4d1ba1677adb4086247bcd48679ca9ed784500505de247b5405858e849c95d0a0cbc4</hash>
        <hash alg="SHA3-384">3836e63b2f37f6765c8776917c2a2da4579f046c0984ae46aa51fa18457dff74aec2381c879e72554081f9f30d7fbb22</hash>
        <hash alg="SHA3-256">758e6bb9a5acadaf0c3597563fc17f902c51cb561337a8d02c55640d19ab9401</hash>
        <hash alg="SHA3-512">1f4659c1a0ae713a915aef4caee2a7e3a15957a234f898dc117f9b7bbc7d128c3f9d82a3c32faae5725cd8f671903c199ba610a4c2f7b69ac9e1f128cb2bdae4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-avro@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-formats/flink-avro</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-formats/flink-avro</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.avro/avro@1.11.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.avro</group>
      <name>avro</name>
      <version>1.11.4</version>
      <description>Avro core components</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">915002011d651686f94b4e20d25234a6</hash>
        <hash alg="SHA-1">25d54640c4a17aa342490c4c63c172759361bf56</hash>
        <hash alg="SHA-256">eeba11b77070b9aa6337d886fdf778f6695f6c4c3dcfd2a02389925c885079fa</hash>
        <hash alg="SHA-512">2133473bcafb3997f70dd0dc44e76872beed30910dc88522d898e639df0c58f8fefec4c734e46bf0244cf2ca1b49e90b0fdf5c9d7ccd06b41f8f9ad98da1cca5</hash>
        <hash alg="SHA-384">701113d1e68c4582aad203692567bff7538d6ac2707195b413e9f831215e0c8622e83383adcc822a353524c28aba5dda</hash>
        <hash alg="SHA3-384">017e0363dfdf0019a2e75785c1f7a8aebe1a61f2c96393bacea3238d8f010d3d82ddcf3466d474ebb113ef67e9ecf192</hash>
        <hash alg="SHA3-256">135d7a5a6e9723e77cee8ede0687f459f8fbb828f4111dc351f747b2b72eb0dd</hash>
        <hash alg="SHA3-512">04d0041f4d215b51a446ec9c2b2998042285f81d85dd316f046b46420b71d459e3f66530ddbc2b98772ee5ced0d8788cb21c46b09d2139d311930ce5424ac3b9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.avro/avro@1.11.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://avro.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/AVRO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/avro-dev/</url></reference><reference type="vcs"><url>scm:git:https://github.com/apache/avro/avro-parent/avro</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-json@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-json</name>
      <version>2.1.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e584b44a5d693dcb6e380f24ab6b9879</hash>
        <hash alg="SHA-1">4c74dea062d9357c3c653928af87ed22f2174c50</hash>
        <hash alg="SHA-256">4be457f02a294a9faf16f640767989fd3771bece0a51814238a31fdd10e02fb0</hash>
        <hash alg="SHA-512">f5c6a82886595ce2883561312b91adfef68ec60a5c546ba7ca928a453a2c9a568c35b01b752eb359aca9350002fbc8160bcb27e2be7249741b38a1b14dab5342</hash>
        <hash alg="SHA-384">c8ba47a51258a12ac36aeddf2b3c73ca7984e4570b3540f18a4f38b515746f69c4338004572e45a2cd3be97db0b28a48</hash>
        <hash alg="SHA3-384">a113b8be583b35574859e261df10b64609326e680258d7100ef436be23e06f2e2c9421c8a6ad4495c6655f034a2986bc</hash>
        <hash alg="SHA3-256">f7e60071f96118e4e644a82a04278b4373a80015c37448fe7d93c1be90838671</hash>
        <hash alg="SHA3-512">e79b4b5abec7b180e2826f2ed5385c49ed48a98c626157672f440436a22182eafd80c561f4da8c32325baa8028ad381dbbd0968ac69d5a4a338d040c995f7858</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-json@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-formats/flink-json</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-formats/flink-json</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.beam/beam-runners-java-fn-execution@2.54.0?type=jar">
      <group>org.apache.beam</group>
      <name>beam-runners-java-fn-execution</name>
      <version>2.54.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a386422fa56a70f18d3de1381eac5a7a</hash>
        <hash alg="SHA-1">eef972ef1ed816b2cf8851b22b2bfd7b03a38d4c</hash>
        <hash alg="SHA-256">c75cf6ea3ac95e65bc20f12ee01a966f9fcfd66bcbddf9f1864af32b4c4dea6a</hash>
        <hash alg="SHA-512">4ee774dfec5e2d65cef3fed7e629d2027f05005246534edfb9eb057979bc8c288173adaacc039dc16f8eaadb706ab23604b38ebf2d54b64ff043fd4a93a54ec2</hash>
        <hash alg="SHA-384">384bb444fe67752234d090f7ab93c6e7bdb81fb5e7ea47d6592dafcdbf229c7499cdc63a3f8583d00703a6f845a2000a</hash>
        <hash alg="SHA3-384">5dc40f8c1b56b0b5e37585123d79767e6e3a286d65ac5f5d80f9e0200a2887684092a66abb86a4c845f3c47642370e2c</hash>
        <hash alg="SHA3-256">555bdff40beb0a3a5c114dff6ea706914ca8230995faab53e9fa16aff760387f</hash>
        <hash alg="SHA3-512">c33c502480de128ea5de09594d83010c62c85515a0ca8ec2b703426207e92454f4a91569ae1f5f5b2926fdd76be078877f258b22fa8aa333607689d04891c77b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.beam/beam-runners-java-fn-execution@2.54.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://beam.apache.org</url></reference><reference type="issue-tracker"><url>https://github.com/apache/beam/issues</url></reference><reference type="mailing-list"><url>http://www.mail-archive.com/dev%beam.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=beam.git;a=summary</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@3.42.0?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>3.42.0</version>
      <description>checker-qual contains annotations (type qualifiers) that a programmer
writes to specify Java code for type-checking by the Checker Framework.</description>
      <hashes>
        <hash alg="MD5">4c55448dcbfe9c3702f7758fc8fe0086</hash>
        <hash alg="SHA-1">638ec33f363a94d41a4f03c3e7d3dcfba64e402d</hash>
        <hash alg="SHA-256">ccaedd33af0b7894d9f2f3b644f4d19e43928e32902e61ac4d10777830f5aac7</hash>
        <hash alg="SHA-512">85f66a42a079b4578256b5b6daa4b1ba5aa684614982cab2c9cd83324f2c3fcdde420de6ad51b2f439c4c809be10b376f80f5a45110a1ee6caa59e6298c0ec95</hash>
        <hash alg="SHA-384">1ee2061f8da04e77b577030edc21904b0700aceb241fcb5a549767d44c9b71267217850dc89aca41e65d188e148f8d58</hash>
        <hash alg="SHA3-384">5d89ffdcafb432d84503340827bc6fae5f6fc290fde59c1eb491996c15fd92ad00dfd1e781d8c9d6ef4ca9c4f3e5b264</hash>
        <hash alg="SHA3-256">25c061a632fc0263f974761afad7f4209dd6582a461f3049e39d260640308393</hash>
        <hash alg="SHA3-512">75a743fb2577bb3252de16a86cf10922626689e75918136c83caa3a26db669f7c770779cfb9b9003ba5b181ffc9f7d871ab250cccfc4ff19e587a0384b448929</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@3.42.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://checkerframework.org/</url></reference><reference type="vcs"><url>https://github.com/typetools/checker-framework.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.beam/beam-vendor-guava-32_1_2-jre@0.1?type=jar">
      <group>org.apache.beam</group>
      <name>beam-vendor-guava-32_1_2-jre</name>
      <version>0.1</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1b58910e0e700cc7f54bc7016630ec8b</hash>
        <hash alg="SHA-1">30a09412a47c4d79a18fa7996c7d4909efbfcdd3</hash>
        <hash alg="SHA-256">44669a8f43cdef8ac20e02484ead0d1cf8199d47e00c7f1828b579b7dfb0f9a2</hash>
        <hash alg="SHA-512">1dce3a194935853ed6374dcd5500175bab6102703bbbeea08f2e02e89793c4f16fffc80a101bb57ea7ed8b1402535ce7318730c31e7728ed54fccf424f2b08b9</hash>
        <hash alg="SHA-384">c8529b05edfcf6e30f2f677afddccfc6c934d689f9e7c573408fb9907914618c32dca2443dc0cae706ae05151bada7ee</hash>
        <hash alg="SHA3-384">3be8404fd0d1b730afd9427ff01838d90091bfdc23e616b50e5d9021e0dc4651cc4935c3b53c0007ed69c91522f17137</hash>
        <hash alg="SHA3-256">f51b8d31b71aefa5d3084317b98d64135922349e3120d5d08704468c69aceaad</hash>
        <hash alg="SHA3-512">9bf93be4d828805b9500a6e1d1e3a8bb4bb0db9ae9a8da2be07487a5a6bb9e143db2e78966bfcdeec893c13f63b008f9c4d7260dfe9706917862e08d340437a2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.beam/beam-vendor-guava-32_1_2-jre@0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://beam.apache.org</url></reference><reference type="issue-tracker"><url>https://github.com/apache/beam/issues</url></reference><reference type="mailing-list"><url>http://www.mail-archive.com/dev%beam.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=beam.git;a=summary</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.beam/beam-runners-core-construction-java@2.54.0?type=jar">
      <group>org.apache.beam</group>
      <name>beam-runners-core-construction-java</name>
      <version>2.54.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">35dddfc0439c4ff4b2a2770fe251fed5</hash>
        <hash alg="SHA-1">89307781a334c05a95d56bcdc00553696736a3bf</hash>
        <hash alg="SHA-256">a5f04e48b46217bff14fda907d60d9e3d427dc1516409dadb03f3c7fde44bfaf</hash>
        <hash alg="SHA-512">296516a94dfb586e1aa3b011067a2f62f3482aa0c45ae633e3c0beaf0c9aca75a47d86d539c9b29bf8958fac17f41625357c40eca1b60ab3f48a72d0713dfeaa</hash>
        <hash alg="SHA-384">6b58ae9a765df7fd43f7d9d567882c3c7c2844c4bd18e4ab7e3c84413979facb624e4c227f7d314a2c8af2804f45cee5</hash>
        <hash alg="SHA3-384">476a198d52e21afa011fe80c66e0a52dbebc29e8120dd15202871c4de931ec6658b59652f49e2a8473ea7a8711e84ff0</hash>
        <hash alg="SHA3-256">97f02a5a3ae772ea2cbef4ff7fc180656a131d4f9861df153f6235f24905a3fe</hash>
        <hash alg="SHA3-512">dcd5dbc1fd8586f3b93ede47852e8dcef1c671ed871e481486d7915bfca59f619e23ad0df3cc8313ab443649183dc66588fe15abb2780cd458f1fb9415f5492c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.beam/beam-runners-core-construction-java@2.54.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://beam.apache.org</url></reference><reference type="issue-tracker"><url>https://github.com/apache/beam/issues</url></reference><reference type="mailing-list"><url>http://www.mail-archive.com/dev%beam.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=beam.git;a=summary</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.beam/beam-sdks-java-extensions-avro@2.54.0?type=jar">
      <group>org.apache.beam</group>
      <name>beam-sdks-java-extensions-avro</name>
      <version>2.54.0</version>
      <hashes>
        <hash alg="MD5">6c910c66fcc7fd8971aabaa011282c6b</hash>
        <hash alg="SHA-1">0cfcfcb990de8837cc4a2a1f7a4030c7f38159dd</hash>
        <hash alg="SHA-256">8e091150ca9326d052596c03a9434ff6795d7c1df7919b0e61df5756ac5e313b</hash>
        <hash alg="SHA-512">4e34bb8b182e3eb352a1afefbf84e62b3cbbf5c75bb60bb2b993abaa000a7b220c57ddcd246f4932e638d307122fc4ef78b68256853cd8098765e233ff6aace0</hash>
        <hash alg="SHA-384">6a1d7b735b306c688a0fdd61c2d5cdca5471dbeafd6dae58ea424f64016fd96eb5435cf64779ab4313d03ec5e64933fa</hash>
        <hash alg="SHA3-384">2e3c41f4b802106fdf848fee1b4ae269cf3c2fa6bb0df355d3d0046c0a170117874491e8eb4911fdf7e81609d7c47445</hash>
        <hash alg="SHA3-256">7fdd24b090b272cfb3a9951741a8dc8e0c9040b5496803c701f80075babb7beb</hash>
        <hash alg="SHA3-512">86a2d081150e7edaa009508058f28a1f0a09b3bfd19841ea658d11c0af975f01170bdb137546723f13aaf0f7eca6422724cd22aabd771347dfdb366f2b8b552b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.beam/beam-sdks-java-extensions-avro@2.54.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://beam.apache.org</url></reference><reference type="issue-tracker"><url>https://github.com/apache/beam/issues</url></reference><reference type="mailing-list"><url>http://www.mail-archive.com/dev%beam.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=beam.git;a=summary</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.beam/beam-sdks-java-transform-service-launcher@2.54.0?type=jar">
      <group>org.apache.beam</group>
      <name>beam-sdks-java-transform-service-launcher</name>
      <version>2.54.0</version>
      <description>Contains core code of the transform service.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4f723539e53c670078496306ef494de1</hash>
        <hash alg="SHA-1">af8a9fe3595fe68a03e8054d130a81cf33c561fa</hash>
        <hash alg="SHA-256">1e54b1df6432cbbc47b84ff59f0b044834a61b33c33e9d178728c8e3714230c8</hash>
        <hash alg="SHA-512">e3a5ed685eec683f81225ab0a929c7b31836125c0a5a94430b354bff42f2dccd12429719d5aefa0825d2f17599a86c37132f496a1d3104b33d4a244c5492e46f</hash>
        <hash alg="SHA-384">86807d3767f56863fea9d9d52fe8fd8b5905b65f5fe3072259e1bb7d8d5ce7c53f4b105edc79dc327ded9d6c9f0d8c4d</hash>
        <hash alg="SHA3-384">f4734b42e70e9c2631632fc070e39676581f79dd368468d9f4672f7697d24510ef7b4403d058281fb917ef348e2cae63</hash>
        <hash alg="SHA3-256">2c8cdbc6b95e1b241b35f85c0750c46bf368806ed9f0f0e4dc7469ff0e1b5023</hash>
        <hash alg="SHA3-512">386cdf06ba2d41b950068721517ab9dbbf5b01b10b57c819c08f136501f6d9275ddd9920b486aa9d4a6f8bc91da2de3643ee88a7f4398b434e1feb269b289e34</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.beam/beam-sdks-java-transform-service-launcher@2.54.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://beam.apache.org</url></reference><reference type="issue-tracker"><url>https://github.com/apache/beam/issues</url></reference><reference type="mailing-list"><url>http://www.mail-archive.com/dev%beam.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=beam.git;a=summary</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/args4j/args4j@2.33?type=jar">
      <publisher>Kohsuke Kawaguchi</publisher>
      <group>args4j</group>
      <name>args4j</name>
      <version>2.33</version>
      <description>args4j : Java command line arguments parser</description>
      <hashes>
        <hash alg="MD5">0a6d515f76b15d29e3cd529de9319739</hash>
        <hash alg="SHA-1">bd87a75374a6d6523de82fef51fc3cfe9baf9fc9</hash>
        <hash alg="SHA-256">91ddeaba0b24adce72291c618c00bbdce1c884755f6c4dba9c5c46e871c69ed6</hash>
        <hash alg="SHA-512">89bd7cb2cfeef19e5019982aef225b0e4cedbaa1e56786dc71fd277f560d2ddb37026fc5ba723d7469f2ea9e06944aff7e9890319954e4c6f0c147c65ca30b81</hash>
        <hash alg="SHA-384">d747f1f7f299416a4957c80a696e1f8c4b85f736ab55e684ed5f7b7b67b11ef10a1ffe800442b5e6038c0c7cd301882c</hash>
        <hash alg="SHA3-384">ed0ca2e4e130bc3671bad3ded955281cf7ae244e690d30ad5e5c9a01a8b8f650a7f0414d3f9416718af47882200739a5</hash>
        <hash alg="SHA3-256">7e7a423d0e9da1753ca2df7b424226f7ffbe38f74035c5112236b3938571dfb4</hash>
        <hash alg="SHA3-512">189ec81ab77531d4a10b35b2dd1358b2e7738abd1c121e8b818cd4bd421fe65d8332eb6340024c7a0f60bb171147c151b51ca99c8558c55926850ce78c5efb00</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/args4j/args4j@2.33?type=jar</purl>
      <externalReferences><reference type="website"><url>http://args4j.kohsuke.org/args4j/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://args4j.dev.java.net/issues</url></reference><reference type="mailing-list"><url>https://args4j.dev.java.net/servlets/SummarizeList?listName=users</url></reference><reference type="vcs"><url>http://args4j.kohsuke.org/args4j/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.github.classgraph/classgraph@4.8.162?type=jar">
      <group>io.github.classgraph</group>
      <name>classgraph</name>
      <version>4.8.162</version>
      <description>The uber-fast, ultra-lightweight classpath and module scanner for JVM languages.</description>
      <hashes>
        <hash alg="MD5">3ded56585fa8cb2900b1abc98386553f</hash>
        <hash alg="SHA-1">85bc1625bc8aac51ad32971ebb26a3e35cb97356</hash>
        <hash alg="SHA-256">ea30b2d5e29e89d52706bcecf7a6ae3b44682d4a1566a5f22b9453f9be2a970c</hash>
        <hash alg="SHA-512">a117092f4ab77ef89b3b83a45b9e33c0360cb18098df17da77e5d765a6b5cea1fae6190399217236c0d970f2b3603bc8f408c2471cf8854de1282dba7525c335</hash>
        <hash alg="SHA-384">2e7c901ee92224d5229213d1301b25fa8e3998dd53b709a848b53d74dbde5bfc6eb0b0d76e692046652f4f6376f5ff81</hash>
        <hash alg="SHA3-384">66a3e28f6098449cf4bebc02e90d8c392dbf84f0efa27766ab4ddb684e2b5592b87cab87cefc390b4716b948c7875c02</hash>
        <hash alg="SHA3-256">a5d97a1dd197a393c56641984d385265dd517e9014434e5d32d1f40cda684f90</hash>
        <hash alg="SHA3-512">0c1328544e1778aba3724768052b20af1bba39cedd17d0324a58778987dbc0c766fe1ac7c59d11331dbe07951f478edb5a40e68c77f8a64654d4b9bb4456c75b</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.github.classgraph/classgraph@4.8.162?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/classgraph/classgraph</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/classgraph/classgraph/issues</url></reference><reference type="vcs"><url>https://github.com/classgraph/classgraph</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.beam/beam-model-pipeline@2.54.0?type=jar">
      <group>org.apache.beam</group>
      <name>beam-model-pipeline</name>
      <version>2.54.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">df2be4f0f75479908dc1ebcbbd90a517</hash>
        <hash alg="SHA-1">e1725220c9cac014fef582679dd02ca863b0120a</hash>
        <hash alg="SHA-256">ba89656338ed7d411611d03a988d533e5a185c81da57860014720a7a4d2dc26a</hash>
        <hash alg="SHA-512">c61dd5e7825425402b29e778cbb1e30fe32ab84bb601415abf135d15f693d6039936acf11986969252c7ef23416e36343e903a99c41990463bc9a91ad5d23189</hash>
        <hash alg="SHA-384">82fa45d89b2bb4131b5dea555d9be067d49cfb8317405289f570b03d2c1d10d6f8a44464769c9440d9a3e6c04f081344</hash>
        <hash alg="SHA3-384">39027b89410f159742eaa76a846e96b92a57c3a5401ffff4cb36ab3e59700881e02a7f34a0e039064007166a229b9c28</hash>
        <hash alg="SHA3-256">e99b255a3f6239337a624f7bb8914535f078adc71977f2dec145ef88682823d4</hash>
        <hash alg="SHA3-512">2f4e09913ed72b0cc42d1870c10d2b6c5050683083804e221949eac6d071ecba730666d701b2f0917eca49bc8ad8872f77bc9e44d1a7d92c575d956b29ecb0b1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.beam/beam-model-pipeline@2.54.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://beam.apache.org</url></reference><reference type="issue-tracker"><url>https://github.com/apache/beam/issues</url></reference><reference type="mailing-list"><url>http://www.mail-archive.com/dev%beam.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=beam.git;a=summary</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.auto.value/auto-value-annotations@1.8.2?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.auto.value</group>
      <name>auto-value-annotations</name>
      <version>1.8.2</version>
      <description>Immutable value-type code generation for Java 1.6+.</description>
      <hashes>
        <hash alg="MD5">9b5f83eed1eaf5c5ae972d7024542d03</hash>
        <hash alg="SHA-1">546ae662e646e47a544ef68ebb43987a3146b692</hash>
        <hash alg="SHA-256">392a848fc611fff5fd317c2453a9a1bf7775e4f4de9c5af0d688bff57f691f6e</hash>
        <hash alg="SHA-512">631097ac187f39036a9ef807d1c69e0c43f8d65e2abd614d87a5a10f36a48b1ffb2fcc7127ecb1ad9591e7229a673cf302d7ea08d6a788e91462402b528dc798</hash>
        <hash alg="SHA-384">76854dd7e5d7f1167234f513dd8a6d40acbc79bdbc31b5d9a9af2d0ecb91758ce610b2dd0ea729d2489e5424d6f0783b</hash>
        <hash alg="SHA3-384">36afa7325214d8371ee1d37f0972f79c2e3a214cd6dfc0035ab8e5c2d99f291d1e7318033aa8fd4eefc99b3e7a5877e9</hash>
        <hash alg="SHA3-256">ef6ea70b38ceb0926f9d1deb137cd0b5d6c3437e4468032109eba7cd73966261</hash>
        <hash alg="SHA3-512">5176ff77d3482d45fee64743456c5a78e929146ad715bde0b4a02f0b2cabd0256c5bac30df9830327eab2475d157fb1e5c3188cefa66f8436353f07ea683338d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.auto.value/auto-value-annotations@1.8.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/auto/tree/master/value</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/google/auto/issues</url></reference><reference type="vcs"><url>http://github.com/google/auto</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpclient</name>
      <version>4.5.13</version>
      <description>Apache HttpComponents Client</description>
      <hashes>
        <hash alg="MD5">40d6b9075fbd28fa10292a45a0db9457</hash>
        <hash alg="SHA-1">e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada</hash>
        <hash alg="SHA-256">6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743</hash>
        <hash alg="SHA-512">3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089</hash>
        <hash alg="SHA-384">093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99</hash>
        <hash alg="SHA3-384">cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d</hash>
        <hash alg="SHA3-256">710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c</hash>
        <hash alg="SHA3-512">276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar</purl>
      <externalReferences><reference type="website"><url>http://hc.apache.org/httpcomponents-client</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCLIENT</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url></reference><reference type="vcs"><url>https://github.com/apache/httpcomponents-client/tree/4.5.13/httpclient</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.1.3</version>
      <description>Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <hashes>
        <hash alg="MD5">92eb5aabc1b47287de53d45c086a435c</hash>
        <hash alg="SHA-1">f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f</hash>
        <hash alg="SHA-256">70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784</hash>
        <hash alg="SHA-512">e5d1fc8ec4544e1fa0f7c4aae8dbcca466c4987bc92fbbc430b054b10d646b745add4a754b1be9d50edd64330c798c53173a97289db57a966312e16f934e9d1f</hash>
        <hash alg="SHA-384">00dc41783f4081585e20adcfe83fd4dbb6b5a27236ee633d7e53dedcbca83ba5e5f0ca68d31f95e9c724b365e4c67499</hash>
        <hash alg="SHA3-384">6915e597821aa2fed7f4b05f4de3476364074ab5cee7e13b4eb5b94a9d297b58cb391c6b730e6ea0d4e81e323a90d002</hash>
        <hash alg="SHA3-256">c49c80e2576bf037fc871e70df8708f5e35c0977a907e966c0334e9fac17b297</hash>
        <hash alg="SHA3-512">b74b6e6d771005014614774d059a4e1ceab929c0678839846d143e56e4724455242ffa3d5d411c6554a41e1f66fe1f94c51472d80c07d44c02a2f9a6715d8c7d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-logging/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LOGGING</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/commons/proper/logging/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.15</version>
      <description>The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <hashes>
        <hash alg="MD5">303baf002ce6d382198090aedd9d79a2</hash>
        <hash alg="SHA-1">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>
        <hash alg="SHA-256">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>
        <hash alg="SHA-512">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>
        <hash alg="SHA-384">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>
        <hash alg="SHA3-384">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>
        <hash alg="SHA3-256">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>
        <hash alg="SHA3-512">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-codec/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CODEC</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://github.com/apache/commons-codec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpcore</name>
      <version>4.4.14</version>
      <description>Apache HttpComponents Core (blocking I/O)</description>
      <hashes>
        <hash alg="MD5">2b3991eda121042765a5ee299556c200</hash>
        <hash alg="SHA-1">9dd1a631c082d92ecd4bd8fd4cf55026c720a8c1</hash>
        <hash alg="SHA-256">f956209e450cb1d0c51776dfbd23e53e9dd8db9a1298ed62b70bf0944ba63b28</hash>
        <hash alg="SHA-512">f16a652f4a7b87dbf7cb16f8590d54a3f719c4c7b2f8883ce59db2d73be4701b64f2ca8a2c45aca6a5dbeaddeedff0c280a03722f70c076e239b645faa54eff9</hash>
        <hash alg="SHA-384">1cd0a3c120cfb4974573b0f499b2ac8a200aa43506777ed09f9806c6899541605fd355a3b5f44977517dd1cb463e808b</hash>
        <hash alg="SHA3-384">c771301cda89b2c102b76ba7b46222e0ee1898fa1e53fd4d43a7994e4a234a9804f7221feafe0259f0e9db164a5d4576</hash>
        <hash alg="SHA3-256">97a9e2fcd1946204dd8643e504c0ff73904957da5df605d703734f95345d5816</hash>
        <hash alg="SHA3-512">ee6045c3724c2a4983330cf9bc57a46c0fcfc252be455a864953ef5c538ea4aab399c4315f7e5b1a315a48bb8f11cc7492e0735615fd68aa3981fa3ddb4d0a98</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar</purl>
      <externalReferences><reference type="website"><url>http://hc.apache.org/httpcomponents-core-ga</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCORE</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url></reference><reference type="vcs"><url>https://github.com/apache/httpcomponents-core/tree/4.4.14/httpcore</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.1?type=jar">
      <group>org.conscrypt</group>
      <name>conscrypt-openjdk-uber</name>
      <version>2.5.1</version>
      <description>Conscrypt: OpenJdk UberJAR</description>
      <hashes>
        <hash alg="MD5">ee6de6e578762d474b2ca5418e16815b</hash>
        <hash alg="SHA-1">3658b276ab54bd600f754b3c8cf4b7cd77fc61e6</hash>
        <hash alg="SHA-256">01f9c742cb592a151e2e62bd5397a8980628a967001fcdacd4aa4744678685f3</hash>
        <hash alg="SHA-512">033a8e18eae24add9ed1eb2448c5b4adfff903e9b455a44d6aa5e0b39be6c0969b43b789f662564ed63bf6714b389410a531d158a70a886bf388960826a8af7a</hash>
        <hash alg="SHA-384">5374aaaaafa4897319b94e0360b14960d71f0de7c332d9226e8397c27d4ab81ce6b062a414b7d51fbc743b2d7bfd4ac3</hash>
        <hash alg="SHA3-384">bac701f38f16b135c7ccad4fd412961e9847159c66f9b0246fbefac1c56afa8a3af057b0e4e03131d00d7763e2b7b308</hash>
        <hash alg="SHA3-256">29ffa329d6e77edbd826f1478af8b1723d62ad245519c90c17040c7d124690ac</hash>
        <hash alg="SHA3-512">497b49477a145b2bd63614665e15077730c08493ab119e1d6ccf495f6300a44433758aa364319b23e6622ba3c7d3f591458b518d82124f60d6fe1ac76214312b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://conscrypt.org/</url></reference><reference type="vcs"><url>https://github.com/google/conscrypt</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.beam/beam-model-fn-execution@2.54.0?type=jar">
      <group>org.apache.beam</group>
      <name>beam-model-fn-execution</name>
      <version>2.54.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e15fae59275686e727e7fa972044e84b</hash>
        <hash alg="SHA-1">0c72efc40e3bfca4debed3a2de237d3e5bb35283</hash>
        <hash alg="SHA-256">4c1713a97f18b907f3ae51eeaa50b9e46ecc8e7f10b25b57f23300bd9062baac</hash>
        <hash alg="SHA-512">841255ba36d97bde9392b0ded35b5d641d83541178511c47d0540392c48101a6b158b8a14be4230be59ef8dfc51449353451208c1634b623b45bef0e0b25cb1c</hash>
        <hash alg="SHA-384">56a169e2a0b0ca1ee4a2ac3325b50d07e509691c1dcf078d737459dc307f142986400ae8661badd649df5556fa57aeb5</hash>
        <hash alg="SHA3-384">f86fbce1bc62e0eba31fb1c04467f36e82dae5c0ca32a78cc351a12e548b62309e5fe6bee673ec5ca3ef185ad11447be</hash>
        <hash alg="SHA3-256">1fd276bfa454205049b5930d7dfb488fac2bdfde59e3b9fcabb364394d77c108</hash>
        <hash alg="SHA3-512">5832fdebffe06cf8ce3af8b1fe82b028ff7381a6e0130d9a293823e375548483921f404f2c75890259b6f1094b37eb958280a647b0242ea23b2b17e9110fd243</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.beam/beam-model-fn-execution@2.54.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://beam.apache.org</url></reference><reference type="issue-tracker"><url>https://github.com/apache/beam/issues</url></reference><reference type="mailing-list"><url>http://www.mail-archive.com/dev%beam.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=beam.git;a=summary</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.beam/beam-sdks-java-core@2.54.0?type=jar">
      <group>org.apache.beam</group>
      <name>beam-sdks-java-core</name>
      <version>2.54.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">257ac6e5513e7b3d76badd04971830ac</hash>
        <hash alg="SHA-1">eb9271e81079575b28e4c250cb294032a7413662</hash>
        <hash alg="SHA-256">052362a247a1b5ea2b81724e77000d33444a33ddbc6bf086dedd3fcfa22a52e1</hash>
        <hash alg="SHA-512">82965704a60b83aa45d7a0822a617db56b6f71fc07b8ce07e33f54bcfcc52c024d0a968b911df9a8b21be6139407b4c6d67e03aaf5972843731b4bf66053cc27</hash>
        <hash alg="SHA-384">324232ce28ea488d74f4248e32bc9a4e99cc0f0acb2d582c8f9badbc35a04fd9aa504ab7f36483b60a9da90dc0ee9449</hash>
        <hash alg="SHA3-384">1f9f87097567fe55786f6e470f225f8375c7c591f152e6fa95af6200840fd641280ccc1c163022b9db7a593d4145a69c</hash>
        <hash alg="SHA3-256">06511868055a5d3c8313108123277b50557660df8079015e3d511d8e74d3178e</hash>
        <hash alg="SHA3-512">bcfecbbe7bb8a5bb96c05f52c34fca69801b18587c7c02c26e50b9a5c0e7f912528beb875745ef51b0d1c6c6edb3b0697448e0793a80d6be2ed2193768818c10</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.beam/beam-sdks-java-core@2.54.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://beam.apache.org</url></reference><reference type="issue-tracker"><url>https://github.com/apache/beam/issues</url></reference><reference type="mailing-list"><url>http://www.mail-archive.com/dev%beam.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=beam.git;a=summary</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.beam/beam-sdks-java-fn-execution@2.54.0?type=jar">
      <group>org.apache.beam</group>
      <name>beam-sdks-java-fn-execution</name>
      <version>2.54.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3d6d77214778906784c745bd076b90fb</hash>
        <hash alg="SHA-1">86575a3cdd8f944f92bdf89863fca2ceaacaabda</hash>
        <hash alg="SHA-256">3f5facd6e20599c94a7f120c2e57742442cff7759abe48c1d8ec03ee9423d391</hash>
        <hash alg="SHA-512">15a9e32f2f03b3b434fe90569a1420ef9af52b5f1c5db8bd42ff538c1bbb91fb0d83d8107fe95ff253fa60a1c88646f9fce0fdf4067d75a7bc977af393238535</hash>
        <hash alg="SHA-384">ea5f6b542a5d739b7d8ed48cc0b5b43567759ee1611b88a3b60e78092baba19f9765b35a4242349ab403b32df0ca0278</hash>
        <hash alg="SHA3-384">9aecb2d1a81dc6ff85545a2e50e5f0caafdc80b5f9fd2640c3a67430bc3fb1754722186814e6e2d6bb80e1e08aae8cc2</hash>
        <hash alg="SHA3-256">238530e6ec64cf03b3c450f87c506ae9881f3f878ae43c395f708a347c3323ba</hash>
        <hash alg="SHA3-512">8aa7925612aa68bad744965103be4e2e6621bfc52904181dc94c6414a8b7c0a4690cb79908d19caa36bf477a1bfb1c8d88c2df0b994f2cad15ef9ff75d20f1a1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.beam/beam-sdks-java-fn-execution@2.54.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://beam.apache.org</url></reference><reference type="issue-tracker"><url>https://github.com/apache/beam/issues</url></reference><reference type="mailing-list"><url>http://www.mail-archive.com/dev%beam.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=beam.git;a=summary</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.beam/beam-vendor-grpc-1_60_1@0.1?type=jar">
      <group>org.apache.beam</group>
      <name>beam-vendor-grpc-1_60_1</name>
      <version>0.1</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8ad198a9677b374e00d1bc40592f1cc9</hash>
        <hash alg="SHA-1">085ce7870f95d56e8a65839c738b1f400fe33a63</hash>
        <hash alg="SHA-256">c23181233ccc1dcd8e3f65b25f7fc2cc710bf69b08a9432362f68d0c2ecd0903</hash>
        <hash alg="SHA-512">c1ed0bd5aff349ae089eed295f3c7d4fb8353e4a25fbb4db8c84b4b7398d71418af928b71b110952b11dd61069b4a1f5d8afe48d07a9e419597987db232a5fad</hash>
        <hash alg="SHA-384">a8a450f21aba5c9effd6c90fc45c73af732010e32c4b4a10d8ba9fe9adf888b0666135ce87546a68810d1c0e56651343</hash>
        <hash alg="SHA3-384">5afc6af1660ce16259e602777100c58d5a28e0404e384bd063fc525ff2005804b2c2d4611a17192b35bcabe3008b0321</hash>
        <hash alg="SHA3-256">86d2fc88e323b7d10fc2aaf371c1fe349173a6e0d6960cf3b2e0593f138b0580</hash>
        <hash alg="SHA3-512">095cde9de4b27774918033ecc4719c88189a2f9be08a8afd9acaacaad4e0fbba8fdb8c425125183dcf973c9425292f1999bf81e7fe1729701b8f9a4d9a3873f2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.beam/beam-vendor-grpc-1_60_1@0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://beam.apache.org</url></reference><reference type="issue-tracker"><url>https://github.com/apache/beam/issues</url></reference><reference type="mailing-list"><url>http://www.mail-archive.com/dev%beam.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=beam.git;a=summary</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.beam/beam-model-job-management@2.54.0?type=jar">
      <group>org.apache.beam</group>
      <name>beam-model-job-management</name>
      <version>2.54.0</version>
      <hashes>
        <hash alg="MD5">4407817caef7786003d6839a3c1ae709</hash>
        <hash alg="SHA-1">085c274b16d912a9e7c77ffdfb3a946a80d763f2</hash>
        <hash alg="SHA-256">371cd7baccf3019d1f3a817d2d76e026b7dee868fa9269296b5e464e882a633d</hash>
        <hash alg="SHA-512">113508b7592297bc61f4283fdcfa6fe12537e5c022c4fd9dc830623fd9cf449b92a79a197bd06b7d9032c2ad22e802e0dc37d09ddf9137859cf7fc7f40a704dd</hash>
        <hash alg="SHA-384">ffbc0e0184b5e19a9446d7d7d31996700ce951c48ffc2a17cc3c8779072c8b3b76c782f8ef78c1c70226d0dfc9e15e41</hash>
        <hash alg="SHA3-384">a1838165f4f8522e985dead25bb81878c26e5a918fa1453598d0170d6410c551126c90ca13296d03b4ec74dc0809d80d</hash>
        <hash alg="SHA3-256">7fdbf2c93745ba6a035b5f8cc6e865814d5479c8ed18fb45cf489b144889f57c</hash>
        <hash alg="SHA3-512">7b23bd29819ae2728d1dd7a3a43944f9feb4e6f17ace510c64b38190c99924d5c28ff7d0b4d0b564a27a49f40a1bbd2ec6b3ddf542b703d184910cdd04e0b623</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.beam/beam-model-job-management@2.54.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://beam.apache.org</url></reference><reference type="issue-tracker"><url>https://github.com/apache/beam/issues</url></reference><reference type="mailing-list"><url>http://www.mail-archive.com/dev%beam.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=beam.git;a=summary</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/joda-time/joda-time@2.5?type=jar">
      <publisher>Joda.org</publisher>
      <group>joda-time</group>
      <name>joda-time</name>
      <version>2.5</version>
      <description>Date and time library to replace JDK date handling</description>
      <hashes>
        <hash alg="MD5">c18e34f88c183cb21bbb693b3505e7d2</hash>
        <hash alg="SHA-1">c73038a3688525aad5cf33409df483178290cd64</hash>
        <hash alg="SHA-256">f75a29b82613411c9be37d419658e044179f1bf6b91d8786a4a49407531425b6</hash>
        <hash alg="SHA-512">77ebe5b92875140002fda1e4d7b05893fe603b019aa1257c44cf09c920fee8998b538bc0d8fb0d76171d65b8b3d752e95d1667db2d0cf21e2250fa9e09b822f6</hash>
        <hash alg="SHA-384">e5d4f8119f1feeb3dd15d2a1b3f02646629ecad98db64f084ac76a2143d324f489ad0558f2d6530490bbc9e9e172d4e3</hash>
        <hash alg="SHA3-384">dfa7953c96932762988727d71ed4518f26c77a2f3ffb8fb871a48307240afcd09fa7209ab62f15b1b9018a91d6f1a348</hash>
        <hash alg="SHA3-256">e2c4322160dd78f49245b7191a2bfc7c920cc7609450b5b63c0ea31e493a69b5</hash>
        <hash alg="SHA3-512">bb66cfe4a4107075cdf5d1dd13ea6174eb89701d82d831805480b22fd95e5648b867763268e4d67e006b2ac85589a1c32a0258dc82f693f4acd6cd9f2499c263</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/joda-time/joda-time@2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.joda.org/joda-time/</url></reference><reference type="distribution"><url>http://oss.sonatype.org/content/repositories/joda-releases</url></reference><reference type="issue-tracker"><url>https://github.com/JodaOrg/joda-time/issues</url></reference><reference type="mailing-list"><url>http://sourceforge.net/mailarchive/forum.php?forum_name=joda-interest</url></reference><reference type="vcs"><url>https://github.com/JodaOrg/joda-time</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.beam/beam-runners-core-java@2.54.0?type=jar">
      <group>org.apache.beam</group>
      <name>beam-runners-core-java</name>
      <version>2.54.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4b1a970796e7ddb6e1eb8a2f16060826</hash>
        <hash alg="SHA-1">19752df0a9ed7ef8b7eee641d188bd0adc8fb7be</hash>
        <hash alg="SHA-256">91ad8e22e455bf94b8ec0c00d82850a394e85fa66fffd1cac3aeb98fee9d16e3</hash>
        <hash alg="SHA-512">55659bfec5cc7ea674d7a92932d93d4ab1dbdd0690a8a1b3a8a45e5f26ad81d40eb72c2c4578c446f8d6105cca48117e0703a32053dcd92bf905f73bbcfc897c</hash>
        <hash alg="SHA-384">e264b95fd6ead57fc5b3018139c4ff5c54320d2926e489b0698bad19ad562bca729472da9ba8cb583681c7f61460211c</hash>
        <hash alg="SHA3-384">f5d2105ed2380c90b86dd9bfbf3014395a7ef4a6ff94ef87a714285a103464272ed06099bfdff94bd89406c2241c9eec</hash>
        <hash alg="SHA3-256">0f14274172cc29cede6f4277dd2213041a0be0bd9c45082dd2e9776f5e5d5262</hash>
        <hash alg="SHA3-512">5ec3d5bb8afd0c88dbaf1dc1e13b41320e8417989561df26827b6b7e23cc55c01d27f03488174db377bf3efcd4706f3fce562699f18f8233764aa98d54d23828</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.beam/beam-runners-core-java@2.54.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://beam.apache.org</url></reference><reference type="issue-tracker"><url>https://github.com/apache/beam/issues</url></reference><reference type="mailing-list"><url>http://www.mail-archive.com/dev%beam.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=beam.git;a=summary</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.alibaba/pemja@0.5.3?type=jar">
      <group>com.alibaba</group>
      <name>pemja</name>
      <version>0.5.3</version>
      <description>PemJa is an open source cross language call framework based on FFI</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">be5475af2629e096eeda576ae7189af2</hash>
        <hash alg="SHA-1">3ca3467f816930debaf6a045c1fa71d5a8bb89d0</hash>
        <hash alg="SHA-256">f0fe657defdd6f9ad7b1215920fed713092cafe345d58a18f3f392e244d4eb50</hash>
        <hash alg="SHA-512">5755ae69b73851bb112ecc0e709a1b5f140a51b8a818b8e1ad683d8116090884cc466633f18f45236dd3e8f65b0cbc3b7daea703841ef2be0b7bdc7210ecf0bb</hash>
        <hash alg="SHA-384">0a2674a0f60f75cdd2fb9c6ccfbe7acff69c428d7f91d2047d1a9625ee2f7e825631547b59bcfe6c221b8e6e7b5295b7</hash>
        <hash alg="SHA3-384">4feefd2bab186a1baafb2a9b388478a2b3c1b8ee24dd25907fbb5bb57cdae89010a8e09a31db794ebc868038b91078f4</hash>
        <hash alg="SHA3-256">8c8c80b6963310f703cd327a365a89a737a150fbe4c45d627457fe7e88bfc263</hash>
        <hash alg="SHA3-512">36040a70ff1879f80df679769990f753c219a74efdea008db4d52502c3f56d0d2119f18f788c28a7c50964b3aa27514b9cc5e8afa311614fba554dd35e591d5f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.alibaba/pemja@0.5.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/alibaba/pemja</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/alibaba/pemja/issues</url></reference><reference type="vcs"><url>https://github.com/alibaba/pemja</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar">
      <group>com.google.protobuf</group>
      <name>protobuf-java</name>
      <version>3.21.7</version>
      <description>Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an
    efficient yet extensible format.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">87417783d3677d733eae82bda7664943</hash>
        <hash alg="SHA-1">96cfc7147192f1de72c3d7d06972155ffb7d180c</hash>
        <hash alg="SHA-256">a204ec68748a7b26351ae37a311e8de468f248d1916d5f8dbe812c1289d0a0ff</hash>
        <hash alg="SHA-512">d2450e62ea4003295a50bd863c9cc25016f58a08e94171d581ae8fca626c6dabfc458b8f55310874f9e17189704e9b4d0cc259641c36ef5e83466bdaf2770bde</hash>
        <hash alg="SHA-384">23adb6f7e52739ca6e3c3f1f8a364a7ab3da5dabfe99fcc784c15fbff294fcdc91f40a2ee4362f66995eb9b1922b4746</hash>
        <hash alg="SHA3-384">8af2255addf82726186fe3a3d1f20d6affb4d0807b89a473f169b78f9641f6080611a25699fc7e461b31e5e8ef3a5186</hash>
        <hash alg="SHA3-256">7b707170933d4d60ec0ee38ba40f02e0587926d02d08032957b8ec3bf8c2a657</hash>
        <hash alg="SHA3-512">0bc1f5c3971dc7a84463faad48eabc5abf2ba958b834a6e732ce1b978f520c800b45beec0aa42feeb1e6443400d189423fe46a90a34d5afc3171de167864b953</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar</purl>
      <externalReferences><reference type="website"><url>https://developers.google.com/protocol-buffers/protobuf-java/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/protocolbuffers/protobuf/protobuf-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar">
      <group>net.sf.py4j</group>
      <name>py4j</name>
      <version>0.10.9.7</version>
      <description>Py4J enables Python programs running in a Python interpreter to dynamically access Java objects in a Java Virtual Machine. Methods are called as if the Java objects resided in the Python interpreter and Java collections can be accessed through standard Python collection methods. Py4J also enables Java programs to call back Python objects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7afcbc30fa3c00d5febfbc522235f2a5</hash>
        <hash alg="SHA-1">e444374109f6f3ffdfdbd4e7dc5a89122b0c9134</hash>
        <hash alg="SHA-256">4d67d584e7b0f456deedffbd3f43047efd6748ff3d13b443abb61ec54cf7af13</hash>
        <hash alg="SHA-512">8e3bb548cea719e4ab0d3d559f1cdb8401c74606036c93f93b6519942994432786a800ce57b6d04fd090dfdea0359cf78e4d899021c5559f4f2f558fb09dc1be</hash>
        <hash alg="SHA-384">b7d117caa8c2269807f1ad4335fab2f9f6d99b93ee68ec548f3ff3d520f8d11ce8ecb2c2798f8fd86fb19606be60187f</hash>
        <hash alg="SHA3-384">fce16b76566caacf22235a624015191a15eb130477aca32c7304d2ee5f606087ebeaaa8ffd76ddc26f592d757e950539</hash>
        <hash alg="SHA3-256">6fa284586e7f9d363201e05b5fed5eb35ee97f3329cff838c2e7d0eb8cc7e054</hash>
        <hash alg="SHA3-512">60ce18c81477d87dad03519fdf353593a601fd40c533b2585faa669d9d06d5165ea77451a73e7189c4e662e72aad282b0af13b2dbed64f765bc92a43621f55e3</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://nexus.sonatype.org/oss-repository-hosting.html/py4j</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.razorvine/pyrolite@4.13?type=jar">
      <group>net.razorvine</group>
      <name>pyrolite</name>
      <version>4.13</version>
      <description>This library allows your Java program to interface very easily with the Python world. It uses the Pyro protocol to call methods on remote objects. (See https://github.com/irmen/Pyro4). To that end, it also contains and uses a feature complete pickle protocol implementation -read and write- to exchange data with Pyro/Python.

Pyrolite only implements part of the client side Pyro library, hence its name 'lite'...  But because Pyrolite has no dependencies, it is a much lighter way to use Pyro from Java/.NET than a solution with jython+pyro or IronPython+Pyro would provide. So if you don't need Pyro's full feature set, and don't require your Java/.NET code to host Pyro objects itself, Pyrolite may be a good choice to connect java or .NET and python.
Version 4.13 can now register a custom pickler for inheritance tree of interfaces or abstract base class.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b4ab074cb07e995bcbd203c72e5efa1d</hash>
        <hash alg="SHA-1">b71a4668b0c4194486832fe7ce161eed2d0d12cb</hash>
        <hash alg="SHA-256">4ba424d328cbd7a6ff73108cce40d3cc376eef602b947e57fdc782171d92e463</hash>
        <hash alg="SHA-512">a25804a42355b24978ed47516a4a05a3ea35cf1f3773e1e46df0abd8a4b52e38ecdacbcaadc224e2a7ee62d0b183e46a63aae2154bef790306d752d65bd2491f</hash>
        <hash alg="SHA-384">bec0930daf4d20cee74051875feb9172601d8e7f2c052284805d2c5c9efe5953f41a122807d57d795a8cdde27f402a4e</hash>
        <hash alg="SHA3-384">814ff621e477d9a55f42ac2248b60d6abbdab24da32417bb0b86ed6118a30175d390f3f41fb98e4a962d9baa6702b921</hash>
        <hash alg="SHA3-256">af8184c258c3ada75447b4ca388f8acc54cc68b34cc743c1860c3761981d9dd4</hash>
        <hash alg="SHA3-512">fd26dd85c3c28eb40becb17867cc0306c12097e05d2b6f1242be996b6af81332dcb67051cad2f63ae4146e8a2f2f349507ba3d0531fa96ffd1f03c44013cf32f</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.razorvine/pyrolite@4.13?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/irmen/Pyrolite</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/irmen/Pyrolite/issues</url></reference><reference type="vcs"><url>https://github.com/irmen/Pyrolite</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-vector@13.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-vector</name>
      <version>13.0.0</version>
      <description>An off-heap reference implementation for Arrow columnar data format.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c544bfab494c8b82d9efac3800732d14</hash>
        <hash alg="SHA-1">38c18ce55e40e9f05bbe28ca673427b90a71a5ac</hash>
        <hash alg="SHA-256">d3001746fab9ebe03992474c9460df3ba6d48cbc09295c70bd5fdd6e49b7e582</hash>
        <hash alg="SHA-512">0b757e9f98d558fdce324bebbc88715ed71b8140a015eb1460ff0869299dcf34c0a3dcf38636691366e51a35dd6093e0c5b352a4a8c28379528d7d859f7106b9</hash>
        <hash alg="SHA-384">a9ee4c7fe1b50186403570894876981e088bace10ee7cc7d45a1fca3194a38df06fd5265f7f84afbfcbaa891374c9b1c</hash>
        <hash alg="SHA3-384">0733666f90c20967c7d1750062cfb4f515b4f2d04b7fe561d9215e886c9c582acb5561d23750096f3b26f248db3418e3</hash>
        <hash alg="SHA3-256">9c4c7e503434a0a8a44b777abb8fe96fc2587fbbc95455c91ee55d78278804c6</hash>
        <hash alg="SHA3-512">ac1bb4e297c821a4b1364c6e789b371ffd7cde40ea9d7bc5442dc6acf1a3d673d30c4bb5947e702c39549ce0214599d9e772be8c27679dabd46e98ad8c0b923d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-vector@13.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/arrow-vector/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/arrow</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/arrow-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/arrow-vector</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-format@13.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-format</name>
      <version>13.0.0</version>
      <description>Generated Java files from the IPC Flatbuffer definitions.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c211d12fcf3a6b2b98a4bc65e4fd39d6</hash>
        <hash alg="SHA-1">9655a165d50f32806643d37f1b01b4ce2cb1b425</hash>
        <hash alg="SHA-256">36673ec6a6e0f63100f5f24c978ed2aa76c899375a2f77fdfadfc4d3c7569093</hash>
        <hash alg="SHA-512">b9b65a783445ed5126a4e79e5a6dd4ddfe85e9fdf49610780da42caa7dae005277f5cb88118fb40bfbf3862bb92178672df010079d9c4b95e49747165a38f5e0</hash>
        <hash alg="SHA-384">6b5fb3c3aaf5a88c6161e594f767c5a417be35e9817db8899bfc85dbf929181c4ebdfbb7223ad1f38b24e354876e5172</hash>
        <hash alg="SHA3-384">b1c75dfe8e486672a86a27f6f81945707b183c1f8b7077b6b05f1e50a0e909e3623a2885074be45e1fdf111e807690e0</hash>
        <hash alg="SHA3-256">df482c744300eaa9fc0bcaa935c2a48dd2cefe8a86e8ec9b6be34ed1b3831a50</hash>
        <hash alg="SHA3-512">f511303000b30ca521320c9c7ba2ffb0b247112b2ab2c02c256363c05630931f77b2982cb486b299067dea6c3e9c75c28c5cbc78f9ca7c63e3f7afde9ffa44d5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-format@13.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/arrow-format/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/arrow</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/arrow-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/arrow-format</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-memory-core@13.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-memory-core</name>
      <version>13.0.0</version>
      <description>Core off-heap memory management libraries for Arrow ValueVectors.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3debc3968fb99695604fee73e7588fcc</hash>
        <hash alg="SHA-1">291f0a5f61d5c82faf7965ad3279da7fa3e6a23d</hash>
        <hash alg="SHA-256">2e7cfe1759661cffb3ea9821c60fa70412881a78f266c7f4dbaad5bf79e32a32</hash>
        <hash alg="SHA-512">b918b7ef84578732089d169f8f04c387da6d1c868dd0b86b9dce6262e06b0151d8c73a31da9b77b084deb54fb83b4b8177aecdc35a8c7e8f1ef3ef0275dfc2ce</hash>
        <hash alg="SHA-384">05a72e6a88a70e1588bf6915a1901dfb44f8580669bb4fe3894afeefcdcf8fb5ebe32780f8c926346897d2dfa6619f62</hash>
        <hash alg="SHA3-384">972e5331071d61c172e97bb807f259cc16555373f20defcce029dedaadc9a993725f401386cba442bb53162523d767aa</hash>
        <hash alg="SHA3-256">03296c7ebf80568ec49a269f31fe63f9173ba7437a348eac78ba0d443d61dd66</hash>
        <hash alg="SHA3-512">846b9e70a4115e4b1767a3fe741f12b1c61ea43c422e9026511cd7b02e2b3a85132807a764e2e13864326efba603ae005fc99604658a0810d7511c1c54be9cb5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-memory-core@13.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/arrow-memory/arrow-memory-core/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/arrow</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/arrow-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/arrow-memory/arrow-memory-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.18.2</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <hashes>
        <hash alg="MD5">bf935e6eca3a57defa13918661905cb0</hash>
        <hash alg="SHA-1">fb64ccac5c27dca8819418eb4e443a9f496d9ee7</hash>
        <hash alg="SHA-256">d8054ae7c0d1c2d2f55d28e46026ebe5892881f3fab5f439233184381c3b4a1f</hash>
        <hash alg="SHA-512">2223f6d8235c6831b488dd2723a4569e4dab6c2371f0e39f867b57a3a443e093d1fce05dc070a350fa306d7e952888cb09c7c816254147b01083d122964fc3a5</hash>
        <hash alg="SHA-384">7c5183b4e0ceb3d9dd089e29253832fdbe5f126a7b8c08fa66ab46f5050eb3b8fd792e00bd914f49000719e547586e23</hash>
        <hash alg="SHA3-384">2a973e2dcd1b65eb63f783878c542fa804254c880d47180717cd5ab239670b529c61ca4de647d4683cf4b459b6a7f5df</hash>
        <hash alg="SHA3-256">c99bd2cc1f13748357bf002d92d83f9f2d14d777c5e3fb7ed38c6891c76dbcb8</hash>
        <hash alg="SHA3-512">10b0328f2cd2a347f8c3eb8ed1967036b8940fe9b444ac27ffdb66bd373686a13fe7ec7498de5b81af1a301ed4afeb85aece0afb782aa6cadcf78362fa7ea5ae</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-core/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.18.2</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <hashes>
        <hash alg="MD5">79d38d3c51068a2bbc40268d02f80763</hash>
        <hash alg="SHA-1">985d77751ebc7fce5db115a986bc9aa82f973f4a</hash>
        <hash alg="SHA-256">581bd61000ef7648943f781ca05689e56d03f6052748365a8e2b3a9b5d3fa32f</hash>
        <hash alg="SHA-512">d375e5761052e202e409400637cdc9ce0f45cf01a90628f36ca3c81757ac30695cc6e60146cbf14685c5c50912ad932564eb794ea76ab8461ce1786a02eab867</hash>
        <hash alg="SHA-384">cc68a2e188dfb8a3687542b7e6b0d2b8323536dd82716a545f73320915e5f9602cc7a3c3d67a15f5adb579c31d5ed96f</hash>
        <hash alg="SHA3-384">ffcc40615a2d6f0c0382595da8601f7501dfb78f6f78718e9f05f309253379e9d9101d82bc7aaf8735746eafa190d8c9</hash>
        <hash alg="SHA3-256">9cb3a706d1bc0401a7bdd9c42a6ec048cd7bebce9f60f395e44c254a67ea230b</hash>
        <hash alg="SHA3-512">f1a5af82d49e1db5898b4caa487a4ae061cf31b5db25e2172fdba59970dab3308618f7e34f6fcf0842b7c9da958c274d69022d10d85f3e862be88a44ef8b7fc6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-annotations/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.18.2</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <hashes>
        <hash alg="MD5">1b56887bcd3eaea1ff710eb673e610b0</hash>
        <hash alg="SHA-1">deef8697b92141fb6caf7aa86966cff4eec9b04f</hash>
        <hash alg="SHA-256">4b364e6850dc89172fcf1d4dd26b8ff5488eda44ff4657e22dd265203dd5ab3c</hash>
        <hash alg="SHA-512">bbdfaaffaaab2a032a754cd9dade06552e9f79fd39ae396873315415219b37e0675fde0a02953efe0701e17be4c282b118a96fcb752f53ca37ab89624f0a52ac</hash>
        <hash alg="SHA-384">77607f963531b8b7a963e0691ec0196d0877f13763fcd7485fbbe14a37054a9babd343aecc96c8d29ec2480546cd1e4d</hash>
        <hash alg="SHA3-384">e02fdf4bba51730989da3efac6e0dfce5649215ec78c7d21713386d36874d621f65ea9881399ef80c87a9436877453a1</hash>
        <hash alg="SHA3-256">ced61fd9988c4418e98f5bd061a3aa099dd4e0a0074a272e87803262c2177bf8</hash>
        <hash alg="SHA3-512">6f6610e9bbbfd344ebd716a7709a19bdcf0180f214437473602db312a5e6d6e592bed40776ce9a445ab6b7b5c0fd9291fd11257a6b06e5dbf4b971fe996b2972</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-databind/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-databind</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.datatype</group>
      <name>jackson-datatype-jsr310</name>
      <version>2.18.2</version>
      <description>Add-on module to support JSR-310 (Java 8 Date &amp; Time API) data types.</description>
      <hashes>
        <hash alg="MD5">aaf3adb28aa9de74b3bb87118f93113f</hash>
        <hash alg="SHA-1">7b6ff96adf421f4c6edbd694e797dd8fe434510a</hash>
        <hash alg="SHA-256">e2d202d4606e23aeaf8a5a9632db06f5fefd5b63d251c3f503f9faaa78530e5c</hash>
        <hash alg="SHA-512">bc1cb3e193996ba0b876baefa99122672bbe617f2de582f5208609efb1bb5886832857406de5b0fd7969fce8c07dba0a672b3f077bac2f7efbc3d0cc252c1ee9</hash>
        <hash alg="SHA-384">cabe852eef9298f16699feecd3ddd9589712be714c4cf8d0a581edc84d40ec4e72c5ecdb676c5f7a6a8d4aa994295a31</hash>
        <hash alg="SHA3-384">0564445841652897541e3ff99accacc4fb57887b97189938e6a5759de1d9a79685229b255b798f3e34cc098bb966807e</hash>
        <hash alg="SHA3-256">9941830e2ad393b33e3999095cab945f4e768b1022310d13f9c57beb8817e429</hash>
        <hash alg="SHA3-512">bb85164ff9331af6c8d872712e6f3b1757855ef73ab81e24b4c8631f3eae1bc187aa8e6fd68b60f44808b2691eb364edbf55423eff1be3040b3658d9f656a3d1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-modules-java8/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-common</name>
      <version>4.1.100.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cf117aec3d80cca994b4818fb029b020</hash>
        <hash alg="SHA-1">847f942381145de23f21c836d05b0677474271d3</hash>
        <hash alg="SHA-256">d2908301f1ac6f2910900742473c15d701765d3d4467acdb1eebb9df3aa82885</hash>
        <hash alg="SHA-512">5bf58c87bdba2d0715b6d60280217651e5243982abbe5b3858501d6d99b4365df3f42faae1d8680ee39e27de60bacc4e299eff8320c7a04634b4a686545c35ae</hash>
        <hash alg="SHA-384">1683331e8ad6443e65c98bd374931fa9b40bc87dad7adb173cb0fdbd1202635095ef714edb6be3aeb44343a9b9e943a1</hash>
        <hash alg="SHA3-384">2597d4845ac7d4bf846fcd50cd97ebc027f52065e51b2747e7a99d74dd7542d43cefc3d51b1eaa52301a5b76964d29a7</hash>
        <hash alg="SHA3-256">c0086526a097ca4ed2d755c94494341826249755a0e9d454bd72d929c8548b40</hash>
        <hash alg="SHA3-512">5cf81c7eb3d768b835f9ce40375fe1e9dd1160a8f2a38a0a8947fe28448883379c5c06a965be17e819d1b58fe086fa563a739ad0f7ae31b0eefd301e6fa5529b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-common/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar">
      <group>com.google.flatbuffers</group>
      <name>flatbuffers-java</name>
      <version>1.12.0</version>
      <description>Memory Efficient Serialization Library</description>
      <hashes>
        <hash alg="MD5">26ecc1a330e441f909226a338d4bef65</hash>
        <hash alg="SHA-1">8201cc7b511177a37071249e891f2f2fea4b32e9</hash>
        <hash alg="SHA-256">3f8c088b4dd04a9858721f2e162508c94db0dd86f961e306ee63ef2eda871bf7</hash>
        <hash alg="SHA-512">20750e91441c074ca28f72b0b6494e8f0bfbc94caff04eb49727efc6b28e453c84732f24acc52cf36b36ba66b57a145d003e87f749c5c4518ddc6f9247b8ab47</hash>
        <hash alg="SHA-384">7af7d2e03ae71bea1ebac6cc9c2926b9f952c48a124db160ee2327f2f7e6b2e3ba153e5924971788392fc278b0e04ee9</hash>
        <hash alg="SHA3-384">f52d13b7971ff376414123865fef4def1cf674d12cde8159f77ab4a795438a1c623fd966a014cea9a17cb313aafa7fe2</hash>
        <hash alg="SHA3-256">5a1eaf3b52f2b67805156d2c4ec964dc97598fb4d134446fd0ca13b45a6f4b6a</hash>
        <hash alg="SHA3-512">294e6a25c027d9dc81be912e60923f2ea20eb3f705233840e4c5bae4775c3476d57a6bc73f320f3407f0f7796a2e926b21c3207181ebb90cbaff6d9c272ae61c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/flatbuffers</url></reference><reference type="vcs"><url>https://github.com/google/flatbuffers</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-memory-netty@13.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-memory-netty</name>
      <version>13.0.0</version>
      <description>Netty allocator and utils for allocating memory in Arrow</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">3003c6f623c342451a995721bc6a6bb9</hash>
        <hash alg="SHA-1">faf8ceb5932bf6e14efb7fa04e0cd04071ab74bc</hash>
        <hash alg="SHA-256">b05514e1ceec3839cd34ee018dcbda152eb2630f4dd6901c6d2ff09c7958eae2</hash>
        <hash alg="SHA-512">12e8fbcb9b3f64689e67f33fc3f883f0c080acfeedb20150e2173f3a21aeb1498637d43eaf66fdbdae24899e86e06b9b25356c91ce2565278307afafce23f3f4</hash>
        <hash alg="SHA-384">0dbcb3013271a9a8e6218fbdc8c59a78bfc44126509af67ed6496d139dae4a0aab95d9037fb466762791074b93c021bc</hash>
        <hash alg="SHA3-384">e9cf7ed2adda71551c00ca50d5a2e43c2521bd4906667bf713feee001032ca47b5ccef5834dc9083c1928531e5032f9a</hash>
        <hash alg="SHA3-256">df431d5735c32e7e45ceff541bc76667ef065c06555ac105491f1e81b014d79f</hash>
        <hash alg="SHA3-512">f85cfc9c55f0eb6fe464e6c3feb15afd45a319e20af9e42b0f0bfdde8c3628dc432017d933a0fdb18f655b4ee92903d5f7427db93009b5a596e1b7a75d60f8a1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-memory-netty@13.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/arrow-memory/arrow-memory-netty/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/arrow</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/arrow-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/arrow-memory/arrow-memory-netty</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-buffer@4.1.100.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-buffer</name>
      <version>4.1.100.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <hashes>
        <hash alg="MD5">df124be7a8094ff5b6f3b4c056ef0515</hash>
        <hash alg="SHA-1">39b05d2d4027971bf99111a9be1d7035a116bb55</hash>
        <hash alg="SHA-256">462874b44ee782fbefec64078cda6eb8e7bf9f0e0af71a928ef4c1f2d564f7ee</hash>
        <hash alg="SHA-512">9f0247da21f7607da1183e642583b72c03d863c528d80bd9f5e47a1a0fec222880a7fee99a54f455a84a7d0f9758dffd7d59d0825a3695f3da4a020743316716</hash>
        <hash alg="SHA-384">7976e0aa676803e0e59b258648283e487e965aa0d454cdd54116d7535f8f6e3294786a034371c4a32d0eb1959e1efe01</hash>
        <hash alg="SHA3-384">2735abe7a765a41279e726d703bc7868f84322a0fbeb61610ccb65ff08aa16d37f581b8f92cf50a046123d12d3e32567</hash>
        <hash alg="SHA3-256">7358b82b84028a31145244e823e25db3191a08ce917d59f10ba97cac4d0c488c</hash>
        <hash alg="SHA3-512">6dc905576da9ff3b9fda4d0a19ca8c43b32f9771a37ca4a952a8511107a4c4cde80675ce122de04bfaa1009902ad0dea2ee3e4eba05d13338322d59b559e60a3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-buffer@4.1.100.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-buffer/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-buffer</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-datastream-api@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-datastream-api</name>
      <version>2.1.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">72ac9b543c2143308e5f78aa8a2b225e</hash>
        <hash alg="SHA-1">85da109e6a3b2ab55cd724f268aabb7cc983402f</hash>
        <hash alg="SHA-256">f7f3bbb38d28430f83ae2efc3b204e9480db36121644115579088ed2af84b3c6</hash>
        <hash alg="SHA-512">78cf258353248954c1684c2ab6f00b927264b75f330ccfd2700bc79f077091519660e7f3a9d0da9d1ad3e7d4cee7c456d2d857eb2cee9a9deb40f9c982cff572</hash>
        <hash alg="SHA-384">047c37f5fe23eeeefb0974cedec9d5029c38b5e2056d1a586fa5f4358cf3401e04fe7681b4a99720c312744e7b371569</hash>
        <hash alg="SHA3-384">c8b8128b968df92309d0e287bab2855f074ba7d3b9f99e636e63fa11b07c8be500b50e3742c24f55a4926589209b1a45</hash>
        <hash alg="SHA3-256">66ea3f080a64eb4a0ce746486e7732bb83c7f5f24cac4dfc6855623107dfc47b</hash>
        <hash alg="SHA3-512">a41a8e1f516865d06c2be0caca08fd3f203a8ccf9e0f05cfe05ba8f10fe04f32a92e5db3d8e92409dcfd7eef7206674fd97303a819ec1967305e6683d31d634b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-datastream-api@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-datastream-api</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-datastream-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-rpc-core@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-rpc-core</name>
      <version>2.1.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">9e23e5dc50c94d8c2ba6fc471d855df9</hash>
        <hash alg="SHA-1">8c432d7d4509795652d99ed327727364436d3fe1</hash>
        <hash alg="SHA-256">d43778434099cdde6c9b760890b433c0cfbc267b58d39ddc1f76b96b749a8f59</hash>
        <hash alg="SHA-512">ae3b320d6f60e746b6f8a29223dab2569b30f7ea86ddba8eacfc8e0e30e45315c74307be8b93e8e6a00e07f6de4907153beadfa56951e573e8fa4615dac44274</hash>
        <hash alg="SHA-384">ab72d56f8b9d1f54dcb5f7f70c1d5ce8a3b81aef25f7690843b6f81d12b9ecc83c7bf0e37203e59a3de6e16d0dd38429</hash>
        <hash alg="SHA3-384">bbb3576efbcbf7196befeca37d4090f59fc2b6bf539e73c25943cbdf3a8644439002b540f1c48d6e6ee006f4e54f473d</hash>
        <hash alg="SHA3-256">9a4c57b4a7ae5c3123a4b05baf558767658df81b269badbe0c15aff7a2d7f649</hash>
        <hash alg="SHA3-512">1d45626f31b9c5ffd91d3343717b71ed078d6b83d372ee97d787141b0fff77a16bb855b69b5977bf9a0878103610bcac34d383218a1d8e90d6c74f8c61018436</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-rpc-core@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-rpc/flink-rpc-core</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-rpc/flink-rpc-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-rpc-akka-loader@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-rpc-akka-loader</name>
      <version>2.1.0</version>
      <description>This module contains the mechanism for loading flink-rpc-akka through a separate classloader.</description>
      <hashes>
        <hash alg="MD5">5b7c9a78e4adb95a32e9af383d896f44</hash>
        <hash alg="SHA-1">2c5da8224d29b3a5fa8c0bf48f551d34deedd0ae</hash>
        <hash alg="SHA-256">7a29c9bde8ea4398a93bb2240b446ff7d1686c40702a8c55f4cb7adfb91f7b14</hash>
        <hash alg="SHA-512">4f1d1465ff8f74b27096d34dbd92c702147c9af7dfb940a3ef8fd14d3aff46929e8b45f5eada85d65de5547cfed6ef067e58ce5957db53caaf58377c639e7514</hash>
        <hash alg="SHA-384">51df2df32f5e5b1063673e056c1281f6c7ca740a9fd64fd6f9b57b39dc64c538fd125217cfcf1a8c9cd81320d7588cb2</hash>
        <hash alg="SHA3-384">526ae280e3059ab811a75e26c085e29d9110975b036789205e852da590c119a5c555ab2dce11549780a3e988b91a17bb</hash>
        <hash alg="SHA3-256">9c937423f58ba041c9bdf5420dc883c66e4529e0b10662426ec93b5f98e60df9</hash>
        <hash alg="SHA3-512">9ad30001dc7d5cdc74e1a4b2d4120604fc6d601330a7a854da250c3cc7a567f44f5f8e59251c33c1dc3bd6b1ae123ec55ee94d58836044e5e2b3aa1c12bdb5a1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-rpc-akka-loader@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-rpc/flink-rpc-akka-loader</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-rpc/flink-rpc-akka-loader</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-queryable-state-client-java@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-queryable-state-client-java</name>
      <version>2.1.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">b5e46b5f264fd05f333f62903377b720</hash>
        <hash alg="SHA-1">e228daf493345cc53f577234e7569b2ac737e436</hash>
        <hash alg="SHA-256">9e08ff18b39599837ba282710fe2b38598a1b553ac3e028163e095357b61abac</hash>
        <hash alg="SHA-512">b147a97eec0a2846b8f580b69fd42e57cc3457905610150f097ec7e9306a8527f4aafc2e52f5da48e7da1fdd2f3773d7a7d9ff14d6de7c846b7405c62527e291</hash>
        <hash alg="SHA-384">ea5a263635e2e89b308cc6e859bf0d9821d1cca8131863d13208b0daec60aee3d2cc9f4026c65945c6cee391cf236bb2</hash>
        <hash alg="SHA3-384">c45ab9e1bf78fd0f6b05700fe4155a62cc8294faf0b6b752ed567cabc09730ed20d9897012d8bd41eddcb546ed734df9</hash>
        <hash alg="SHA3-256">4a2d00471dbf6a1f269106963f577241adae2f5ba930d67f05f2d5fe4623cef2</hash>
        <hash alg="SHA3-512">6d30b26447850752f0f33af6164e6134e6f10344089a5d1589941e50020763218091d58f22a4c2136158fef94b49b06ea30057e360e492a7ac8d8183b13326cd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-queryable-state-client-java@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-queryable-state/flink-queryable-state-client-java</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-queryable-state/flink-queryable-state-client-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-hadoop-fs@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-hadoop-fs</name>
      <version>2.1.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">385726dbac6628b8872150433e03b04c</hash>
        <hash alg="SHA-1">b4aa2cafafa4965570b1bb1b83f03f86278bd088</hash>
        <hash alg="SHA-256">905a22a2c5ea98185415854d61f31ff1adab49f62a2b3cb4b666fb056419ebc1</hash>
        <hash alg="SHA-512">72f07ddd77d8297fc756441d104003f97b91a44eb4e40cbdc772a77adccd2e3f91957c8c8df7c9df3f32cdc804bc893256fc9192dea6bbf9b2f0398944a792fc</hash>
        <hash alg="SHA-384">a71b656445ff8cf0804d56936105084f11a1fa1b225763d4a12671288e24348a3ba70481a273a7ba4f91914ba48842a4</hash>
        <hash alg="SHA3-384">2efac6d493fd60aa9baab004f7660910748eb1200cd7559f0a3b1f64f75f3f4812f19cf42818a46dd77bc30fba6a9a7a</hash>
        <hash alg="SHA3-256">3ae2f6ae0286bf2c94b9652a641643114f8cf29beae085aee2e5ffb73babb27e</hash>
        <hash alg="SHA3-512">2ce96c420d9337a9ec751415604f58dc36a698c89010c83332974260d756975975927adcfbefa7b08882697b4ca5827b1676ca9932e98a663b096674ac239bc0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-hadoop-fs@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-filesystems/flink-hadoop-fs</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-filesystems/flink-hadoop-fs</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-20.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-netty</name>
      <version>4.1.100.Final-20.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">6a86015758a9e48ecc6ca96620a2ba0b</hash>
        <hash alg="SHA-1">5880d365f7577f96bdbf29b8bca9cc645a5bd3e5</hash>
        <hash alg="SHA-256">dfe49f4e089640d8527814d85cd441d4f90b564996d81e5c905b0d282d5f1a21</hash>
        <hash alg="SHA-512">99914cf4ffc9804d41431d483521fdf054667e64c0d9f541a26e1fa48fd754fd3124c0e94063b09a3b4bb79de1d2e1ac0fa0dbaff66a9cfd681a2171d3d08518</hash>
        <hash alg="SHA-384">3105c95b13e444f2119d583ec3ed314f779016be39c30782000f1efafe8a43e5fd598a07235576a8db27dd34ee6ef158</hash>
        <hash alg="SHA3-384">06d8ee7b6da1cc62812c3ac7a5cbe0c6ca3e7db90e889ba7420c4c53ec42dddc60a652267f46c7d6fd2b192174a475eb</hash>
        <hash alg="SHA3-256">1e47d716f7d480bae32f9306725568c0dea2a70a690732c63d294c191ce5f693</hash>
        <hash alg="SHA3-512">5c9daa7dc98338fc5b6203f05264c114fc062fdca36d58cdf7588aaa20a51f230402fd66a5b607ffe1bc00d42d45613ebf23a66456787cfb33da31f5c15efe09</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-20.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-netty</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-netty</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.2-20.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-zookeeper-3</name>
      <version>3.7.2-20.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">b8673fa6ea6ce217e3855ca9a32b7c9f</hash>
        <hash alg="SHA-1">b474fe27c9304c5cfc949cd0eb24d043a8cd6b26</hash>
        <hash alg="SHA-256">61dfd759767cc16a6ef78a1e52f6b821e7d6215cfd119a8cd7bc03cfd8c78fef</hash>
        <hash alg="SHA-512">7ec16eadd7045b7d23823132b8dd74d11eacc41d718ea83253a4e7e851a728ac97808a3ed180ed8096d5fd9e9cf1524959747104970d9460afd799c631681c2d</hash>
        <hash alg="SHA-384">8e5644159c4a558b1b3632d33ff5fc809196f56467437e73d1e20b53672a3f81ec44d0e6bb8552f40ef2fa97dd9e148f</hash>
        <hash alg="SHA3-384">bc83b24ee13565961b5b6d6a691b5328bd0190cc7a6e229670fc676a7955bad00ddc04a46e8e34cd705e0177c3feecbc</hash>
        <hash alg="SHA3-256">70efea4398eb000699b84d917956ba0820f97ad862f5f9c19a5c7da2e3c2c26b</hash>
        <hash alg="SHA3-512">4e002463cd82ada7136dbe0a3f83c754d361540c29bef54c78edd105ad18cc05fc89cd3fe795664dc9cc35b8eb07728b9a27b943b275dc6c866677f1c93d5570</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.2-20.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-connector-datagen@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-connector-datagen</name>
      <version>2.1.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">4ac46695d0a893d2dc7be5fda256f87c</hash>
        <hash alg="SHA-1">a1e23ac96c1cd63c2d1131554a17ff60e576969d</hash>
        <hash alg="SHA-256">f6dca459b5b320e704b353609e2bb05b2f0ea26265cca26523b66c6c49dd2dfa</hash>
        <hash alg="SHA-512">a81e44d443174b45798376dbd3e704ae014561d6b8e310819b8cb0fc0671ceb4216e925fd70a8a300377ab51016660abe80d9185061856ecdd25d5f4edfd7687</hash>
        <hash alg="SHA-384">33bfca94b3e8702a34adc4ad821da3c50de4b4d1b273a40b5e847c398695e5478d8adf9e8b7111b90c8683465610bd11</hash>
        <hash alg="SHA3-384">9dece4628bc7b2ae1e5110d854aadaf811c281a199ffcc293b5cf899e648830d17d383c1ba7d14a9e017fcf368e16662</hash>
        <hash alg="SHA3-256">c198a91ea0e727ca2bb5fbd7edf157991e062950d98f09d2918303e539fd4a99</hash>
        <hash alg="SHA3-512">7da0efdb64a6a8504481edf2f733b337436e2bc8764aeec15fcf5ad5fcca299e6e50c1841999d1689febea431894818b809ca596f2df3adde96ea4fa89975794</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-connector-datagen@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-connectors/flink-connector-datagen</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-connectors/flink-connector-datagen</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar">
      <publisher>Shigeru Chiba, www.javassist.org</publisher>
      <group>org.javassist</group>
      <name>javassist</name>
      <version>3.24.0-GA</version>
      <description>Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple.  It is a class library for editing bytecodes in Java.</description>
      <hashes>
        <hash alg="MD5">23fd22d0d089ddfac567a39ce0cb1a91</hash>
        <hash alg="SHA-1">d7466fc2e3af7c023e95c510f06448ad29b225b3</hash>
        <hash alg="SHA-256">aba81efa678b621203fb89aeff81d6f126f7a9dd709401e5609c42976684ae23</hash>
        <hash alg="SHA-512">e57dad74a3edef837ece841d06e4a7c96ffecab8fbcba56fe5f7eccd662f0c0d757880a6073793a8c75ad7a0a1d146346b75cdbfe4fd8a271048a54446e5d1a2</hash>
        <hash alg="SHA-384">4867afdb7522b3dbfa10a51264ac6c15a2a8083d16c8dbef318275d24687768f35130b1c17d8407ca8ecf855abd83dff</hash>
        <hash alg="SHA3-384">a52be891987d4fc7d319e6417e0cd9a28f189d8623b803d72b5429e118da73b9937899231825e793d37b434d7522d283</hash>
        <hash alg="SHA3-256">0cf8db7d2a5f7e1a70827538cb4b0b446fcc239f05ca55d9bf8f2a50f1e08af3</hash>
        <hash alg="SHA3-512">ed9675f9f070203801eb762092ac99636d376b7ef563f99508283006a65a0d2dfce38e1ba7ff2ccfebcede0376ba0724b76b459ca112477234aed8208807f785</hash>
      </hashes>
      <licenses>
        <license>
          <id>MPL-1.1</id>
        </license>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.javassist.org/</url></reference><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://jira.jboss.org/jira/browse/JASSIST/</url></reference><reference type="vcs"><url>scm:git:git@github.com:jboss-javassist/javassist.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar">
      <publisher>xerial.org</publisher>
      <group>org.xerial.snappy</group>
      <name>snappy-java</name>
      <version>1.1.10.7</version>
      <description>snappy-java: A fast compression/decompression library</description>
      <hashes>
        <hash alg="MD5">d74bb2e2857f965683c9de931b71fc86</hash>
        <hash alg="SHA-1">3049f95640f4625a945cfab85715f603fa4c8f80</hash>
        <hash alg="SHA-256">4c766cb3f855415ee734b2392949a0b6f12a60879334a74518deaf6270d32e36</hash>
        <hash alg="SHA-512">22a6ebb8e8ad4d8a149b0c67d8658ac1535d7014857064c4f7ed4999e29c6186de8a80b50dd9b59f631fa1c24970524fdbbb84083c80c59eb0c72d4efb041fef</hash>
        <hash alg="SHA-384">b7ea971de5e286b4bdb8b96063f0ffe611ef82f5887fa6845fc2721bf0e71a88b0c754ba010816596f0b6c178160c0c5</hash>
        <hash alg="SHA3-384">9ef6c5ad194027c8b4be0f756dfeb958ae3daa5ad942b34c4e9e570ce7516ba91fad298929e4d716f6a091d0b274bbc9</hash>
        <hash alg="SHA3-256">83f4ede80f49271566745463652e3cdebbe4e2112174400ddf082bf9b39d09cd</hash>
        <hash alg="SHA3-512">3c1ffb884ac57e812f997357f9501afbffec3aaac2aa2bb87b0dd8ec2e7e43d922c250dfc658920ade2014aa138440d2d9cdfce8e453812d089898d10390a6db</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/xerial/snappy-java</url></reference><reference type="vcs"><url>https://github.com/xerial/snappy-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/tools.profiler/async-profiler@2.9?type=jar">
      <group>tools.profiler</group>
      <name>async-profiler</name>
      <version>2.9</version>
      <description>Low overhead sampling profiler for Java</description>
      <hashes>
        <hash alg="MD5">4df6477a255b88e99f2ed4daa3c713cc</hash>
        <hash alg="SHA-1">4ed20e2a4640ee672e7cf23b1512dbdeb9a4b7e6</hash>
        <hash alg="SHA-256">6c4e993c28cf2882964cac82a0f96e81a325840043884526565017b2f62c5ba4</hash>
        <hash alg="SHA-512">60ba593a0cf529397e73e38ef71bc2e5def44f1111a60f40a724ac3472ef7afe92e02a61b0ad18c373122cd92216f49268d335e1150dc3a99ff2431c598aeb5c</hash>
        <hash alg="SHA-384">65107ddcd2a06b69ac4cdb9bd93452045c4e08b843826666a890816abe0486966599cf6a4b07ff87c5d95e86551bb115</hash>
        <hash alg="SHA3-384">4989b467a4791464d50c51782ccc60547bfc8105aebc0764656c67405bbd7d023a9d405a1fd864f86dbd186af8624928</hash>
        <hash alg="SHA3-256">225998977421a87839be6c09f49f9ebd972b063a65f53d374e61fc3d68416ca4</hash>
        <hash alg="SHA3-512">723c0651f61ae6a119624b11bc9d3959ae44de0bcef51f0a341c5d7ebdc6a0e677f3c43399db9a4a657334f46a1092ee55d45f92344b7e31e6e26669ffe41823</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/tools.profiler/async-profiler@2.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://profiler.tools</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="vcs"><url>https://github.com/jvm-profiling-tools/async-profiler</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar">
      <group>org.lz4</group>
      <name>lz4-java</name>
      <version>1.8.0</version>
      <description>Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm</description>
      <hashes>
        <hash alg="MD5">936a927700aa8fc3b75d21d7571171f6</hash>
        <hash alg="SHA-1">4b986a99445e49ea5fbf5d149c4b63f6ed6c6780</hash>
        <hash alg="SHA-256">d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef</hash>
        <hash alg="SHA-512">98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9</hash>
        <hash alg="SHA-384">8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c</hash>
        <hash alg="SHA3-384">ec0d6a00760d0a4ecba13a41785d6ae57a64552b1687eaa3e292b3054bb1348e49ab8a938197ff126f9218c6cb96ee1c</hash>
        <hash alg="SHA3-256">7be684c102891105f66d378b61ea1297a392c1618b5aebf7e0b281f55217c206</hash>
        <hash alg="SHA3-512">0b2294570ea2bfbb50ced21dfa4bad956467ca447e9ab2dd602a3478371bcd0e9f13d2dff74d06827a28882409612cdde00bd91267be05bd3510c68268bf3166</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.lz4/lz4-java@1.8.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/lz4/lz4-java</url></reference><reference type="vcs"><url>git://github.com/lz4/lz4-java.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.15.1</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">84351f7991a0e6722f00e96a4ccc376f</hash>
        <hash alg="SHA-1">f11560da189ab563a5c8e351941415430e9304ea</hash>
        <hash alg="SHA-256">a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154</hash>
        <hash alg="SHA-512">e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c</hash>
        <hash alg="SHA-384">028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2</hash>
        <hash alg="SHA3-384">73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33</hash>
        <hash alg="SHA3-256">daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044</hash>
        <hash alg="SHA3-512">b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.15.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.12.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">19fe50567358922bdad277959ea69545</hash>
        <hash alg="SHA-1">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>
        <hash alg="SHA-256">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>
        <hash alg="SHA-512">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>
        <hash alg="SHA-384">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>
        <hash alg="SHA3-384">8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def</hash>
        <hash alg="SHA3-256">18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c</hash>
        <hash alg="SHA3-512">fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.18.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.datatype</group>
      <name>jackson-datatype-jdk8</name>
      <version>2.18.2</version>
      <description>Add-on module for Jackson (https://github.com/FasterXML/jackson) to support
JDK 8 data types.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">54d2dc0c44a7188884e8f22fddd947f6</hash>
        <hash alg="SHA-1">9ed6d538ebcc66864e114a7040953dce6ab6ea53</hash>
        <hash alg="SHA-256">f30d77f5826b9e9813342e84ab412095ed4ed5cf4fef6f93cebb848cb0fd0294</hash>
        <hash alg="SHA-512">50b79ee59b1f98b607978adcfbcd339f7c260b8f9717c91527fcfb51440509750c5da6afdf595d84a28dbe93c2a53115383a84c139a9f0293bbae64d7f0fb166</hash>
        <hash alg="SHA-384">6906f42e7130639d2a77ed11421ab6406a073a535e3ea7598d851d9d6586f138aa47ee2fcbf6f4bbf9107951805a087b</hash>
        <hash alg="SHA3-384">1b00b05dc9e8db706d43f500a4aadf6846f36ec882c16c6d8ca7e5184530c6767062eb4cf2e49ab4aaf3f02b4994012f</hash>
        <hash alg="SHA3-256">adc481d27fefce0687b41cf548783a8fcef56accaa2662651cc6e70a8f8c3ccd</hash>
        <hash alg="SHA3-512">1346636a5024863d670128e4bfe48f42139384ca3cb34e8a967d88c54c6bf8207ac15746f7da081e1fb043b8f30a06b0ba4fbd4157438cdeccf81c4c3c01c3f8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.18.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-modules-java8/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-force-shading</name>
      <version>20.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">9971c3d248dd2ea79add93f77fb0f24f</hash>
        <hash alg="SHA-1">4c21de8cf9ca8e93777e5d1c4a7a0a2f61852401</hash>
        <hash alg="SHA-256">50773dc0f2ab1831754513a8861374c0e47b077dbcc33956fe3a6cd02308d0f8</hash>
        <hash alg="SHA-512">5b7a0bc48a25e82da9d9f8f9a01afe30bc7411b04924d8af72f4120a937b0a3f3999a51e3a55718783d71b97000d1d18568cfb48cb609d33cd201dfe10a7f0b2</hash>
        <hash alg="SHA-384">3b04f01b51dda20aef349e623f6c8de4713b15f095f4af220ef77c22f0b815687bb60c9def912c2e4eff3513132d7cc7</hash>
        <hash alg="SHA3-384">b0378ce70a9f05966229d15f8a5f6682280f63b5494040e1002a210128878799c5761bfa1b1b5d4204a0dabb8687f90e</hash>
        <hash alg="SHA3-256">0e0b42aa42a5be9a215f4e893efabe6773e5c8d54299daf714e36984410c4549</hash>
        <hash alg="SHA3-512">e8754f8fec246e8de00e9634f8a2c9821af3ebcc194ef570328dcc6e1395b0263d5ae875a702aa69e5a9602616afc3ef51a4b63e70c6df00646b495df87ebd1d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-force-shading</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-force-shading</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>1.3.9</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1d5a772e400b04bb67a7ef4a0e0996d8</hash>
        <hash alg="SHA-1">40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf</hash>
        <hash alg="SHA-256">905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed</hash>
        <hash alg="SHA-512">06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a</hash>
        <hash alg="SHA-384">56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada</hash>
        <hash alg="SHA3-384">58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be</hash>
        <hash alg="SHA3-256">c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0</hash>
        <hash alg="SHA3-512">67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.bytebuddy/byte-buddy@1.15.11?type=jar">
      <group>net.bytebuddy</group>
      <name>byte-buddy</name>
      <version>1.15.11</version>
      <description>Byte Buddy is a Java library for creating Java classes at run time.
        This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.</description>
      <hashes>
        <hash alg="MD5">603bc53c7a294f23765bfb7e1820ad44</hash>
        <hash alg="SHA-1">f61886478e0f9ee4c21d09574736f0ff45e0a46c</hash>
        <hash alg="SHA-256">fa08998aae1e7bdae83bde0712c50e8444d71c0e0c196bb2247ade8d4ad0eb90</hash>
        <hash alg="SHA-512">61a75caa9f9ad14e8f837c296dca12df9aa1cfbf1e6cd25a8344ae9d4a468ee25944c867dc82487b9247383d0695a425b5578620fc6e1132dd24cebc4d6eafcf</hash>
        <hash alg="SHA-384">da05afadb3c4bb960cef520dcbcbb097c72873e65a30fe485999ba54f926e8fe6df3fe37ff5e4badccc031b57dbacb38</hash>
        <hash alg="SHA3-384">dad7d552be387e1e389795c36694ef66239c3bd9b34f98bf8c152494da09727ae931a84b11ec5dae56048c6b16ac9b3e</hash>
        <hash alg="SHA3-256">3df6d22d48ccf9c14cdf38e96720ebfd5a305a4771da693eac602534b8a3779b</hash>
        <hash alg="SHA3-512">36ba479fba67c25f6e043fa0dd6502f08c51add994dcbcd4b602cb73adda33cf3f5c3efba452da3881aed25355629542600e47b350df302003eb8965661aafaf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.bytebuddy/byte-buddy@1.15.11?type=jar</purl>
      <externalReferences><reference type="website"><url>https://bytebuddy.net/byte-buddy</url></reference><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/raphw/byte-buddy/issues</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.objenesis/objenesis@3.4?type=jar">
      <publisher>Joe Walnes, Henri Tremblay, Leonardo Mesquita</publisher>
      <group>org.objenesis</group>
      <name>objenesis</name>
      <version>3.4</version>
      <description>A library for instantiating Java objects</description>
      <hashes>
        <hash alg="MD5">51242320cb2bb25a3f36e2e21fa87de0</hash>
        <hash alg="SHA-1">675cbe121a68019235d27f6c34b4f0ac30e07418</hash>
        <hash alg="SHA-256">95488102feaf2e2858adf6b299353677dac6c15294006f8ed1c5556f8e3cd251</hash>
        <hash alg="SHA-512">951a01075a5462cc989b8d8fb1b7089848eb825ee4e563bab139f121f5f515fbb5cf2ac607a5528cbd3929e610910113346956a4448fa39bf41fd8147e5eac6f</hash>
        <hash alg="SHA-384">8865ca08b684b72d9dcb620f01974022d864e8e5e0e4b469287bf4720536ee51735f29c7f05da563c967e1e2f1c52589</hash>
        <hash alg="SHA3-384">730526cb3490fdb1770264395afdc3782fd3397617582dde8bc2807512672f624e2f5b2206d9f615524b92ccdfba191a</hash>
        <hash alg="SHA3-256">f22667e2f7f0f86b48015d3995e3edbec9e81929c6860e9af1063c629a114ae2</hash>
        <hash alg="SHA3-512">465202eb4e341003b66a38a36d676656d17adf66267dc87cfbc6bcd6ee6fd3914423160e01c38d3f505c7f358674dd9e9f08dd7df73196f04e56cae01d4fe91e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.objenesis/objenesis@3.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://objenesis.org/objenesis</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/easymock/objenesis/objenesis</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.flink/flink-python@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-clients@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-streaming-java@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-common@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-runtime@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-connector-files@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-csv@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-avro@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-json@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-runners-java-fn-execution@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-runners-core-java@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/com.alibaba/pemja@0.5.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar"/>
      <dependency ref="pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar"/>
      <dependency ref="pkg:maven/net.razorvine/pyrolite@4.13?type=jar"/>
      <dependency ref="pkg:maven/org.apache.arrow/arrow-vector@13.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-netty@13.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-core@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core-api@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-annotations@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-core-api@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-annotations@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-metrics-core@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-annotations@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-metrics-core@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-annotations@2.1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    <dependency ref="pkg:maven/org.snakeyaml/snakeyaml-engine@2.6?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware/kryo@5.6.2?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar"/>
      <dependency ref="pkg:maven/org.objenesis/objenesis@3.4?type=jar"/>
      <dependency ref="pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware/reflectasm@1.11.9?type=jar"/>
    <dependency ref="pkg:maven/org.objenesis/objenesis@3.4?type=jar"/>
    <dependency ref="pkg:maven/com.esotericsoftware/minlog@1.3.1?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-clients@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-runtime@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-streaming-java@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-datastream@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-runtime@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-datastream-api@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-core@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-rpc-core@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-rpc-akka-loader@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-queryable-state-client-java@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-hadoop-fs@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-20.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.18.2-20.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.2-20.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-connector-datagen@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar"/>
      <dependency ref="pkg:maven/tools.profiler/async-profiler@2.9?type=jar"/>
      <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-datastream-api@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core-api@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-rpc-core@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-rpc-akka-loader@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-rpc-core@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-queryable-state-client-java@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-20.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.100.Final-20.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-hadoop-fs@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@2.1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.2-20.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-connector-datagen@2.1.0?type=jar"/>
    <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
    <dependency ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"/>
    <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar"/>
    <dependency ref="pkg:maven/tools.profiler/async-profiler@2.9?type=jar"/>
    <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-streaming-java@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-file-sink-common@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-runtime@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-file-sink-common@2.1.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-datastream@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-datastream-api@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-streaming-java@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-table-common@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.6-20.0?type=jar"/>
      <dependency ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-table-runtime@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-table-common@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java-bridge@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-cep@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-table-common@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java-bridge@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-bridge-base@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-streaming-java@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-table-api-bridge-base@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-streaming-java@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-cep@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@33.4.0-jre-20.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-connector-files@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-file-sink-common@2.1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-csv@2.1.0?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-avro@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.avro/avro@1.11.4?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.avro/avro@1.11.4?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-json@2.1.0?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.beam/beam-runners-java-fn-execution@2.54.0?type=jar">
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.42.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-vendor-guava-32_1_2-jre@0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-runners-core-construction-java@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-runners-core-java@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-model-pipeline@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-model-fn-execution@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-sdks-java-core@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-sdks-java-fn-execution@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-vendor-grpc-1_60_1@0.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-model-job-management@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/joda-time/joda-time@2.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.42.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.beam/beam-vendor-guava-32_1_2-jre@0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.beam/beam-runners-core-construction-java@2.54.0?type=jar">
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.42.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-model-pipeline@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-model-job-management@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-sdks-java-core@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-sdks-java-extensions-avro@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-sdks-java-fn-execution@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-sdks-java-transform-service-launcher@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-vendor-grpc-1_60_1@0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-vendor-guava-32_1_2-jre@0.1?type=jar"/>
      <dependency ref="pkg:maven/io.github.classgraph/classgraph@4.8.162?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/joda-time/joda-time@2.5?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.avro/avro@1.11.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.beam/beam-model-pipeline@2.54.0?type=jar">
      <dependency ref="pkg:maven/org.apache.beam/beam-vendor-grpc-1_60_1@0.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.auto.value/auto-value-annotations@1.8.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar"/>
      <dependency ref="pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.beam/beam-vendor-grpc-1_60_1@0.1?type=jar">
      <dependency ref="pkg:maven/com.google.auto.value/auto-value-annotations@1.8.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar"/>
      <dependency ref="pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.auto.value/auto-value-annotations@1.8.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar"/>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
    <dependency ref="pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.beam/beam-model-job-management@2.54.0?type=jar">
      <dependency ref="pkg:maven/org.apache.beam/beam-vendor-grpc-1_60_1@0.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.auto.value/auto-value-annotations@1.8.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar"/>
      <dependency ref="pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.beam/beam-sdks-java-core@2.54.0?type=jar">
      <dependency ref="pkg:maven/org.apache.beam/beam-model-pipeline@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-model-job-management@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-vendor-grpc-1_60_1@0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-vendor-guava-32_1_2-jre@0.1?type=jar"/>
      <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.15.11?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar"/>
      <dependency ref="pkg:maven/joda-time/joda-time@2.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.15.11?type=jar"/>
    <dependency ref="pkg:maven/joda-time/joda-time@2.5?type=jar"/>
    <dependency ref="pkg:maven/org.apache.beam/beam-sdks-java-extensions-avro@2.54.0?type=jar">
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.42.0?type=jar"/>
      <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.15.11?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-vendor-guava-32_1_2-jre@0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-sdks-java-core@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.avro/avro@1.11.4?type=jar"/>
      <dependency ref="pkg:maven/joda-time/joda-time@2.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.beam/beam-sdks-java-fn-execution@2.54.0?type=jar">
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.42.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-model-pipeline@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-model-fn-execution@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-sdks-java-core@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-vendor-grpc-1_60_1@0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-vendor-guava-32_1_2-jre@0.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/joda-time/joda-time@2.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.beam/beam-model-fn-execution@2.54.0?type=jar">
      <dependency ref="pkg:maven/org.apache.beam/beam-vendor-grpc-1_60_1@0.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.auto.value/auto-value-annotations@1.8.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar"/>
      <dependency ref="pkg:maven/org.conscrypt/conscrypt-openjdk-uber@2.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.beam/beam-sdks-java-transform-service-launcher@2.54.0?type=jar">
      <dependency ref="pkg:maven/org.apache.beam/beam-vendor-guava-32_1_2-jre@0.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/args4j/args4j@2.33?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/args4j/args4j@2.33?type=jar"/>
    <dependency ref="pkg:maven/io.github.classgraph/classgraph@4.8.162?type=jar"/>
    <dependency ref="pkg:maven/org.apache.beam/beam-runners-core-java@2.54.0?type=jar">
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.42.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-model-pipeline@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-sdks-java-core@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-model-job-management@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-runners-core-construction-java@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-sdks-java-fn-execution@2.54.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-vendor-guava-32_1_2-jre@0.1?type=jar"/>
      <dependency ref="pkg:maven/joda-time/joda-time@2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.beam/beam-vendor-grpc-1_60_1@0.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.alibaba/pemja@0.5.3?type=jar"/>
    <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar"/>
    <dependency ref="pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar"/>
    <dependency ref="pkg:maven/net.razorvine/pyrolite@4.13?type=jar"/>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-vector@13.0.0?type=jar">
      <dependency ref="pkg:maven/org.apache.arrow/arrow-format@13.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@13.0.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar"/>
      <dependency ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-format@13.0.0?type=jar">
      <dependency ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@13.0.0?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar"/>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-netty@13.0.0?type=jar">
      <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@13.0.0?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.100.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.100.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.18.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@20.0?type=jar"/>
  </dependencies>
</bom>
