2023-10-18T22:12:26Z OWASP Foundation CycloneDX Maven plugin 2.7.7 436dfb24c63a322708e4a5143d8543af 3ef2e8728dc9eff2f129c34057e46e9d2b10629a c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9 41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed The Apache Software Foundation org.apache.flink flink-table-api-java 1.18.0 This module contains the Table/SQL API for writing table programs within the table ecosystem using the Java programming language. Apache-2.0 pkg:maven/org.apache.flink/flink-table-api-java@1.18.0?type=jar https://flink.apache.org/flink-table/flink-table-api-javahttps://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-table/flink-table-api-java makeBom compile,provided,runtime,system The Apache Software Foundation org.apache.flink flink-table-common 1.18.0 This module contains extension points of the Table/SQL API. It allows for implementing user-defined functions, custom formats, etc. with minimal dependencies. required 45a1706451e69aea795eed2c458e4622 f1976972a0af2bf4f5ab259848714f87db9ec852 0e3988dead1f8b3bca5500afae2e5942f547d59a7b80473af329ff35138168ea 83c593f9147776cacd6a6bd2c5e3941cfa5685e89f586c345d9353c839bdf0a8ef5e6a071e159f32098b995b4d9b6439f50b55b17286ea191401e03234088d31 6d5e73bf184cbe74f31e54c4136b15f925623a6c110a65865e42f5dd75b154833a25ce0fd582779cc2c4cd41d2e294cb Apache-2.0 pkg:maven/org.apache.flink/flink-table-common@1.18.0?type=jar https://flink.apache.org/flink-table/flink-table-commonhttps://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-table/flink-table-common The Apache Software Foundation org.apache.flink flink-core 1.18.0 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. required 169ee59939126e7afcc9a6dd14e237d9 003872ba0164dde5cf3e1410ef6cbf258d80da7e ede889d1491cbe61450c650103084f9dda537938a0555f453a05f45e52301ed9 066274dc7d364cca3b955eb21ce89f88f80dc30028184c2db13e4c132a10cf3a27c1ba0b6a25fdf95ea6771cb6aea33eeb667304d8f28e6b7b98da2da1def302 5c304938871f314d46f1be06517d4d81413305bbd226d9f8fd57c2204ee8af0a4fb54483789577cf61ea28cae128fa39 Apache-2.0 pkg:maven/org.apache.flink/flink-core@1.18.0?type=jar https://flink.apache.org/flink-corehttps://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-core The Apache Software Foundation org.apache.flink flink-shaded-asm-9 9.5-17.0 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. 443601ddd70625d741be1d3382dcf012 d09e84a77ad8258d26f6be6bbb31fe81e3f98658 a79273d4fbea1683b5fe81bce25d7fe552a542690481132f7ded034a8f00169e b1414e5cd4cd63e1e8a2f4a18198834910a360dac22392e298458049d7bf05e74cea2a4206751026ad7dc2348112aa7f223d0ca6178a859cf343cf306a6bd4c8 ff6195b15060e725158aa6c8406e441576c38318fa5ea26e27ffd09f4ed4596b5198579d69ef0192dbb6edb3fda79d40 Apache-2.0 pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar http://flink.apache.org/flink-shaded-asm-9https://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink-shaded/flink-shaded-asm-9 com.ibm.icu icu4j 67.1 International Component for Unicode for Java (ICU4J) is a mature, widely used Java library providing Unicode and Globalization support 046a5f59abf6b67a464dea584d11e59d 2e159807158095566726600534034030dddab6d0 c4eb904caf5fba968a2f1a3b8aef14df801e9329b21697209ca30bfcf153867d b3036b162356a0a5dad39eee611dae27c6fbe53f9e5ec1f3529ab02d49d97093b58602f43dd855433a0bbe02f6253e46a9d1899911c8e2e73001ab2c9a79d68d c2b28649d0ef9bf68f258a9f432c627a553ead79670f0a7ada3d986091a0001c5ab9eca372f792734bff733370a61fb1 Unicode/ICU License https://raw.githubusercontent.com/unicode-org/icu/master/icu4c/LICENSE pkg:maven/com.ibm.icu/icu4j@67.1?type=jar http://icu-project.org/https://oss.sonatype.org/service/local/staging/deploy/maven2https://unicode-org.atlassian.net/projects/ICUhttp://sourceforge.net/mailarchive/forum.php?forum_name=icu-supporthttps://github.com/unicode-org/icu The Apache Software Foundation org.apache.flink flink-annotations 1.18.0 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. required 35de8951f695a5fae3ec78a2b94922fc 3db93916e96366e6cd4dcffbe0279015b2062dc8 7631ab408b5bb5a91ff907bebb56b565a70d8049d92681141ae8a2ef629d5e00 cd769f541def23612761a4188bf28de1331ca229efd605af1f0248eef7a19c4ce2be9584f2a107c61c8a71eca1e97f0206b998a3f9e1d34ca24355a2b5e0567f f0e82d0d3f637877e609a75da418cf15a6c229b7e672939d624fca6fa9bd78ec12c63d163c46e4947bb9b2e100863ecd Apache-2.0 pkg:maven/org.apache.flink/flink-annotations@1.18.0?type=jar https://flink.apache.org/flink-annotationshttps://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-annotations The Apache Software Foundation org.apache.flink flink-metrics-core 1.18.0 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. 846cb0b23b91c06bdb926cab57f731c8 fb5b977c6306eb50646a2d648030b6796a4ef7e3 4dc410cf9c1653f55e05ec76b8e1cf27f54a205c2a4df7e0660dbbdcc27d6ab0 a35eee0a788052afe7829b572dc0752d97619cab49488bd5eadd6ffc7cff997d940430aafe8616b1e5b0f5d6783987a6a97f4edc0aa582f0e54ae841b75a527a aa100a2bd86b38cc15a471ba96842225ec60f8cddc56008013daa64e9b67e3b92a8252d8b39faffa809cb336b3d413da Apache-2.0 pkg:maven/org.apache.flink/flink-metrics-core@1.18.0?type=jar https://flink.apache.org/flink-metrics/flink-metrics-corehttps://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink/flink-metrics/flink-metrics-core The Apache Software Foundation org.apache.flink flink-shaded-jackson 2.14.2-17.0 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. required 492259ac7642687cc959257a5512542f 689daca4a6fc14e361831e15abd96283166d0f62 37e87311498ae8da80adb2aa09ab6e9739d8611e09868e7220822206c739231e 3f4434cf93f2cd12b686aa84c4b1910d7e0191b2ddad7ba8de6d2c3805d3b49afcf5da06e1052faf01b6cb0dda554594f78e39db69d83208119c1f4f2cd5dc8f 9e689ab8b7e7f7db269fd5b1b0fc1dc5f13fed06b283c9b8ceec5c500fc9f6a4200674eef2bb884a9e67133de32e9a77 Apache-2.0 pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar http://flink.apache.org/flink-shaded-jackson-parent/flink-shaded-jacksonhttps://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink-shaded/flink-shaded-jackson-parent/flink-shaded-jackson The Apache Software Foundation org.apache.commons commons-lang3 3.12.0 Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. required 19fe50567358922bdad277959ea69545 c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81 c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc Apache-2.0 pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar https://commons.apache.org/proper/commons-lang/https://builds.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/LANGhttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-lang.git The Apache Software Foundation org.apache.commons commons-text 1.10.0 Apache Commons Text is a library focused on algorithms working on strings. 4afc9bfa2d31dbf7330c98fcc954b892 3363381aef8cef2dbc1023b3e3a9433b08b64e01 770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018 afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831 06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a Apache-2.0 pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar https://commons.apache.org/proper/commons-texthttps://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/TEXThttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-text.git com.esotericsoftware.kryo kryo 2.24.0 Fast, efficient Java serialization required 6cf0fa5b5d4f6b8226fd4a4bfb7532b8 0c6b206e80cfd97e66a1364003724491c757b92f 7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2 a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40 678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282 BSD-3-Clause pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar https://github.com/EsotericSoftware/kryohttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/EsotericSoftware/kryo com.esotericsoftware.minlog minlog 1.2 Minimal overhead Java logging f7cfbdf63b67df0bbfa4c7cb260885bc 59bfcd171d82f9981a5e242b9e840191f650e209 a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2 7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08 932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d BSD-3-Clause pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar http://code.google.com/p/minlog/http://minlog.googlecode.com/svn/ The Apache Software Foundation commons-collections commons-collections 3.2.2 Types that extend and augment the Java Collections Framework. f54a8510f834a1a57166970bfc982e94 8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5 eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8 51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16 dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073 Apache-2.0 pkg:maven/commons-collections/commons-collections@3.2.2?type=jar http://commons.apache.org/collections/https://continuum-ci.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2http://issues.apache.org/jira/browse/COLLECTIONShttp://mail-archives.apache.org/mod_mbox/commons-user/http://svn.apache.org/viewvc/commons/proper/collections/trunk The Apache Software Foundation org.apache.commons commons-compress 1.21 Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. 2a713d10331bc4e13459a3dc0463f16f 4ec95b60d4e86b5c95a0e919cb172a0af98011ef 6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471 da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef Apache-2.0 pkg:maven/org.apache.commons/commons-compress@1.21?type=jar https://commons.apache.org/proper/commons-compress/https://builds.apache.org/https://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/COMPRESShttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf?p=commons-compress.git The Apache Software Foundation org.apache.flink flink-shaded-guava 31.1-jre-17.0 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. required b8c5129f4164f8ee2086854bdb289690 00fa393c1db1308f4fb920f010f79c4c774e2f39 03442ae97c4ca34388568cbce0e67e9911b0137b2b3849dff7a550008d5a4336 15bb65f24054768915fbc29a95dfa93307b0babc39a02a204ae65eff44f259357b471fef9967b864b7a78e07d266933ce8e3eda8a866fcc73643cc38bcc5653f c8e6f2630c0824bbd1902a25884f09c076efbbbe0265f5d3fb49370affcff81ee5dd8b7887ba4bf063915446b937117a Apache-2.0 pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar http://flink.apache.org/flink-shaded-guavahttps://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink-shaded/flink-shaded-guava The Apache Software Foundation org.apache.flink flink-shaded-force-shading 17.0 The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. optional 6890ff555c82f3bb156cf9c73bf09cf9 345c153973a17fb8a98d368352e14893edcbd610 dcc7dff160a40b74fa5db2805b2004153ffd0517968f3c7843a8ee43be82e710 9de23513832248618b78e279c0e3900f5cafb7193254ef6818b4f0b6f3b70045dd9cc4fdd13caeeca8b70a44f38201ce055f07248cdf08930a20e1b7a73997ff 063611872b4b1a1718e0472e32198bded0d74fa656e5c47a7b20038cd5ff70106e3109b60fe882880feea486e1ef83bf Apache-2.0 pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar http://flink.apache.org/flink-shaded-force-shadinghttps://repository.apache.org/service/local/staging/deploy/maven2https://mail-archives.apache.org/mod_mbox/www-announce/https://github.com/apache/flink-shaded/flink-shaded-force-shading QOS.ch org.slf4j slf4j-api 1.7.36 The slf4j API required 872da51f5de7f3923da4de871d57fd85 6c62681a2f655b49963a5983b8b0950a6120ae14 d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0 f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b 2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar http://www.slf4j.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j/slf4j-api com.google.code.findbugs jsr305 1.3.9 JSR305 Annotations for Findbugs required 1d5a772e400b04bb67a7ef4a0e0996d8 40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf 905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed 06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a 56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada Apache-2.0 pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar http://findbugs.sourceforge.net/http://findbugs.googlecode.com/svn/trunk/ Joe Walnes, Henri Tremblay, Leonardo Mesquita org.objenesis objenesis 2.1 A library for instantiating Java objects 32ccb1d20a42b5aaaceb90c9082a2efa 87c0ea803b69252868d09308b4618f766f135a96 c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80 1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c 657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1 Apache-2.0 pkg:maven/org.objenesis/objenesis@2.1?type=jar http://objenesis.orghttp://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/easymock/easymock/objenesis