{ "bomFormat" : "CycloneDX", "specVersion" : "1.4", "version" : 1, "metadata" : { "tools" : [ { "vendor" : "OWASP Foundation", "name" : "CycloneDX Maven plugin", "version" : "2.7.10", "hashes" : [ { "alg" : "MD5", "content" : "1cc7f6a0382f8bb2f758d6a6ea401d1b" }, { "alg" : "SHA-1", "content" : "a4297947a1f2d7d453105db542651614bbd37f38" }, { "alg" : "SHA-256", "content" : "bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872" }, { "alg" : "SHA-512", "content" : "9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39" }, { "alg" : "SHA-384", "content" : "93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb" }, { "alg" : "SHA3-384", "content" : "4467f16e9ca32190a6e49c65339eb28ee5e8c78f4e918fcf95128a4b7648898de56ccb43eacfad0c9391ef8cdb7d629a" }, { "alg" : "SHA3-256", "content" : "ed2996c99b483e969221d5e9a40f562ea2ab85442d361d72a90e85266a3ed781" }, { "alg" : "SHA3-512", "content" : "c8e6ea9ddc38edc77e284b3bf541663e84752bdc59ed1935799847a48a14ea2fa531b61008fefcba37d732a56702a11ac112437b9b80d18f4ecc8ef0ecfb32cf" } ] } ], "component" : { "publisher" : "Eclipse JGit Project", "group" : "org.eclipse.jgit", "name" : "org.eclipse.jgit.ssh.jsch", "version" : "6.9.0.202402281855-rc1", "description" : "SSH support for JGit based on JSch", "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch@6.9.0.202402281855-rc1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.ssh.jsch" }, { "type" : "build-system", "url" : "https://ci.eclipse.org/jgit" }, { "type" : "distribution", "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/" }, { "type" : "issue-tracker", "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology" }, { "type" : "mailing-list", "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev" }, { "type" : "vcs", "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.ssh.jsch" } ], "type" : "library", "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch@6.9.0.202402281855-rc1?type=jar" }, "properties" : [ { "name" : "maven.goal", "value" : "makeBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" }, { "name" : "maven.optional.unused", "value" : "true" }, { "name" : "cdx:reproducible", "value" : "enabled" } ] }, "components" : [ { "publisher" : "Eclipse JGit Project", "group" : "org.eclipse.jgit", "name" : "org.eclipse.jgit", "version" : "6.9.0.202402281855-rc1", "description" : "Repository access and algorithms", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "ff82681b79fdb32ceac9147ee33edfab" }, { "alg" : "SHA-1", "content" : "58835d04f3ea88f3e44e360bad59dd4fd19cd920" }, { "alg" : "SHA-256", "content" : "106e7cb5a477cb4ee9df8b4be19af16748b601acad93c7775379b6d217d495c6" }, { "alg" : "SHA-512", "content" : "92e62cad21ea68a628384f746eac7ec23f1522633c479bc0bb70d584e36e3476813f4277bad0c7e890ac31fe68082dadbc4678c1eb997e96898761f10bd9d22d" }, { "alg" : "SHA-384", "content" : "11eb1a800101baa6cb058b316358b910655aa209b0290e924cf1137fc3129b0377d087ac692df3614ba1be271b875d36" }, { "alg" : "SHA3-384", "content" : "74e3145d8e29f77dc7be22e04f212c7084d0d02012a6d014bb5341c86e53d6f68f2ebb1c1e96886fc6bcb45e09304a16" }, { "alg" : "SHA3-256", "content" : "5372ec8540033f01e0e07d037164a24b0b3f46ae40ff5f035c28a9c10fb11d5f" }, { "alg" : "SHA3-512", "content" : "b238133db53658aba53fe39d7552c13df75fee4f4fa0d841979be412222d02fedc922a7a089299ca9369a944523fd2888079d3458c6d046b4de7598021369300" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit" }, { "type" : "build-system", "url" : "https://ci.eclipse.org/jgit" }, { "type" : "distribution", "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/" }, { "type" : "issue-tracker", "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology" }, { "type" : "mailing-list", "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev" }, { "type" : "vcs", "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit" } ], "type" : "library", "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar" }, { "group" : "com.googlecode.javaewah", "name" : "JavaEWAH", "version" : "1.2.3", "description" : "The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression. JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme. The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.", "hashes" : [ { "alg" : "MD5", "content" : "8fdeda28c1fb10e67b3d79f86bef5e61" }, { "alg" : "SHA-1", "content" : "13a27c856e0c8808cee9a64032c58eee11c3adc9" }, { "alg" : "SHA-256", "content" : "d65226949713c4c61a784f41c51167e7b0316f93764398ebba9e4336b3d954c2" }, { "alg" : "SHA-512", "content" : "48cd9df9252c58e9ffe4583e68607944bcdf2ad7a3be7b4317467f503c4f56cdbde358ca7c4f34fa620d01615072a42f3a572fc4f1237e266310b7508e79bcac" }, { "alg" : "SHA-384", "content" : "d1fd074f21b8a54a07d3f4579376d7c3ab72f24814ebc9ba92344e9da4721e9bfa3cda3a599137e4ddf2395a3c5b88e4" }, { "alg" : "SHA3-384", "content" : "a553864f196f73c139a104170ab79e780046fb5f322072c5494a6590361021f875afd7168f858b0531b61918ab49b94e" }, { "alg" : "SHA3-256", "content" : "bab97f3f893af36c36218a151b0c3fece27d47f358cc19e1ca9c22d77942bb76" }, { "alg" : "SHA3-512", "content" : "be817b93c7093d44ec8dded565d7e5651772ce38e9c72283c05191b33d0ecb2798cd385395f553500446573ac49dccc21f4ba3067d71eb89e03daa384d0193be" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/lemire/javaewah" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/lemire/javaewah/issues" }, { "type" : "vcs", "url" : "scm:git:git@github.com:lemire/javaewah.git" } ], "type" : "library", "bom-ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "commons-codec", "name" : "commons-codec", "version" : "1.16.0", "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", "hashes" : [ { "alg" : "MD5", "content" : "6e26920fa7228891980890cce06b718c" }, { "alg" : "SHA-1", "content" : "4e3eb3d79888d76b54e28b350915b5dc3919c9de" }, { "alg" : "SHA-256", "content" : "56595fb20b0b85bc91d0d503dad50bb7f1b9afc0eed5dffa6cbb25929000484d" }, { "alg" : "SHA-512", "content" : "eee671e66d808b56b81e15574675cf132d7628c010736d580915bbf8c04849f04df1d95ddeea13c4e119f8f0a564c7003beeb8ab437564e080ee27063c1e52b9" }, { "alg" : "SHA-384", "content" : "65eb89c19815ea11585ff6c91e2ea4acd6a41ee35502891ba29fb5ec390d567190cf2f4120bfbf50ec470274df22a25f" }, { "alg" : "SHA3-384", "content" : "1841b59a30e095b063d9a421be91ee2adf28c98a9b32e4ef24130b60362db2f7f69eea04969d035dc4b01db38a14c65c" }, { "alg" : "SHA3-256", "content" : "8327323df750189daa3755a4fb3936b685f72b46f3917d5dae2c1f3812577c37" }, { "alg" : "SHA3-512", "content" : "664a0b5779c3e448d448d692a0ab19c2aec422d2adbfb23969bc44d2c6446257104d8206ccca4c0107c58f9a77ece5a48e2fd69fe8038f7cad8254675dadbb05" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-codec/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/CODEC" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://github.com/apache/commons-codec" } ], "type" : "library", "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar" }, { "publisher" : "JCraft,Inc.", "group" : "com.jcraft", "name" : "jsch", "version" : "0.1.55", "description" : "JSch is a pure Java implementation of SSH2", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "c395ada0fc012d66f11bd30246f6c84d" }, { "alg" : "SHA-1", "content" : "bbd40e5aa7aa3cfad5db34965456cee738a42a50" }, { "alg" : "SHA-256", "content" : "d492b15a6d2ea3f1cc39c422c953c40c12289073dbe8360d98c0f6f9ec74fc44" }, { "alg" : "SHA-512", "content" : "b6827d8de471682fd11744080663aea77612a03774e2ebcc3357c7c493d5df50d4ec9c8d52c4fcc928bdfdd75b62b40d3c60f184da8a7b8aba44c92afecee7a5" }, { "alg" : "SHA-384", "content" : "6da3c9e2d72bd25991936dfe918ae7f235d03f386a8f797b65a154ae71b36292f873338ccbf5dd4fd3bc63619c806dbe" }, { "alg" : "SHA3-384", "content" : "92676d161f4ebe078df11f9cda6dc0bed4c828830bb98340ac34fdb89dc76b019d4320f6fdd3db13cdd6e33582cb9272" }, { "alg" : "SHA3-256", "content" : "99c7de83022da8f85fcef262e29051b8c33c81d492cf344a5d123b83b5a459f7" }, { "alg" : "SHA3-512", "content" : "33344b4ee79f0e7c8901b828f2bea13d25727361deeaa37d85dbaf3c44a31e8d0b4f3966ce2e4c3705bebd046cb7adba0486d02babdbc68e9819d059b5981559" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause" } } ], "purl" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.jcraft.com/jsch/" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "http://git.jcraft.com/jsch.git" } ], "type" : "library", "bom-ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar" }, { "publisher" : "jcraft", "group" : "com.jcraft", "name" : "jzlib", "version" : "1.1.3", "description" : "JZlib is a re-implementation of zlib in pure Java", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "386d3714fef534d21175d8885ae48bf7" }, { "alg" : "SHA-1", "content" : "c01428efa717624f7aabf4df319939dda9646b2d" }, { "alg" : "SHA-256", "content" : "89b1360f407381bf61fde411019d8cbd009ebb10cff715f3669017a031027560" }, { "alg" : "SHA-512", "content" : "339793df0001214aaadac2a5456c3cd54a0c09ba2c9e73cf13155adbfdf1c2a953f7336903e45e76a52ce6b48c5b7c78436667d7836e7354e02e85ba0908afd3" }, { "alg" : "SHA-384", "content" : "e0fe861e00a6136b1c97ae781ef56068b0e30c22a64ba4186b1703fd543878920e809f32756323f0fa68afc25f64653e" }, { "alg" : "SHA3-384", "content" : "48f4e07ed293214fedb6ed444886131225f20e591ab0ac8236f64498b2f9aae067d0cb92c8e100263e6e9ccad8074c52" }, { "alg" : "SHA3-256", "content" : "1a141fb006354f69bbf72a11e15c716be8260f7670ceff4ca764394e4473a91e" }, { "alg" : "SHA3-512", "content" : "90236a8e878a8838ddc5f3129a1a9ab84d0849702bc4b8ec02d6c5dc09271927359d7da1121f55f36c16bd7d371b6fc631d5439cdd93d9a30ab248dcd84d4618" } ], "licenses" : [ { "license" : { "id" : "BSD-4-Clause" } } ], "purl" : "pkg:maven/com.jcraft/jzlib@1.1.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.jcraft.com/jzlib/" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "git://github.com/ymnk/jzlib.git" } ], "type" : "library", "bom-ref" : "pkg:maven/com.jcraft/jzlib@1.1.3?type=jar" }, { "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "1.7.36", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "872da51f5de7f3923da4de871d57fd85" }, { "alg" : "SHA-1", "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14" }, { "alg" : "SHA-256", "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0" }, { "alg" : "SHA-512", "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b" }, { "alg" : "SHA-384", "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a" }, { "alg" : "SHA3-384", "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b" }, { "alg" : "SHA3-256", "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881" }, { "alg" : "SHA3-512", "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/licenses/MIT" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ], "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" } ], "dependencies" : [ { "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.jsch@6.9.0.202402281855-rc1?type=jar", "dependsOn" : [ "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar", "pkg:maven/com.jcraft/jsch@0.1.55?type=jar", "pkg:maven/com.jcraft/jzlib@1.1.3?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.9.0.202402281855-rc1?type=jar", "dependsOn" : [ "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar" ] }, { "ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.jcraft/jzlib@1.1.3?type=jar", "dependsOn" : [ ] } ] }