{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.5",
  "serialNumber" : "urn:uuid:374e9602-e0ff-3ac4-a385-861e61bbee45",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.8.2",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "3bb2c0a57386c1551f09c3328474c1b6"
            },
            {
              "alg" : "SHA-1",
              "content" : "3b287e981e81263165b606ca210ed42a9f6bced1"
            },
            {
              "alg" : "SHA-256",
              "content" : "37fab69d06c0d402de9fe600381f63bb5b98f864ea8589c52d71bbd6dd60d293"
            },
            {
              "alg" : "SHA-512",
              "content" : "f65b4722540a930422d4a28cb54c982dbe01fdb41717c3b95e9836137856cabed2b836b1b9e0394798d99e9973ce6931c61675cbed859238cab1a99d3063786f"
            },
            {
              "alg" : "SHA-384",
              "content" : "55fc5a528d5fd426d306f26e6a73fd8cf9e779a101f31591ca084c8f615d8073d80cc24ee04ea1df209051842e481080"
            },
            {
              "alg" : "SHA3-384",
              "content" : "888b88d83887fe1e3c62f6ab3f11501ae4e97dfc0d954b6eec3b0133dfccb92e984a6ace18fb6965cf215e0cd01de9aa"
            },
            {
              "alg" : "SHA3-256",
              "content" : "26a3386e02289680b9e6d24900824d52a35238ce76cb0e67ba3090fc638f269b"
            },
            {
              "alg" : "SHA3-512",
              "content" : "a229e418d8af12002e51e39bf1201b7ea86a9a883386524386383454e970cc3cfb44cb1020022ff91e96349d8db8575768052e1bbaf415478e8e99d9e4e22d0f"
            }
          ],
          "type" : "library"
        }
      ]
    },
    "component" : {
      "group" : "nl.basjes.codeowners",
      "name" : "codeowners-reader",
      "version" : "1.9.0",
      "description" : "A library to use and verify the CODEOWNERS and .gitignore files.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/nl.basjes.codeowners/codeowners-reader@1.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/nielsbasjes/codeowners"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/nielsbasjes/codeowners"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/nl.basjes.codeowners/codeowners-reader@1.9.0?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "ANTLR",
      "group" : "org.antlr",
      "name" : "antlr4-runtime",
      "version" : "4.13.2",
      "description" : "The ANTLR 4 Runtime",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eecf1908f0cfff10f8bb82878b5ca401"
        },
        {
          "alg" : "SHA-1",
          "content" : "fc3db6d844df652a3d5db31c87fa12757f13691d"
        },
        {
          "alg" : "SHA-256",
          "content" : "dd3e8a13a2d669bf84fb8d834de35ce4875f27157698d206241ec8488aadcaf7"
        },
        {
          "alg" : "SHA-512",
          "content" : "1c3e47b6b5dc40ca13927a7ae2ed187f470b8f406cea325e73c7a18af8e07b9ada0484312dd611f225f030b5585924932c702fd9326c143a626e271682b2b95e"
        },
        {
          "alg" : "SHA-384",
          "content" : "f49c2395e16fe71fa35622bcca225c0910609ef09626207ce4522c73c760fd232489489ea88d54c88fc21b05a03031e0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "322345326586e3f8954e80efa80b510228a7eb06f6d7283177f04809c15aad1722c700897c8c8f405955946b63808bc0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2d39db66ce6dc530c7796f75d646f4d8316586e2acd0756524c25b238eb71618"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a4cdaec49dff4a6963a0db56712a837db7300de7145335b915ffc2234b0d53d6f9fd4b1d6e82c4350e22fee9390ca643cfbf7f51ff47a11bc44561b6686be32b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.antlr.org/antlr4-runtime/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/antlr/antlr4/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/antlr/antlr4/tree/master/antlr4-runtime"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.16",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c8de8f5d740584cb24b5652cfba8b3c4"
        },
        {
          "alg" : "SHA-1",
          "content" : "0172931663a09a1fa515567af5fbef00897d3c04"
        },
        {
          "alg" : "SHA-256",
          "content" : "a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a"
        },
        {
          "alg" : "SHA-512",
          "content" : "91c2e7b30f24649bb3edfc7f138c2b7dc715ad36963af159defb80a71205eb7e4c5bcc80d779ef993b567a56724064f190c93985f32665a8df85198a03a2f1bb"
        },
        {
          "alg" : "SHA-384",
          "content" : "ed0cc7ad67343b9fe4df03ea534025bf9d90c112b33cd8920f29890d923c349b69820c9c42b9e8882047af848b74f99d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "331ac707cfa4b2bda44deffce7d2a640abb9ae12968cb1ac4879ba1b45542e3d3ce1016c812ff1f2449336bc7ea6bebb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3f68204951bb4baedc34fdd7194d0801042268aba0c58ac5d760779510743fbb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d7a2f7359e7b2cd6ae3650d28352bf8789acf5855a3596a3be2a236a94931abf8bacf0d6a457afa43164be53abb19cc223ef4f030822a3295c036c078527e361"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/nl.basjes.codeowners/codeowners-reader@1.9.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar",
      "dependsOn" : [ ]
    }
  ]
}