<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:fb078d03-bba6-3b37-9c0c-8e34458e7570" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/com.github.hazendaz.git/github-desktop@3.4.20?type=pom">
      <publisher>hazendaz</publisher>
      <group>com.github.hazendaz.git</group>
      <name>github-desktop</name>
      <version>3.4.20</version>
      <description>Distribution for Github Desktop</description>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.hazendaz.git/github-desktop@3.4.20?type=pom</purl>
      <externalReferences>
        <reference type="website">
          <url>https://hazendaz.github.io/github-desktop/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/hazendaz/base-parent/actions</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/hazendaz/base-parent/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/hazendaz/github-desktop</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeAggregateBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@3.49.2?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>3.49.2</version>
      <description>checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">41c09e58f686fc6d4e194aa37a1125b0</hash>
        <hash alg="SHA-1">98ac669ccce59dba8ca360d3e07891d62b6b946a</hash>
        <hash alg="SHA-256">33b1d8b2c4b00f7d4f4b4931424274f3f729474ce3a87cea09a879976a1dcaeb</hash>
        <hash alg="SHA-512">64984b3595a5bbb0fec4245b8c4184650d928191fc79fb6eb63a88f2562ccbf1d0f42c0e4c20e8400a66ddec78aa2735d65a93db6d89fd385ecb05cb12da439e</hash>
        <hash alg="SHA-384">d3751ad46636f72f3286d4202732fc2e36f6a464c44e1ea44fb2399b6415ff51e0e2efef343691e49c25f1cb57154f8e</hash>
        <hash alg="SHA3-384">dc80985b82766f39826529774f83ebb298e0960af67cd2de36106a957183ebaead62ed1bc7e73a5d9e4ed114880f8022</hash>
        <hash alg="SHA3-256">c223da98d7f714b3ca1e4c93e41f3229fc186b28625dca7cc9774ccf9ff44394</hash>
        <hash alg="SHA3-512">55fd160e783e1526f705d61ea171b64c084b0d583314ff560d40d3cbb2c992ec630bf3698271b672471433146a30bfec72ef400aa16613beb6271c5f94dec24d</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@3.49.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://checkerframework.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/typetools/checker-framework.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.37.0?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.37.0</version>
      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dce0a1c83d3dc06c2715c96e11d2c429</hash>
        <hash alg="SHA-1">8512660d1269d166fad497f51de35da61447f063</hash>
        <hash alg="SHA-256">d29a6263b48d46d4c7c28b64717a6d105b3e2a3e64256092f845e8e774fca6ba</hash>
        <hash alg="SHA-512">fc44571f9095764c3ba1a5372a2603aa7bc8557578bd11d6ceff70a237e7af5d55578706bf8413cb203573fea69199e208c527f5d4c8b171284c7b229324ed13</hash>
        <hash alg="SHA-384">fe53d02fbaa8bd20d225717b2b859df085487f4f3a84c5207308a77ab7593772194762b897ded223288805b948bdc7dc</hash>
        <hash alg="SHA3-384">dc0d42f714fe4b93f25160444f74fdb0ceab92bc01de68e413c069122aebc22cdfd70ab15138f881c6312b083681def7</hash>
        <hash alg="SHA3-256">9b1e2555cc8b66ab2d1dda37192574212f5b57347739edc74410322025e72299</hash>
        <hash alg="SHA3-512">b42c3e648b8db5796fa055e5ebf4735ef830c26d37696c69c69fffdab2c0c7199e5c139231a268732f4b11d6a790bba32cec3a8b42134d7d34d36062c57f38b2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.37.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://errorprone.info/error_prone_annotations</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/error-prone/error_prone_annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar">
      <group>com.google.j2objc</group>
      <name>j2objc-annotations</name>
      <version>3.0.0</version>
      <description>A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f59529b29202a5baf37f491ea5ec8627</hash>
        <hash alg="SHA-1">7399e65dd7e9ff3404f4535b2f017093bdb134c7</hash>
        <hash alg="SHA-256">88241573467ddca44ffd4d74aa04c2bbfd11bf7c17e0c342c94c9de7a70a7c64</hash>
        <hash alg="SHA-512">1406b1aa53b19f8269129d96ce8b64bf36f215eacf7d8f1e0adadee31614e53bb3f7acf4ff97418c5bfc75677a6f3cd637c3d9889d1e85117b6fa12467c91e9f</hash>
        <hash alg="SHA-384">24373643a4e2f8e1cf919d495e1e79b24dd9dbbbeecb06477be8764313f0b3b465fde74ea2cf5542fc8cba090132052f</hash>
        <hash alg="SHA3-384">afa264c8d8d946e43438ae728f0ae7a2c12797b56f9ad885d5b3e9a7396eb8481ca6840c2a990a7c5da45968794b36d8</hash>
        <hash alg="SHA3-256">4df89618b479d5fbede9363c6f914218a44007f48f29c6b6d58243558ced6152</hash>
        <hash alg="SHA3-512">b25b2ad8dddeed8757ffe22a96cfa7511617d86baa0ed4a25b1850162b54e1132d40dbc2dfca0a6ff0a350b16628a0d2b523418eeb8f986e0f505833da4f7181</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/j2objc/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/google/j2objc</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.projectlombok/lombok@1.18.38?type=jar">
      <group>org.projectlombok</group>
      <name>lombok</name>
      <version>1.18.38</version>
      <description>Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">789cacd8d3969e9d23e6e6baec747f70</hash>
        <hash alg="SHA-1">57f8f5e02e92a30fd21b80cbd426a4172b5f8e29</hash>
        <hash alg="SHA-256">1e1e427c36ff63c44fd30ef292d9e773ea3154460ab6265d3fed7e6f5bc50fb9</hash>
        <hash alg="SHA-512">0b0b63aadb705eded6da00cd3960fc888e1ee1a2bf2feb896e4f0015ab429257ad6f974817b63e94cc2aed7fb80b22e9544584dfdba69197ec512d1ab4d2a69f</hash>
        <hash alg="SHA-384">e3f37487119be4c842b5a9b585074e674f1895fd2f5175235fcd79d30a091e87a5b051750ec9e6ea163f49557141bcb6</hash>
        <hash alg="SHA3-384">7a9400db0abb3e20de09f68044a08017d9731fd897436b75f4b83de32df885d9763c0c790668145942d9aa69f38a5122</hash>
        <hash alg="SHA3-256">764b72cfb6320d43d95e422e6fea5ef32bc73128e10421f7c9854e518f0e8a29</hash>
        <hash alg="SHA3-512">2ae71758b1e569d90ad1e270e7ab6b3de30ab89c3cce2e09707f853e09442d174c519512d655f7b1c3c2dbba1f3a05aa391792bab84c1663c18cb02cf3f64070</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.projectlombok/lombok@1.18.38?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projectlombok.org</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/projectlombok/lombok/issues</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/projectlombok/lombok</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.gaul/modernizer-maven-annotations@3.1.0?type=jar">
      <publisher>Gaul</publisher>
      <group>org.gaul</group>
      <name>modernizer-maven-annotations</name>
      <version>3.1.0</version>
      <description>Detect use of legacy APIs which modern Java versions supersede.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b188aef3e94d39c7e7a8ebb6b740559f</hash>
        <hash alg="SHA-1">06eeda8c72054cfccf610ae772f606dbd13acf32</hash>
        <hash alg="SHA-256">1b4e8adc970715721846afeb632edd1c9dc9c07dc052b691c0c8d899c9b9f017</hash>
        <hash alg="SHA-512">9429e79164aa1e86cbf943c07966f20d0f53cef95c3311c3fa1454f2715654a769636ea6a314b7340901e580eb3308b616155f5c40c9a3f616e74bedeecd7368</hash>
        <hash alg="SHA-384">05ee6c7f079aef5a60058ad7422ec717983c9193de64fe8bb79dc43f6f2d554e989b66145e0a9f149bc5e3e209258410</hash>
        <hash alg="SHA3-384">9325174d7bf8a2e10f360365a271987e095703d119367e1fe6fcd6944e75157814ec7bf7a706a8d584d4ae5638054315</hash>
        <hash alg="SHA3-256">9346dcca0b055052d9923e4d334e53d402f52ef9b4ed712a3ed3330c41ef371b</hash>
        <hash alg="SHA3-512">2a384ec462fd61bd27c4d7396f8afefc10846223ee2d85656b19e34e0fce753fa7d13adffd11629e09b605b3a5be8d5a3254a20023df817a8f1e79dfc1219e8d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.gaul/modernizer-maven-annotations@3.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/gaul/modernizer-maven-plugin/modernizer-maven-annotations</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/gaul/modernizer-maven-plugin/issues</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.3?type=jar">
      <group>com.github.spotbugs</group>
      <name>spotbugs-annotations</name>
      <version>4.9.3</version>
      <description>Annotations the SpotBugs tool supports</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6149845e438bd5a34ebaf81f8bc9e243</hash>
        <hash alg="SHA-1">4d362bffcfdfd734999e94d7d98fde678aae71cf</hash>
        <hash alg="SHA-256">13532bfe2f45fcd491432221df72d9cd0efb8f987c9245e12befa192c8925ce3</hash>
        <hash alg="SHA-512">78a74a014eafff94b16fdba52eac7e8a689cada2ef14d0c230412b904231d576cae49571aec95ea7ab9fb10d0defbc8b356007180320fcbc8b3635bd4b3be0b0</hash>
        <hash alg="SHA-384">1cba6d4013aaad6bf620fb76b7eee278964771cee1d9b849ce5643728cdb75689a4e45c2278892f4379cb9c05d847ecc</hash>
        <hash alg="SHA3-384">3cf6d8d62cab5806a08291b8459f480879bec229935f538dff421566fde135a617bf6d3629f4ca2a183068f4e8923c7d</hash>
        <hash alg="SHA3-256">86fad9ff61ee413170b0368320c0a8cfab3e260ea054564b80ded970657876c3</hash>
        <hash alg="SHA3-512">0ceaddd802f486761a9fd11754f2adf3c8aac48289fc98a042b742131c7c6efb8f08771d6b169e3b6fdafb8e7a09882bc0f759a3c849d4dff919e0b7e8e33eab</hash>
      </hashes>
      <licenses>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spotbugs.github.io/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spotbugs/spotbugs/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>3.0.2</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd83accb899363c32b07d7a1b2e4ce40</hash>
        <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
        <hash alg="SHA-256">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>
        <hash alg="SHA-512">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>
        <hash alg="SHA-384">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>
        <hash alg="SHA3-384">9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1</hash>
        <hash alg="SHA3-256">223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff</hash>
        <hash alg="SHA3-512">3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://findbugs.sourceforge.net/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://code.google.com/p/jsr-305/</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/com.github.hazendaz.git/github-desktop@3.4.20?type=pom">
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.49.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.37.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.projectlombok/lombok@1.18.38?type=jar"/>
      <dependency ref="pkg:maven/org.gaul/modernizer-maven-annotations@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.49.2?type=jar"/>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.37.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.projectlombok/lombok@1.18.38?type=jar"/>
    <dependency ref="pkg:maven/org.gaul/modernizer-maven-annotations@3.1.0?type=jar"/>
    <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.3?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
  </dependencies>
</bom>
