<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:76799796-96db-388e-b35a-3dd3c7022875" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/com.github.hazendaz.git/github-desktop@3.5.11?type=pom">
      <publisher>hazendaz</publisher>
      <group>com.github.hazendaz.git</group>
      <name>github-desktop</name>
      <version>3.5.11</version>
      <description>Distribution for Github Desktop</description>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.hazendaz.git/github-desktop@3.5.11?type=pom</purl>
      <externalReferences>
        <reference type="website">
          <url>https://hazendaz.github.io/github-desktop/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/hazendaz/base-parent/actions</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/hazendaz/base-parent/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/hazendaz/github-desktop</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeAggregateBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@4.1.0?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>4.1.0</version>
      <description>checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">915efc242a44466cf82281e2229aaeb9</hash>
        <hash alg="SHA-1">127f572d0f7e9dfb205bc4667dc361056e536c88</hash>
        <hash alg="SHA-256">a7e08a5400f6e1d97818ed01a8624473fee90b0ded941a44d190f1210c081790</hash>
        <hash alg="SHA-512">b51d76ae0cbe4bc2fea72d8b4d9249dbf0df8f11cccb4170ddc4b61509e2354bf07cb338f6558691f0df475b33eda3e970e3e5672b55744aee56583f6c09e323</hash>
        <hash alg="SHA-384">42d6c681a430d3a1b2e931adf11dc29da3a01ceb6ac00d9694c35fa8bb2c5fcb04acc028bee58ee60a4f4941b5831be1</hash>
        <hash alg="SHA3-384">9098706ee8921a0cd242b2ea38aca74542b1b1f1e1b3de3ba3a5411da59b77c8435b1afa0d50421cf2ba8fddc1ae8167</hash>
        <hash alg="SHA3-256">2a5b16082cc30d5e2e50560abdb6d4d2b2c88ea15ca67e9189c6ad9f207f6d42</hash>
        <hash alg="SHA3-512">f9088dd68905a111741b1bd850e85a8a7202d5a183d95fab167925ba045f9d9c11e0d2a75b942d40129b7fb99ea416f705788c7cb3fe9216de5526e5bc60871a</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@4.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://checkerframework.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/typetools/checker-framework.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.49.0?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.49.0</version>
      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f15f20dc5df752e2c0f8e37f7cdd9b1d</hash>
        <hash alg="SHA-1">8b42a2e3865f6e0576da3fad51dbb96732ff0f14</hash>
        <hash alg="SHA-256">3b1003e51b8ae56fdbd7c71073e81d1683b97e6c4dff5a9151164d59b769d13c</hash>
        <hash alg="SHA-512">88ad711b9c573a4f44a0e4c230104845ddf92b51d0955e390736bff1fe7afda6718c3d8b9d73349054668ecd83ceb174ef0021f10cf369df600aec4ac50998d4</hash>
        <hash alg="SHA-384">8842b762fcc5fc14e694e05a3fce0f5cb6c04cd3977c869a81b85e087cdc967fa88b03cce940cf68a12fc08854b5c7f7</hash>
        <hash alg="SHA3-384">09b0a23d9757fab413da9121446849ca9442d42774fb1d61432d94dd4e75c9e2269a6888f0d945d476f8691c0dbdb7cd</hash>
        <hash alg="SHA3-256">8e4d7a07a2f8f5dc26dd03c33a4ca2ee4c7ad258038c185f375027f880635643</hash>
        <hash alg="SHA3-512">ef162cd1e3c52a58e928980ce3a78723a2f379767a2fd10a057a4b3b7c58cc4cf3bfe58e407813b32f264d59ca49ef2503e7ba5dc66d71f182ad77d963977ef8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.49.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://errorprone.info/error_prone_annotations</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/error-prone/error_prone_annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar">
      <group>com.google.j2objc</group>
      <name>j2objc-annotations</name>
      <version>3.1</version>
      <description>A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">abe8bd3abff622b9a8b15c3a737aa741</hash>
        <hash alg="SHA-1">a892ca9507839bbdb900d64310ac98256cab992f</hash>
        <hash alg="SHA-256">84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b</hash>
        <hash alg="SHA-512">34ee5aad57b0b507e89c897306f73043f80fa0eb02b453e54d9052feb0808a0d2ed835d888946211921d2bf733780b19ff636479ce19b9f48814ba6008733ce1</hash>
        <hash alg="SHA-384">7b760a346a586d6a3fa4477807e2f02f091e61898fc9a6ff449e43c55b6465fbbc17720663183c84c41d4d8814085e51</hash>
        <hash alg="SHA3-384">a2166c1c08f947c0e60aa7c9167602942e7bac37ba45863d34c0132a1f352e7807a382588d350b93bdbbbbe315a3573f</hash>
        <hash alg="SHA3-256">3d4d3b8bfd2ad13351a53610aa4bf1c5a69d2bde4272c281003120ed9bcddb8c</hash>
        <hash alg="SHA3-512">0a574b379a3f8022f0b88252c87d0e6b6cfa434fdb981efd1b24387025a962d7ac4e90161e8bd048df142bf52f4fc41e4a0c1d45e4eeb872c5954aad552988e9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/j2objc/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/google/j2objc</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.projectlombok/lombok@1.18.46?type=jar">
      <group>org.projectlombok</group>
      <name>lombok</name>
      <version>1.18.46</version>
      <description>Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e02f419a66b86c594ffcafc862778723</hash>
        <hash alg="SHA-1">a5cfe99fdf320e84955ef653f2ce1bf789d11385</hash>
        <hash alg="SHA-256">01f7b1a015e33e2b62d5f5f37053306357ab1415fd181fcba7794f5d198c1126</hash>
        <hash alg="SHA-512">c143d203a3d746d37ba2860462d147d8919f0b0f32db4b6372cb223b90fdc008d54beb16337260c447aee04fd9fec9201a8fab1ba9a7b865ee7e16b49f637f02</hash>
        <hash alg="SHA-384">5ccfac45864340526b2d76795afbd74d1b207b7ea10ec33a1c913de6d60de8a982fcd506f18045d26d3de0ef104d3a8f</hash>
        <hash alg="SHA3-384">689c606b90feb4d538c4ff1d43ecefe55c4759f243f689ef576e98b0d8e1aa71ff49afe6acc1c8c617cec1d1b028d8c5</hash>
        <hash alg="SHA3-256">c8d01235e239fbe262a2cab8a6a580a87b9dcb25905024ee3551f3c9a7d832ea</hash>
        <hash alg="SHA3-512">a7b012460dd59ee87ff08b6fffbaf50425659bcfc370580a9713f764e6e6a74a1a7b2d150e246337cf01655cf25a224305157dde6c71e92b07298330a4f672af</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.projectlombok/lombok@1.18.46?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projectlombok.org</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/projectlombok/lombok/issues</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/projectlombok/lombok</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.gaul/modernizer-maven-annotations@3.4.0?type=jar">
      <publisher>Gaul</publisher>
      <group>org.gaul</group>
      <name>modernizer-maven-annotations</name>
      <version>3.4.0</version>
      <description>Detect use of legacy APIs which modern Java versions supersede.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f46f4c747b5ab932252fea7d0733cc04</hash>
        <hash alg="SHA-1">9deb15aa2a3a725be971c8bbb4b560d0d096fca9</hash>
        <hash alg="SHA-256">c3ca20a7ccb295f528642532fc7644b4e822a45746fe8bf1683227ca1d0ddfa9</hash>
        <hash alg="SHA-512">74d29abdb879bffabf200ab0b19bebf55a917bd3275e13eb886cc27e8daa13618f2f6d4a4cfd5efc25c6db11e8ec80950c845e41f2796602105715c04d86284e</hash>
        <hash alg="SHA-384">f3435685e593c799a19f413cfa97f1e2a24a7e72162050619116e5a9707885a36e88d2387e8c72a0b4e5f8deaada7f2f</hash>
        <hash alg="SHA3-384">cd4c070ef9e31aa4483d69ec67348bd62cc0da644f8dd5a90285f48c700160c4059b6d6c915edcc0345f8f0ff6d6cb2a</hash>
        <hash alg="SHA3-256">1962afd8e2779a351d578c6c2b3d610ae5effac3201162665b1ef6b55b57e9aa</hash>
        <hash alg="SHA3-512">8bbd9da70e3000225c9252ace3bc21f7a32f229ade6a0b4f838c0e43c79eb0d9db43204e0b3a11dcd57ad3302738381de13a76a3fac6513a64d5a3854808eaa6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.gaul/modernizer-maven-annotations@3.4.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/gaul/modernizer-maven-plugin/modernizer-maven-annotations</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.maven.apache.org/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/gaul/modernizer-maven-plugin/issues</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8?type=jar">
      <group>com.github.spotbugs</group>
      <name>spotbugs-annotations</name>
      <version>4.9.8</version>
      <description>Annotations the SpotBugs tool supports</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d4c2e7bd090be697ad409a4e75684a94</hash>
        <hash alg="SHA-1">ca4a2783a6123e67124fd7feb4caccd2e2ac9a73</hash>
        <hash alg="SHA-256">6f69d6fe9c55a54dcb30e87d8fa2d5f52246af50d7a3445246d9539ef221be1c</hash>
        <hash alg="SHA-512">a2dfdd7972db1adc141a845bc8a3fb81325d987dff1237017f58120f7caa6f1be5bdf2ea79bac7fc2db700596e62bb253e2b0762939f72905feb59fd6e29eaeb</hash>
        <hash alg="SHA-384">195ffc652c90e70b81a2382ad6c45ea62685efdd3a2275253578ff4bdd31ef13b58826a3660e6d790302d44c3d113c78</hash>
        <hash alg="SHA3-384">9fc94170c4172fd3e503c426b7d0a9ee0ada37b578acd0ff359b9e4f34b5a70ca82db9aad4820803d19b1040d3a9ec72</hash>
        <hash alg="SHA3-256">b7763028ce7f89bf44d27fb71570cb7bc66a8cfc6c202813bbf9e37df3983ab8</hash>
        <hash alg="SHA3-512">2afeca14b480b86e836e122e30c6db85231938332c59e706b70eb6a499bbad6a32676e4416a6d2f56e92588772de13640b84907826eff4817d172b6cc969a72a</hash>
      </hashes>
      <licenses>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spotbugs.github.io/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spotbugs/spotbugs/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>3.0.2</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd83accb899363c32b07d7a1b2e4ce40</hash>
        <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
        <hash alg="SHA-256">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>
        <hash alg="SHA-512">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>
        <hash alg="SHA-384">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>
        <hash alg="SHA3-384">9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1</hash>
        <hash alg="SHA3-256">223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff</hash>
        <hash alg="SHA3-512">3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://findbugs.sourceforge.net/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://code.google.com/p/jsr-305/</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/com.github.hazendaz.git/github-desktop@3.5.11?type=pom">
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@4.1.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.49.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"/>
      <dependency ref="pkg:maven/org.projectlombok/lombok@1.18.46?type=jar"/>
      <dependency ref="pkg:maven/org.gaul/modernizer-maven-annotations@3.4.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@4.1.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.49.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"/>
    <dependency ref="pkg:maven/org.projectlombok/lombok@1.18.46?type=jar"/>
    <dependency ref="pkg:maven/org.gaul/modernizer-maven-annotations@3.4.0?type=jar"/>
    <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
  </dependencies>
</bom>
