{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:b3af6bc4-01df-3d1e-99c4-4a94c7d18634",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.3",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "e7c87ab327b65b23c681fc9dc8bb620b"
            },
            {
              "alg" : "SHA-1",
              "content" : "fa3f0f04f4d5077b5e085d4d09aa2e68aeba5260"
            },
            {
              "alg" : "SHA-256",
              "content" : "c452d5eebe28bc86bef2e7c72d129f04f60877bef843eac8120f01fb655be293"
            },
            {
              "alg" : "SHA-512",
              "content" : "ec0344ed2ffe62d565aaf936a37140d04c7fffa8669a666be0366cd44eec3195232d79841cdec47030b79068216ac7e1a8c805255758e3d418dae32a4b9b9beb"
            },
            {
              "alg" : "SHA-384",
              "content" : "3df26b2a00d87fe090851975ebcc30217f98634e7c47d07128e148f325ebfe3bc0790b2f52ad4591734b7b0de738f003"
            },
            {
              "alg" : "SHA3-384",
              "content" : "470c1b4962379b5b6494c75bd1475da3519bbe2543999c95f26b4021164d3d05419b0c3f704443162fe5433a204250e9"
            },
            {
              "alg" : "SHA3-256",
              "content" : "900e9c4edb18940ed3c4a4ba6946957fa613ef0d4b0c380551638f229206373c"
            },
            {
              "alg" : "SHA3-512",
              "content" : "5e36433e18ae24f7460902da27818874df5d1d73df1a97e49e7369335f7cc61ca595466a2d37789fba7eaa7f7f251b29216c3d7a78910b2ec38e2ed68ea84876"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-parent@105?type=pom",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-parent",
      "version" : "105",
      "description" : "The Apache Commons Parent POM provides common settings for all Apache Commons components.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-parent@105?type=pom",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-parent/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMMONSSITE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-parent.git"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeAggregateBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.commons/commons-parent@105?type=pom",
      "dependsOn" : [ ]
    }
  ]
}