2025-03-20T13:22:48Z OWASP Foundation CycloneDX Maven plugin 2.7.10 1cc7f6a0382f8bb2f758d6a6ea401d1b a4297947a1f2d7d453105db542651614bbd37f38 bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872 9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39 93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb 4467f16e9ca32190a6e49c65339eb28ee5e8c78f4e918fcf95128a4b7648898de56ccb43eacfad0c9391ef8cdb7d629a ed2996c99b483e969221d5e9a40f562ea2ab85442d361d72a90e85266a3ed781 c8e6ea9ddc38edc77e284b3bf541663e84752bdc59ed1935799847a48a14ea2fa531b61008fefcba37d732a56702a11ac112437b9b80d18f4ecc8ef0ecfb32cf Apache Software Foundation org.apache.hadoop hadoop-client-check-invariants 3.4.1.0-eep-940 Enforces our invariants for the api and runtime client modules. E.g. that modules have a specific set of transitive dependencies and shaded artifacts only contain classes that are in particular packages. Does the enforcement through the maven-enforcer-plugin and an integration test. Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.hadoop/hadoop-client-check-invariants@3.4.1.0-eep-940?type=pom http://admin:admin123@df-mvn-stage.mip.storage.hpecorp.net/nexus/content/repositories/releases/ makeBom compile,provided,runtime,system Apache Software Foundation org.apache.hadoop hadoop-client-api 3.4.1.0-eep-940 Apache Hadoop Client required 3821dfd36c5758b278e933a1c7ef4151 3c7322b6ff5d6eb47cad0d4a6204a7377ed65194 d11c7e8e7198c81dacf5ac82fbd74715cdc4bd9453e92bde8eb77f38488079d6 774fbd0cf52669bc45ffc7cf1f4c67a0cfdb5fab3ad95f2df8f4462a02856b8f8940124aa3a6978d7a83c84219f90dba7385974b3a73f2195db98be9c2ec9529 509a06c9bf3c7eda9cab43f2ae8a7aad40e1de4b56da5a3f12f407c1b7a20e53564fa99550d3cd5af4af37315a9b00fa 74aa0da5ddad2ccd1b954293b4bc9b74ceb664922c4ec234022d23f6aec07ddde1a76e5ba6626afa8095c48081bf454b a84441c085cd2bd2eedfd2ac4834c4c29023309b6e45b2a8db7271e1fdad8e66 75d956b1d97f3bda99c845a8675e33351e7dafa68323034b2ebb37791e16b09d18f2312874af690c068abd79c3f28813c137dee02269cbb148446e7bdbd21f90 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.hadoop/hadoop-client-api@3.4.1.0-eep-940?type=jar http://admin:admin123@df-mvn-stage.mip.storage.hpecorp.net/nexus/content/repositories/releases/ Apache Software Foundation org.apache.hadoop hadoop-annotations 3.4.1.0-eep-940 Apache Hadoop Annotations required e95da638c4bad4713eae2d50e2a8013e 6a6642b3bd2b518d4df59ac46bcd1883a1f976c7 08c7414f9c607e069c7525e646c95a2f04f3f29f0692e98076de1e94bbdeb08c dc6a0f3abab9c714ad9906ead73f26b943014da88ed0b5661a56d881098a4e4b0bb175b20fc38950e229e3fcbd8d648274de8e5026fadc5c008fb72a591dff26 d161ee8a5374ade95edd6f40d7557c55406f7bfcd40feabb5d6e5cef788d9bf72e5f1f0d14a53ec9bc5283e2db80b5d7 47761cf8e122a6bb8694e234d53a0de72213e777bd3edcee37aeafce8c90a5decf88334fb79c9e005ff67395e5d81720 a3d177acc661bc1c28e07d6208e944d4e9434da29c9930ac209885f33f2039b1 408121fa02682c3f90409975bb438fd98532ea59075c96481d15bee40607850ffc0ed31115c297d7af7e64b47e31aa4359c37a7aea437e3c02d5c74eb7c92a96 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.hadoop/hadoop-annotations@3.4.1.0-eep-940?type=jar http://admin:admin123@df-mvn-stage.mip.storage.hpecorp.net/nexus/content/repositories/releases/ xerial.org org.xerial.snappy snappy-java 1.1.10.4 snappy-java: A fast compression/decompression library required d1d3b91e925c46a1a0f68b87298bafe8 50d0390056017158bdc75c063efd5c2a898d5f0c 55b30c94e5c4cc2d4b6976916098d0678a8a6cc7427fa8c875621bd94e731ac8 9e52bad4eaa0d0a2e0083cdd3433d84c4bb44c4d3f0314a48c3d6eacbb64d0f4fb2d71197944115618a598eb4a4941c13af2a9ec676b003fb3462ddac58bbe41 9539e8eb2dea244f07a7216db38970e3f336b5dc9d132cbe54e201c818dba3e02a1fc467b4529a18eca7127f86d742dd d5d5ef5d8b050f200ae29855a4b6f5e278215d0a97a69d3653dc1aa716f9847b3c305312a3c994d46721615ba02fc7c8 bbbb3ff43a24094bf2c77dd8c8f94b06d62d158da0d2c3399de3a2993df9986e de2aa7e7fada466f24ccda07123e2877446733dd48e4b914d25b0d296f677e17a24f182a0e9216e77b261143b774ccaadcfd2854dde1bf36cb2c6db6cdf78b3c Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar https://github.com/xerial/snappy-javahttps://github.com/xerial/snappy-java Apache Software Foundation org.apache.hadoop hadoop-client-runtime 3.4.1.0-eep-940 Apache Hadoop Client required a560303fc64be7b8a4891faf2aa6d749 597892b33a464257747a22102590bb9cd4ca0d52 53285fbfce8b5ff3e0b4f3bf529c0a35099abda1dc8a82bd6c96a5c756761d54 f1176f42320e9cfd2f4fc0141c8041e4244c0248988b203f136c50b5078c0a6877fca36752283b0ff569fa21d9c7bea410b4ab0f86538a20a7963b7619f2aeda 00bbf3b2b9a47a9446a5f4e120600c501d7b2f65afaedbfb2f0ffba15a035755b9912eb56dfaae4cd977e3e1887688f9 058923ed21f090d7681ea0a6d99955b1606fcdcdd154ddeb2962a01b5f99737ceb33802cd78b0fa30bf39ee82bea7bb3 f84d7afa61eb3d55d0a14548be9e19c2d70f470b2afa93f9352f40700fb8ac4c 691ccb95d109897020be27c77cb1ce67198f7aca4dfe6fb74d2267ad3d15c60908a5ac1d28286ce6f317e59e0277427a27f3f8b86a7e9b90cf4a0a9644558f2e Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.4.1.0-eep-940?type=jar http://admin:admin123@df-mvn-stage.mip.storage.hpecorp.net/nexus/content/repositories/releases/ QOS.ch org.slf4j slf4j-api 1.7.36 The slf4j API required 872da51f5de7f3923da4de871d57fd85 6c62681a2f655b49963a5983b8b0950a6120ae14 d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0 f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b 2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a 3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881 14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824 MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar http://www.slf4j.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j/slf4j-api The Apache Software Foundation commons-logging commons-logging 1.3.0 Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems. required 522cc4b1f42b7db1554474cb989adfb2 f5e064b541f5c5fbc5e4fb49c4e8cd4eabb3afd6 66d3c980470b99b0c511dad3dfc0ae7b265ec1fb144e96bc0253a8a175fd34d9 481c3bf16acceb349d2da7db5b66ea367c4093f795247bf53f5206f77260a0ae6ad636996cac4d074aaaf9788ba39d1428ced7f4348d1d56439bdb257196ee23 0ee61469e506f8557b76088c6445b6a36e1abe909488f4f116f7b2ba6d8148078b21917c62fbf404df569d4d39c567ee be252f5fd75d9fa70c03c807fe8197c724587ebede2022e944ee32a7eea5a99d45a952b3602237e39ff27235efec34e5 fdd14cd684ef70bc13a0b6ddc021bcdf4be220c41d41de5c1198263de617213a e2f077b481eed92b09c1f076f407d5ff4e3c0b863a9daa9faff1d3fd2ee6dbb1c5c4178101cd511c2977887396679f38b09d096e81c614185f2c05b626a3f7fa Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/commons-logging/commons-logging@1.3.0?type=jar https://commons.apache.org/proper/commons-logging/https://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/LOGGINGhttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf/commons-logging com.google.code.findbugs jsr305 3.0.2 JSR305 Annotations for Findbugs required dd83accb899363c32b07d7a1b2e4ce40 25ea2e8b0c338a877313bd4672d3fe056ea78f0d 766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7 bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804 ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4 9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1 223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff 3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6 Apache-2.0 pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar http://findbugs.sourceforge.net/https://oss.sonatype.org/service/local/staging/deploy/maven2/https://code.google.com/p/jsr-305/