2026-10-07T13:43:01Z OWASP Foundation CycloneDX Maven plugin 2.7.10 1cc7f6a0382f8bb2f758d6a6ea401d1b a4297947a1f2d7d453105db542651614bbd37f38 bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872 9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39 93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb 4467f16e9ca32190a6e49c65339eb28ee5e8c78f4e918fcf95128a4b7648898de56ccb43eacfad0c9391ef8cdb7d629a ed2996c99b483e969221d5e9a40f562ea2ab85442d361d72a90e85266a3ed781 c8e6ea9ddc38edc77e284b3bf541663e84752bdc59ed1935799847a48a14ea2fa531b61008fefcba37d732a56702a11ac112437b9b80d18f4ecc8ef0ecfb32cf Apache Software Foundation org.apache.hadoop hadoop-client-check-invariants 3.4.1.500-dep-1020 Enforces our invariants for the api and runtime client modules. E.g. that modules have a specific set of transitive dependencies and shaded artifacts only contain classes that are in particular packages. Does the enforcement through the maven-enforcer-plugin and an integration test. Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.hadoop/hadoop-client-check-invariants@3.4.1.500-dep-1020?type=pom http://admin:admin123@df-mvn-stage.ftc.hcocto.hpecorp.net/nexus/content/repositories/releases/ makeBom compile,provided,runtime,system Apache Software Foundation org.apache.hadoop hadoop-client-api 3.4.1.500-dep-1020 Apache Hadoop Client required 9c838ea7e8ad6d47770b0cab4b08eb28 56ed36b3d6a2b123cc5ab8271aafa61781f10ee0 99b50b99341a2a41ec0392bdc7d78f24edddb710481a47cc188be13b6cc4f228 bdc13daf456da7795f4c80ee373799b0c622d2e19a73fdb5aaa3b34954cdcab14fcf14a82be2ae876ccafd1a531dfb16c007510e7106796009dd3d501066b4ed bf4311b13391609deaf12ec30e3483db1a25b50cf00cc1b807337cb12226bb298f6217c18fb7210eea154e14ca5a86f6 a73b976208a8a3fcf3f2e26c26619798c460fd8721da1866e81f8757da059581c6f1608b06b84eb3dc6a64b116a713bf ff8c47b3bf5f962e4c644893a4e24b2b318eee61e8c88a1b737b68a552935400 d4b9870c5c3276ce89a6e6dd9019ef54c748c187315faf88249e1a97e895d0484f22411f4bca92d4df1d38bac984061cb254afc2ce23e2253e806f14d69a2b47 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.hadoop/hadoop-client-api@3.4.1.500-dep-1020?type=jar http://admin:admin123@df-mvn-stage.ftc.hcocto.hpecorp.net/nexus/content/repositories/releases/ Apache Software Foundation org.apache.hadoop hadoop-annotations 3.4.1.500-dep-1020 Apache Hadoop Annotations required f4a4238a52b355ce5473c59f4d529b6d 6cd5c64d39efd49d9dfd52a94f487b888e99d67f 2aa7e598e5083cd4ed98a6d24a2baee03fe893f891b15d31e3169ae4113f535f e1ce1cf527dd182989ced25edee3c8bba939aa00f69f514c7987f8c508a5504ffccc87200c8ed42f541acdb97f79f783c3162f3cf49d473c926a52527ee0d847 63cce569be5c4724b73b3437fc942a0a36f014518d68e88882d63b30f78de0104df344c8209ac70dfd938257d83e4164 3e202d26b8d1b976ae561ce0435df64e9e94dd03a9f73b8bfa4e32304c77214335b96f1e9bcf0af4ba8a1b86e07b65a2 a5ba02e2a4fb8e92c1b16b9ea351db849a53bb5d26b9d1eba230bb4248eabff7 1978084a4acd0e7b54f7b6ff8add419acdcb6abecb234b8fb1799afcf81ca30d261d7308cce69fc2f2255091bd0a3b3fa3bcfe8375e9d8fdb2a918deee7c177d Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.hadoop/hadoop-annotations@3.4.1.500-dep-1020?type=jar http://admin:admin123@df-mvn-stage.ftc.hcocto.hpecorp.net/nexus/content/repositories/releases/ xerial.org org.xerial.snappy snappy-java 1.1.10.8 snappy-java: A fast compression/decompression library required a25bd213d1ca2f3c605c5f03050db070 ccbaa2b5ea6a023a27c44daf2d6cdec0e138592d 50485d06037fea3d6e40c968386feeca6338cc9872e25549593ff3eb352cefcc c7133f726f366b9f06df98d94b4dd7c91c7702c543e1a318055a886af5e625d8231b0a6728250596181bc20a6c4147855eeb02ed55c447fe13ff2156e29985a9 aeb78b3f4c56ce769f5fda9cfabe00be77d21b93637f70601c28b16eef41405e1291001c3a6e45001b356543e33b664b 6137f6354b574d8decb579ad9147dd9463e3a9f62d1e929266bee1adc020f57382973d0a1abf9daeb2007bb32671fed8 f44a4a8cffe82ce6c99b401e9d822e71cdfc63c1b279b278282eda07243b2a94 655731ef3b20a2cec213138c170f7dc7182c2a09536d74c1d8a13224bb204dd706a35749bf99b51c4b945b75784a0a26c60931a158d27e1378ccd1c8ac7a0783 Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar https://github.com/xerial/snappy-javahttps://github.com/xerial/snappy-java Apache Software Foundation org.apache.hadoop hadoop-client-runtime 3.4.1.500-dep-1020 Apache Hadoop Client required 49e14e90f9abfc8f49b1629fc8f55014 7e101d70b98dd597fbeb600e4e6d7577ace29321 1f5210fe374d70862f71ba88781477317dd3cf998722d720ba266f6a4e8325d4 ee87a05a6a6e0cfa3946623bae1ed83a9a322008bd09ac9750247ac585f1aa746985390cf99ad6a38577850c0cdaa0de59f5d3449b30ff905787446dc1b7d08b ebda67adf91e6dfbc8dc072e07bd333c80d27f54e6a42f9ea9141e4fa117d73e5a1f44037e79b9a64a4a4166e4b67a44 0b9851721eb4fc44f6d3c145b3a3044396d2adee77d18f9b7c2e6cd525b0601b0cf298463082c70062191e8d6a63e5b7 477495c3bbf912f4142d6f9cf1002069d4695eee55b1f77f3ee192101027c7de b57ba90e3d6e00e9aa6ad54af40d2044695af406072a11d7a41431695955db8f93e6ddfa8780b40f2955cdb9b1abdc57277b6d73122b69a186ea0bda2a700eda Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.4.1.500-dep-1020?type=jar http://admin:admin123@df-mvn-stage.ftc.hcocto.hpecorp.net/nexus/content/repositories/releases/ QOS.ch org.slf4j slf4j-api 1.7.36 The slf4j API required 872da51f5de7f3923da4de871d57fd85 6c62681a2f655b49963a5983b8b0950a6120ae14 d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0 f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b 2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a 3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881 14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824 MIT https://opensource.org/licenses/MIT pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar http://www.slf4j.orghttps://oss.sonatype.org/service/local/staging/deploy/maven2/https://github.com/qos-ch/slf4j/slf4j-api The Apache Software Foundation commons-logging commons-logging 1.3.0 Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems. required 522cc4b1f42b7db1554474cb989adfb2 f5e064b541f5c5fbc5e4fb49c4e8cd4eabb3afd6 66d3c980470b99b0c511dad3dfc0ae7b265ec1fb144e96bc0253a8a175fd34d9 481c3bf16acceb349d2da7db5b66ea367c4093f795247bf53f5206f77260a0ae6ad636996cac4d074aaaf9788ba39d1428ced7f4348d1d56439bdb257196ee23 0ee61469e506f8557b76088c6445b6a36e1abe909488f4f116f7b2ba6d8148078b21917c62fbf404df569d4d39c567ee be252f5fd75d9fa70c03c807fe8197c724587ebede2022e944ee32a7eea5a99d45a952b3602237e39ff27235efec34e5 fdd14cd684ef70bc13a0b6ddc021bcdf4be220c41d41de5c1198263de617213a e2f077b481eed92b09c1f076f407d5ff4e3c0b863a9daa9faff1d3fd2ee6dbb1c5c4178101cd511c2977887396679f38b09d096e81c614185f2c05b626a3f7fa Apache-2.0 https://www.apache.org/licenses/LICENSE-2.0 pkg:maven/commons-logging/commons-logging@1.3.0?type=jar https://commons.apache.org/proper/commons-logging/https://github.com/apache/commons-parent/actionshttps://repository.apache.org/service/local/staging/deploy/maven2https://issues.apache.org/jira/browse/LOGGINGhttps://mail-archives.apache.org/mod_mbox/commons-user/https://gitbox.apache.org/repos/asf/commons-logging com.google.code.findbugs jsr305 3.0.2 JSR305 Annotations for Findbugs required dd83accb899363c32b07d7a1b2e4ce40 25ea2e8b0c338a877313bd4672d3fe056ea78f0d 766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7 bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804 ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4 9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1 223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff 3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6 Apache-2.0 pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar http://findbugs.sourceforge.net/https://oss.sonatype.org/service/local/staging/deploy/maven2/https://code.google.com/p/jsr-305/