SBOM Summary

Item Details
SBOM File ./static/cdm/v1.1.0.bom.json
SBOM Type cyclonedx
Version 1.6
Name rwas
Creator tool:cyclonedx-maven-plugin#2.9.1
Created 2025-03-12T15:04:44Z
Files 0
Packages 108
Relationships 177
Services 0
Vulnerabilities 0

Package Summary

Name Version PURL CPE Type Supplier License Ecosystem Download Copyright
bcprov-jdk18on 1.78.1 pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar LIBRARY Bouncy Castle Licence maven NOT KNOWN -
bcpkix-jdk18on 1.78 pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78?type=jar LIBRARY Bouncy Castle Licence maven NOT KNOWN -
bcutil-jdk18on 1.78 pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78?type=jar LIBRARY Bouncy Castle Licence maven NOT KNOWN -
bcprov-ext-jdk18on 1.78 pkg:maven/org.bouncycastle/bcprov-ext-jdk18on@1.78?type=jar LIBRARY Bouncy Castle Licence maven NOT KNOWN -
lombok 1.18.34 pkg:maven/org.projectlombok/lombok@1.18.34?type=jar LIBRARY MIT maven NOT KNOWN -
hibernate-validator 8.0.1.Final pkg:maven/org.hibernate.validator/hibernate-validator@8.0.1.Final?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jakarta.validation-api 3.0.2 pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jboss-logging 3.4.3.Final pkg:maven/org.jboss.logging/jboss-logging@3.4.3.Final?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
classmate 1.5.1 pkg:maven/com.fasterxml/classmate@1.5.1?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
expressly 5.0.0 pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar LIBRARY GNU General Public License, version 2 with the GNU Classpath Exception maven NOT KNOWN -
jakarta.el-api 5.0.0 pkg:maven/jakarta.el/jakarta.el-api@5.0.0?type=jar LIBRARY GNU General Public License, version 2 with the GNU Classpath Exception maven NOT KNOWN -
annotations 26.0.1 pkg:maven/org.jetbrains/annotations@26.0.1?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
postgresql 42.7.3 pkg:maven/org.postgresql/postgresql@42.7.3?type=jar LIBRARY BSD-2-Clause maven NOT KNOWN -
checker-qual 3.42.0 pkg:maven/org.checkerframework/checker-qual@3.42.0?type=jar LIBRARY MIT maven NOT KNOWN -
junixsocket-core 2.10.1 pkg:maven/com.kohlschutter.junixsocket/junixsocket-core@2.10.1?type=pom LIBRARY Apache-2.0 maven NOT KNOWN -
junixsocket-native-common 2.10.1 pkg:maven/com.kohlschutter.junixsocket/junixsocket-native-common@2.10.1?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
junixsocket-common 2.10.1 pkg:maven/com.kohlschutter.junixsocket/junixsocket-common@2.10.1?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
liquibase-core 4.28.0 pkg:maven/org.liquibase/liquibase-core@4.28.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
opencsv 5.9 pkg:maven/com.opencsv/opencsv@5.9?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
commons-text 1.11.0 pkg:maven/org.apache.commons/commons-text@1.11.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
commons-collections4 4.4 pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
snakeyaml 2.2 pkg:maven/org.yaml/snakeyaml@2.2?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jaxb-api 2.3.1 pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar LIBRARY GPL-2.0-with-classpath-exception (Deprecated) maven NOT KNOWN -
commons-io 2.16.1 pkg:maven/commons-io/commons-io@2.16.1?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
commons-lang3 3.14.0 pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jackson-databind 2.17.0 pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jackson-annotations 2.17.0 pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.17.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jackson-core 2.17.0 pkg:maven/com.fasterxml.jackson.core/jackson-core@2.17.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
byte-buddy 1.14.9 pkg:maven/net.bytebuddy/byte-buddy@1.14.9?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jackson-datatype-jsr310 2.18.0 pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
java-uuid-generator 5.1.0 pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.1.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
undertow-core 2.3.18.Final pkg:maven/io.undertow/undertow-core@2.3.18.Final?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
xnio-api 3.8.16.Final pkg:maven/org.jboss.xnio/xnio-api@3.8.16.Final?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
wildfly-common 1.5.4.Final pkg:maven/org.wildfly.common/wildfly-common@1.5.4.Final?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
wildfly-client-config 1.0.1.Final pkg:maven/org.wildfly.client/wildfly-client-config@1.0.1.Final?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
xnio-nio 3.8.16.Final pkg:maven/org.jboss.xnio/xnio-nio@3.8.16.Final?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jboss-threads 3.5.0.Final pkg:maven/org.jboss.threads/jboss-threads@3.5.0.Final?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
HikariCP 5.1.0 pkg:maven/com.zaxxer/HikariCP@5.1.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
slf4j-api 2.0.12 pkg:maven/org.slf4j/slf4j-api@2.0.12?type=jar LIBRARY MIT maven NOT KNOWN -
tinylog-api 2.7.0 pkg:maven/org.tinylog/tinylog-api@2.7.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
tinylog-impl 2.7.0 pkg:maven/org.tinylog/tinylog-impl@2.7.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
slf4j-tinylog 2.7.0 pkg:maven/org.tinylog/slf4j-tinylog@2.7.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jboss-tinylog 2.7.0 pkg:maven/org.tinylog/jboss-tinylog@2.7.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jul-tinylog 2.8.0-M1 pkg:maven/org.tinylog/jul-tinylog@2.8.0-M1?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
apache-jena-libs 5.0.0 pkg:maven/org.apache.jena/apache-jena-libs@5.0.0?type=pom LIBRARY Apache-2.0 maven NOT KNOWN -
jena-rdfpatch 5.0.0 pkg:maven/org.apache.jena/jena-rdfpatch@5.0.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jena-shacl 5.0.0 pkg:maven/org.apache.jena/jena-shacl@5.0.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jena-shex 5.0.0 pkg:maven/org.apache.jena/jena-shex@5.0.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jena-tdb1 5.0.0 pkg:maven/org.apache.jena/jena-tdb1@5.0.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jena-tdb2 5.0.0 pkg:maven/org.apache.jena/jena-tdb2@5.0.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jena-dboe-storage 5.0.0 pkg:maven/org.apache.jena/jena-dboe-storage@5.0.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jena-dboe-trans-data 5.0.0 pkg:maven/org.apache.jena/jena-dboe-trans-data@5.0.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jena-dboe-transaction 5.0.0 pkg:maven/org.apache.jena/jena-dboe-transaction@5.0.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jena-dboe-base 5.0.0 pkg:maven/org.apache.jena/jena-dboe-base@5.0.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jena-dboe-index 5.0.0 pkg:maven/org.apache.jena/jena-dboe-index@5.0.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jena-rdfconnection 5.0.0 pkg:maven/org.apache.jena/jena-rdfconnection@5.0.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jena-core 5.0.0 pkg:maven/org.apache.jena/jena-core@5.0.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jena-base 5.0.0 pkg:maven/org.apache.jena/jena-base@5.0.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
commons-csv 1.10.0 pkg:maven/org.apache.commons/commons-csv@1.10.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
caffeine 3.1.8 pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
error_prone_annotations 2.21.1 pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
collection 0.7 pkg:maven/com.github.andrewoma.dexx/collection@0.7?type=jar LIBRARY MIT maven NOT KNOWN -
jena-iri 5.0.0 pkg:maven/org.apache.jena/jena-iri@5.0.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
commons-cli 1.6.0 pkg:maven/commons-cli/commons-cli@1.6.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
RoaringBitmap 1.0.5 pkg:maven/org.roaringbitmap/RoaringBitmap@1.0.5?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jena-arq 5.0.0 pkg:maven/org.apache.jena/jena-arq@5.0.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
gson 2.10.1 pkg:maven/com.google.code.gson/gson@2.10.1?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jcl-over-slf4j 2.0.7 pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
titanium-json-ld 1.4.0 pkg:maven/com.apicatalog/titanium-json-ld@1.4.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jakarta.json 2.0.1 pkg:maven/org.glassfish/jakarta.json@2.0.1?type=jar LIBRARY GNU General Public License, version 2 with the GNU Classpath Exception maven NOT KNOWN -
protobuf-java 3.25.3 pkg:maven/com.google.protobuf/protobuf-java@3.25.3?type=jar LIBRARY BSD-3-Clause maven NOT KNOWN -
libthrift 0.19.0 pkg:maven/org.apache.thrift/libthrift@0.19.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
oauth2-oidc-sdk 11.12 pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.12?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jcip-annotations 1.0-1 pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
content-type 2.3 pkg:maven/com.nimbusds/content-type@2.3?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
json-smart 2.5.1 pkg:maven/net.minidev/json-smart@2.5.1?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
accessors-smart 2.5.1 pkg:maven/net.minidev/accessors-smart@2.5.1?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
lang-tag 1.7 pkg:maven/com.nimbusds/lang-tag@1.7?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
nimbus-jose-jwt 9.39.1 pkg:maven/com.nimbusds/nimbus-jose-jwt@9.39.1?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
commons-codec 1.16.1 pkg:maven/commons-codec/commons-codec@1.16.1?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
commons-logging 1.3.1 pkg:maven/commons-logging/commons-logging@1.3.1?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
antlr4-runtime 4.13.1 pkg:maven/org.antlr/antlr4-runtime@4.13.1?type=jar LIBRARY BSD-3-Clause maven NOT KNOWN -
zxcvbn 1.9.0 pkg:maven/com.nulab-inc/zxcvbn@1.9.0?type=jar LIBRARY MIT maven NOT KNOWN -
cdmoslc 2024.10.10 pkg:maven/com.apisgroup.iq.rwas.oslc/cdmoslc@2024.10.10?type=jar LIBRARY NOT KNOWN maven NOT KNOWN -
jcip-annotations 1.0 pkg:maven/net.jcip/jcip-annotations@1.0?type=jar LIBRARY NOT KNOWN maven NOT KNOWN -
cdm-common 1.9 pkg:maven/com.apisgroup.common/cdm-common@1.9?type=jar LIBRARY NOT KNOWN maven NOT KNOWN -
httpclient 4.5.14 pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
httpcore 4.4.16 pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
unboundid-ldapsdk 7.0.1 pkg:maven/com.unboundid/unboundid-ldapsdk@7.0.1?type=jar LIBRARY UnboundID LDAP SDK Free Use License maven NOT KNOWN -
datafaker 2.4.0 pkg:maven/net.datafaker/datafaker@2.4.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
rgxgen 2.0 pkg:maven/com.github.curious-odd-man/rgxgen@2.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
libphonenumber 8.13.46 pkg:maven/com.googlecode.libphonenumber/libphonenumber@8.13.46?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
spring-security-crypto 6.4.3 pkg:maven/org.springframework.security/spring-security-crypto@6.4.3?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
cyclonedx-maven-plugin 2.9.1 pkg:maven/org.cyclonedx/cyclonedx-maven-plugin@2.9.1?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
cyclonedx-core-java 9.0.5 pkg:maven/org.cyclonedx/cyclonedx-core-java@9.0.5?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
packageurl-java 1.5.0 pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar LIBRARY MIT maven NOT KNOWN -
jackson-dataformat-xml 2.17.2 pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.17.2?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
stax2-api 4.2.2 pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar LIBRARY BSD-2-Clause maven NOT KNOWN -
woodstox-core 6.7.0 pkg:maven/com.fasterxml.woodstox/woodstox-core@6.7.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
json-schema-validator 1.5.1 pkg:maven/com.networknt/json-schema-validator@1.5.1?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
itu 1.10.2 pkg:maven/com.ethlo.time/itu@1.10.2?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
jackson-dataformat-yaml 2.17.1 pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.17.1?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
maven-dependency-tree 3.3.0 pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.3.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
maven-resolver-util 1.4.1 pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
maven-resolver-api 1.4.1 pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
maven-dependency-analyzer 1.14.1 pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.14.1?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -
asm 9.7 pkg:maven/org.ow2.asm/asm@9.7?type=jar LIBRARY BSD-3-Clause maven NOT KNOWN -
commons-compress 1.24.0 pkg:maven/org.apache.commons/commons-compress@1.24.0?type=jar LIBRARY Apache-2.0 maven NOT KNOWN -

Component Type Summary

Type Count
LIBRARY 108

License Summary

License Count
Apache-2.0 85
BSD-2-Clause 2
BSD-3-Clause 3
Bouncy Castle Licence 4
GNU General Public License, version 2 with the GNU Classpath Exception 3
GPL-2.0-with-classpath-exception (Deprecated) 1
MIT 6
NOT KNOWN 3
UnboundID LDAP SDK Free Use License 1

NTIA Summary

Element Status
All file information provided? True
All package information provided? False
Creator identified? True
Creation time identified? True
Dependency relationships provided? True

NTIA conformant False