{
  "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
  "bomFormat": "CycloneDX",
  "components": [
    {
      "bom-ref": "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@1.2.15?package-id=b6f058d0d4f83aba",
      "cpe": "cpe:2.3:a:FastInfoset:FastInfoset:1.2.15:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bb7b7ec0379982b97c62cd17465cb6d9155f68e8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.xml.fastinfoset",
      "licenses": [
        {
          "license": {
            "name": "http://www.opensource.org/licenses/apache2.0.php"
          }
        }
      ],
      "name": "FastInfoset",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastinfoset:FastInfoset:1.2.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:FastInfoset:1.2.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:FastInfoset:1.2.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xml:FastInfoset:1.2.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/FastInfoset-1.2.15.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "FastInfoset"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.xml.fastinfoset"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/FastInfoset-1.2.15.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@1.2.15",
      "type": "library",
      "version": "1.2.15"
    },
    {
      "bom-ref": "pkg:maven/RoaringBitmap/RoaringBitmap@0.9.0?package-id=00b1c080c53ce4be",
      "cpe": "cpe:2.3:a:RoaringBitmap:RoaringBitmap:0.9.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4cfebd5d429c2c7067b3e1f58ac99b5578244c7b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "RoaringBitmap",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/RoaringBitmap-0.9.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/RoaringBitmap-0.9.0.jar"
        }
      ],
      "purl": "pkg:maven/RoaringBitmap/RoaringBitmap@0.9.0",
      "type": "library",
      "version": "0.9.0"
    },
    {
      "bom-ref": "pkg:maven/net.minidev/accessors-smart@1.2?package-id=7d484d8dbb1263e3",
      "cpe": "cpe:2.3:a:accessors-smart:accessors-smart:1.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c592b500269bfde36096641b01238a8350f8aa31"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.minidev",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "accessors-smart",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors-smart:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors_smart:accessors-smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors_smart:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors:accessors-smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:accessors-smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/accessors-smart-1.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "accessors-smart"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.minidev"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/accessors-smart-1.2.jar"
        }
      ],
      "purl": "pkg:maven/net.minidev/accessors-smart@1.2",
      "type": "library",
      "version": "1.2"
    },
    {
      "bom-ref": "pkg:maven/net.minidev/accessors-smart@1.2?package-id=5749505da1a7b2d0",
      "cpe": "cpe:2.3:a:accessors-smart:accessors-smart:1.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c592b500269bfde36096641b01238a8350f8aa31"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.minidev",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "accessors-smart",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors-smart:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors_smart:accessors-smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors_smart:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors:accessors-smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:accessors-smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/accessors-smart-1.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "accessors-smart"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.minidev"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/accessors-smart-1.2.jar"
        }
      ],
      "purl": "pkg:maven/net.minidev/accessors-smart@1.2",
      "type": "library",
      "version": "1.2"
    },
    {
      "bom-ref": "pkg:maven/net.minidev/accessors-smart@1.2?package-id=570dd76e738cf2b6",
      "cpe": "cpe:2.3:a:accessors-smart:accessors-smart:1.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c592b500269bfde36096641b01238a8350f8aa31"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.minidev",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "accessors-smart",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors-smart:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors_smart:accessors-smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors_smart:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors:accessors-smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:accessors-smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/accessors-smart-1.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "accessors-smart"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.minidev"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/accessors-smart-1.2.jar"
        }
      ],
      "purl": "pkg:maven/net.minidev/accessors-smart@1.2",
      "type": "library",
      "version": "1.2"
    },
    {
      "bom-ref": "pkg:maven/com.sun/activation@1.1?package-id=4b83cd082a944b89",
      "cpe": "cpe:2.3:a:sun-microsystems\\,-inc-:activation:1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e6cb541461c2834bdea3eb920f1884d1eb508b50"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CDDL-1.0"
          }
        }
      ],
      "name": "activation",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun_microsystems\\,_inc_:activation:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:activation:activation:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:activation:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/activation-1.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/activation-1.1.jar"
        }
      ],
      "purl": "pkg:maven/com.sun/activation@1.1",
      "type": "library",
      "version": "1.1"
    },
    {
      "bom-ref": "pkg:maven/com.sun/activation@1.1.1?package-id=3633595502f31035",
      "cpe": "cpe:2.3:a:sun-microsystems\\,-inc-:activation:1.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "485de3a253e23f645037828c07f1d7f1af40763a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CDDL-1.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        }
      ],
      "name": "activation",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun_microsystems\\,_inc_:activation:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:activation:activation:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:activation:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/activation-1.1.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/activation-1.1.1.jar"
        }
      ],
      "purl": "pkg:maven/com.sun/activation@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.aether/aether-api@0.9.1.v20140329?package-id=6c9dec7f834811fe",
      "cpe": "cpe:2.3:a:aether-api:aether-api:0.9.1.v20140329:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "82948a61aede627b3c56cc79e1b69768c8d64c9f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.aether",
      "licenses": [
        {
          "license": {
            "name": "http://www.eclipse.org/legal/epl-v10.html"
          }
        }
      ],
      "name": "aether-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-api:aether_api:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_api:aether-api:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_api:aether_api:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether-api:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether_api:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-api:aether:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether-api:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether_api:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_api:aether:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-api:api:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_api:api:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api:aether-api:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api:aether_api:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:api:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:api:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api:aether:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api:api:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-api-0.9.1.v20140329.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aether-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.aether"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-api-0.9.1.v20140329.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.aether/aether-api@0.9.1.v20140329",
      "type": "library",
      "version": "0.9.1.v20140329"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.aether/aether-connector-file@0.9.0.M2?package-id=c24c9c5b1b4357a4",
      "cpe": "cpe:2.3:a:aether-connector-file:aether-connector-file:0.9.0.M2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "21608dd8b3853da69c4862fbaf9b35b326dc0ddc"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.aether",
      "licenses": [
        {
          "license": {
            "name": "http://www.eclipse.org/legal/epl-v10.html"
          }
        }
      ],
      "name": "aether-connector-file",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector-file:aether_connector_file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector_file:aether-connector-file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector_file:aether_connector_file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector:aether-connector-file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector:aether_connector_file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector:aether-connector-file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector:aether_connector_file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connector:aether-connector-file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connector:aether_connector_file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether-connector-file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether_connector_file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector-file:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether-connector-file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether_connector_file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector_file:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector-file:file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector_file:file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file:aether-connector-file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file:aether_connector_file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector:file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector:file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connector:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connector:file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file:file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-connector-file-0.9.0.M2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aether-connector-file"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.aether"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-connector-file-0.9.0.M2.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.aether/aether-connector-file@0.9.0.M2",
      "type": "library",
      "version": "0.9.0.M2"
    },
    {
      "bom-ref": "pkg:maven/io.tesla.aether/aether-connector-okhttp@0.0.9?package-id=8496c92d22bd03e6",
      "cpe": "cpe:2.3:a:aether-connector-okhttp:aether-connector-okhttp:0.0.9:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a9cd24fe92272ad1f084d98cd7edeffcd9de720f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.tesla.aether",
      "name": "aether-connector-okhttp",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector-okhttp:aether_connector_okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector_okhttp:aether-connector-okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector_okhttp:aether_connector_okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector:aether-connector-okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector:aether_connector_okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector:aether-connector-okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector:aether_connector_okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector-okhttp:aether:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether-connector-okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether_connector_okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector_okhttp:aether:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla:aether-connector-okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla:aether_connector_okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector:aether:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector:aether:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla:aether:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-connector-okhttp-0.0.9.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aether-connector-okhttp"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.tesla.aether"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-connector-okhttp-0.0.9.jar"
        }
      ],
      "purl": "pkg:maven/io.tesla.aether/aether-connector-okhttp@0.0.9",
      "type": "library",
      "version": "0.0.9"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.aether/aether-impl@0.9.0.M2?package-id=b6ff11ef48e655d4",
      "cpe": "cpe:2.3:a:aether-impl:aether-impl:0.9.0.M2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "eab9a4baae8de96a24c04219236363d0ca73e8a9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.aether",
      "licenses": [
        {
          "license": {
            "name": "http://www.eclipse.org/legal/epl-v10.html"
          }
        }
      ],
      "name": "aether-impl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-impl:aether_impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_impl:aether-impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_impl:aether_impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether-impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether_impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-impl:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether-impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether_impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_impl:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-impl:impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_impl:impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:impl:aether-impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:impl:aether_impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:impl:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:impl:impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-impl-0.9.0.M2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aether-impl"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.aether"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-impl-0.9.0.M2.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.aether/aether-impl@0.9.0.M2",
      "type": "library",
      "version": "0.9.0.M2"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.aether/aether-spi@0.9.0.M2?package-id=f9eea856c0607e3a",
      "cpe": "cpe:2.3:a:aether-spi:aether-spi:0.9.0.M2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3647d00620a91360990c9680f29fbcc22d69c2ee"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.aether",
      "licenses": [
        {
          "license": {
            "name": "http://www.eclipse.org/legal/epl-v10.html"
          }
        }
      ],
      "name": "aether-spi",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-spi:aether_spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_spi:aether-spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_spi:aether_spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether-spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether_spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-spi:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether-spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether_spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_spi:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-spi:spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_spi:spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spi:aether-spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spi:aether_spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spi:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spi:spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-spi-0.9.0.M2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aether-spi"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.aether"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-spi-0.9.0.M2.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.aether/aether-spi@0.9.0.M2",
      "type": "library",
      "version": "0.9.0.M2"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.aether/aether-util@0.9.1.v20140329?package-id=de434decaaa6a83a",
      "cpe": "cpe:2.3:a:aether-util:aether-util:0.9.1.v20140329:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b9b2bd1461976e62abd31e85755f26845b6b2376"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.aether",
      "licenses": [
        {
          "license": {
            "name": "http://www.eclipse.org/legal/epl-v10.html"
          }
        }
      ],
      "name": "aether-util",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-util:aether_util:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_util:aether-util:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_util:aether_util:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether-util:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether_util:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-util:aether:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether-util:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether_util:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_util:aether:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-util:util:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_util:util:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:aether-util:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:aether_util:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:util:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:util:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:aether:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:util:0.9.1.v20140329:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-util-0.9.1.v20140329.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aether-util"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.aether"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-util-0.9.1.v20140329.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.aether/aether-util@0.9.1.v20140329",
      "type": "library",
      "version": "0.9.1.v20140329"
    },
    {
      "bom-ref": "pkg:maven/net.hydromatic/aggdesigner-algorithm@6.0?package-id=fa4100d372cfb034",
      "cpe": "cpe:2.3:a:aggdesigner-algorithm:aggdesigner-algorithm:6.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bd0cd7ad1e3791a8a0929df0dcdbffc02fd0bab4"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.hydromatic",
      "name": "aggdesigner-algorithm",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aggdesigner-algorithm:aggdesigner_algorithm:6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aggdesigner_algorithm:aggdesigner-algorithm:6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aggdesigner_algorithm:aggdesigner_algorithm:6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aggdesigner:aggdesigner-algorithm:6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aggdesigner:aggdesigner_algorithm:6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hydromatic:aggdesigner-algorithm:6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hydromatic:aggdesigner_algorithm:6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aggdesigner-algorithm-6.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aggdesigner-algorithm"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.hydromatic"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aggdesigner-algorithm-6.0.jar"
        }
      ],
      "purl": "pkg:maven/net.hydromatic/aggdesigner-algorithm@6.0",
      "type": "library",
      "version": "6.0"
    },
    {
      "bom-ref": "pkg:maven/io.airlift/aircompressor@0.21?package-id=e67f45d162d6ef73",
      "cpe": "cpe:2.3:a:aircompressor:aircompressor:0.21:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0d1efd839d539481952a9757834054239774f057"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.airlift",
      "licenses": [
        {
          "license": {
            "name": "Apache License 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "name": "aircompressor",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:airlift:aircompressor:0.21:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/aircompressor-0.21.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aircompressor"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.airlift"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/aircompressor-0.21.jar"
        }
      ],
      "purl": "pkg:maven/io.airlift/aircompressor@0.21",
      "type": "library",
      "version": "0.21"
    },
    {
      "bom-ref": "pkg:maven/com.github.rvesse/airline@2.8.4?package-id=f0336d91db3bc58c",
      "cpe": "cpe:2.3:a:airline:airline:2.8.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f6148c941e4ec2f314b285e6e4e995f61374aa2f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.github.rvesse",
      "name": "airline",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:airline:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rvesse:airline:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/airline-2.8.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "airline"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.github.rvesse"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/airline-2.8.4.jar"
        }
      ],
      "purl": "pkg:maven/com.github.rvesse/airline@2.8.4",
      "type": "library",
      "version": "2.8.4"
    },
    {
      "bom-ref": "pkg:maven/com.github.rvesse/airline-io@2.8.4?package-id=f4134f32ee5834fd",
      "cpe": "cpe:2.3:a:airline-io:airline-io:2.8.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "502008366a98296ce95c62397b1cb7e06521a195"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.github.rvesse",
      "name": "airline-io",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:airline-io:airline_io:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:airline_io:airline-io:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:airline_io:airline_io:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:airline:airline-io:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:airline:airline_io:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:airline-io:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:airline_io:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rvesse:airline-io:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rvesse:airline_io:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/airline-io-2.8.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "airline-io"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.github.rvesse"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/airline-io-2.8.4.jar"
        }
      ],
      "purl": "pkg:maven/com.github.rvesse/airline-io@2.8.4",
      "type": "library",
      "version": "2.8.4"
    },
    {
      "bom-ref": "pkg:rpm/rhel/alsa-lib@1.2.10-2.el9?arch=aarch64&upstream=alsa-lib-1.2.10-2.el9.src.rpm&distro=rhel-9.4&package-id=f90d74047cd566f6",
      "cpe": "cpe:2.3:a:alsa-lib:alsa-lib:1.2.10-2.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "alsa-lib",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alsa-lib:alsa_lib:1.2.10-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alsa_lib:alsa-lib:1.2.10-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alsa_lib:alsa_lib:1.2.10-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:alsa-lib:1.2.10-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:alsa_lib:1.2.10-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alsa:alsa-lib:1.2.10-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alsa:alsa_lib:1.2.10-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "2.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "1539984"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "alsa-lib-1.2.10-2.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/alsa-lib@1.2.10-2.el9?arch=aarch64&upstream=alsa-lib-1.2.10-2.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.2.10-2.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/alternatives@1.24-1.el9?arch=aarch64&upstream=chkconfig-1.24-1.el9.src.rpm&distro=rhel-9.4&package-id=8f3a83d114508ebb",
      "cpe": "cpe:2.3:a:alternatives:alternatives:1.24-1.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        }
      ],
      "name": "alternatives",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:alternatives:1.24-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "91718"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "chkconfig-1.24-1.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/alternatives@1.24-1.el9?arch=aarch64&upstream=chkconfig-1.24-1.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.24-1.el9"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/amazon-kinesis-client@1.14.4?package-id=f2a167cf8820083c",
      "cpe": "cpe:2.3:a:amazon-kinesis-client:amazon-kinesis-client:1.14.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "526df0db4c22be3eb490dab2b4ef979032e3588d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "amazon-kinesis-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazon-kinesis-client:amazon_kinesis_client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazon_kinesis_client:amazon-kinesis-client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazon_kinesis_client:amazon_kinesis_client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazon-kinesis:amazon-kinesis-client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazon-kinesis:amazon_kinesis_client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazon_kinesis:amazon-kinesis-client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazon_kinesis:amazon_kinesis_client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:amazon-kinesis-client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:amazon_kinesis_client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazon:amazon-kinesis-client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazon:amazon_kinesis_client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/amazon-kinesis-client-1.14.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "amazon-kinesis-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/amazon-kinesis-client-1.14.4.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/amazon-kinesis-client@1.14.4",
      "type": "library",
      "version": "1.14.4"
    },
    {
      "bom-ref": "pkg:maven/org.jetbrains.annotations/annotations@17.0.0?package-id=750f6f0f9c8bace3",
      "cpe": "cpe:2.3:a:annotations:annotations:17.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8ceead41f4e71821919dbdb7a9847608f1a938cb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetbrains:annotations:17.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/annotations-17.0.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/annotations-17.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.jetbrains.annotations/annotations@17.0.0",
      "type": "library",
      "version": "17.0.0"
    },
    {
      "bom-ref": "pkg:maven/antlr/antlr@2.7.7?package-id=d4208542edb1d00e",
      "cpe": "cpe:2.3:a:antlr:antlr:2.7.7:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "83cd2cd674a217ade95a4bb83a8a14f351f48bd0"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "antlr",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-single/antlr-2.7.7.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-single/antlr-2.7.7.jar"
        }
      ],
      "purl": "pkg:maven/antlr/antlr@2.7.7",
      "type": "library",
      "version": "2.7.7"
    },
    {
      "bom-ref": "pkg:maven/org.antlr/antlr-runtime@3.4?package-id=7435ce16a4dbfa9a",
      "cpe": "cpe:2.3:a:antlr-runtime:antlr-runtime:3.4:*:*:*:*:*:*:*",
      "group": "org.antlr",
      "name": "antlr-runtime",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr-runtime:antlr_runtime:3.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr_runtime:antlr-runtime:3.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr_runtime:antlr_runtime:3.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr:antlr-runtime:3.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr:antlr_runtime:3.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jdbi-2.63.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "antlr-runtime"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.antlr"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jdbi-2.63.1.jar:org.antlr:antlr-runtime"
        }
      ],
      "purl": "pkg:maven/org.antlr/antlr-runtime@3.4",
      "type": "library",
      "version": "3.4"
    },
    {
      "bom-ref": "pkg:maven/org.antlr/antlr4-runtime@4.5.1?package-id=bb51962b578fcfa5",
      "cpe": "cpe:2.3:a:antlr4-runtime-osgi:antlr4-runtime:4.5.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "07d7288bbe0599b32b844971f270ed001a661357"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.antlr",
      "licenses": [
        {
          "license": {
            "name": "http://www.antlr.org/license.html"
          }
        }
      ],
      "name": "antlr4-runtime",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4-runtime-osgi:antlr4_runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4_runtime_osgi:antlr4-runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4_runtime_osgi:antlr4_runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4-runtime:antlr4-runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4-runtime:antlr4_runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4_runtime:antlr4-runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4_runtime:antlr4_runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4:antlr4-runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4:antlr4_runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr:antlr4-runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr:antlr4_runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/antlr4-runtime-4.5.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "antlr4-runtime"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.antlr"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/antlr4-runtime-4.5.1.jar"
        }
      ],
      "purl": "pkg:maven/org.antlr/antlr4-runtime@4.5.1",
      "type": "library",
      "version": "4.5.1"
    },
    {
      "bom-ref": "pkg:maven/aopalliance/aopalliance@1.0?package-id=de989c44a5c53a7e",
      "cpe": "cpe:2.3:a:aopalliance:aopalliance:1.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "aopalliance",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/aopalliance-1.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/aopalliance-1.0.jar"
        }
      ],
      "purl": "pkg:maven/aopalliance/aopalliance@1.0",
      "type": "library",
      "version": "1.0"
    },
    {
      "bom-ref": "pkg:maven/aopalliance/aopalliance@1.0?package-id=050e1618f4fc4a67",
      "cpe": "cpe:2.3:a:aopalliance:aopalliance:1.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "aopalliance",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aopalliance-1.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aopalliance-1.0.jar"
        }
      ],
      "purl": "pkg:maven/aopalliance/aopalliance@1.0",
      "type": "library",
      "version": "1.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.api/api@1.0.0-M20?package-id=3019ce50e427f1b4",
      "cpe": "cpe:2.3:a:apache:directory:1.0.0-M20:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5e6486ffa3125ba44dc410ead166e1d6ba8ac76d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:asn1:1.0.0-M20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api:1.0.0-M20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/api-asn1-api-1.0.0-M20.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/api-asn1-api-1.0.0-M20.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.api/api@1.0.0-M20",
      "type": "library",
      "version": "1.0.0-M20"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.api/api@1.0.0-M20?package-id=f7e7dccf440dd160",
      "cpe": "cpe:2.3:a:apache:directory:1.0.0-M20:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5e6486ffa3125ba44dc410ead166e1d6ba8ac76d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:asn1:1.0.0-M20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api:1.0.0-M20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/api-asn1-api-1.0.0-M20.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/api-asn1-api-1.0.0-M20.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.api/api@1.0.0-M20",
      "type": "library",
      "version": "1.0.0-M20"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.api/api@1.0.0-M20?package-id=ca15ae78b29e0cca",
      "cpe": "cpe:2.3:a:apache:directory:1.0.0-M20:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5e6486ffa3125ba44dc410ead166e1d6ba8ac76d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:asn1:1.0.0-M20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api:1.0.0-M20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/api-asn1-api-1.0.0-M20.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/api-asn1-api-1.0.0-M20.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.api/api@1.0.0-M20",
      "type": "library",
      "version": "1.0.0-M20"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?package-id=2f73325b05fd6348",
      "cpe": "cpe:2.3:a:apache:api-util:1.0.0-M20:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a871abf060b3cf83fc6dc4d7e3d151fce50ac3cb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.directory.api",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "api-util",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api_util:1.0.0-M20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:util:1.0.0-M20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api:1.0.0-M20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/api-util-1.0.0-M20.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "api-util"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.directory.api"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/api-util-1.0.0-M20.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20",
      "type": "library",
      "version": "1.0.0-M20"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.api/api-util@1.0.3?package-id=caced3e12fa1ba2a",
      "cpe": "cpe:2.3:a:apache:api-util:1.0.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ce50ea3b0120727a1e3d176d38bb607e8463a502"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.directory.api",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "api-util",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api_util:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:util:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/api-util-1.0.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "api-util"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.directory.api"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/api-util-1.0.3.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.api/api-util@1.0.3",
      "type": "library",
      "version": "1.0.3"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.api/api-util@1.0.3?package-id=8e4d9a9ca4c670ad",
      "cpe": "cpe:2.3:a:apache:api-util:1.0.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ce50ea3b0120727a1e3d176d38bb607e8463a502"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.directory.api",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "api-util",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api_util:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:util:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/api-util-1.0.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "api-util"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.directory.api"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/api-util-1.0.3.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.api/api-util@1.0.3",
      "type": "library",
      "version": "1.0.3"
    },
    {
      "bom-ref": "pkg:maven/org.objectweb.asm/asm@9.3?package-id=cf257e6b0fe4d89b",
      "cpe": "cpe:2.3:a:objectweb:asm:9.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8e6300ef51c1d801a7ed62d07cd221aca3a90640"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt"
          }
        }
      ],
      "name": "asm",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/asm-9.3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/asm-9.3.jar"
        }
      ],
      "purl": "pkg:maven/org.objectweb.asm/asm@9.3",
      "type": "library",
      "version": "9.3"
    },
    {
      "bom-ref": "pkg:maven/org.objectweb.asm/asm@9.3?package-id=750d013a73ace098",
      "cpe": "cpe:2.3:a:objectweb:asm:9.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8e6300ef51c1d801a7ed62d07cd221aca3a90640"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt"
          }
        }
      ],
      "name": "asm",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/asm-9.3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/asm-9.3.jar"
        }
      ],
      "purl": "pkg:maven/org.objectweb.asm/asm@9.3",
      "type": "library",
      "version": "9.3"
    },
    {
      "bom-ref": "pkg:maven/org.objectweb.asm/asm@9.3?package-id=503758b75144dc9b",
      "cpe": "cpe:2.3:a:objectweb:asm:9.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8e6300ef51c1d801a7ed62d07cd221aca3a90640"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt"
          }
        }
      ],
      "name": "asm",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/asm-9.3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/asm-9.3.jar"
        }
      ],
      "purl": "pkg:maven/org.objectweb.asm/asm@9.3",
      "type": "library",
      "version": "9.3"
    },
    {
      "bom-ref": "pkg:maven/org.objectweb.asm.tree.analysis/asm-analysis@9.3?package-id=4dd64a761be8d83c",
      "cpe": "cpe:2.3:a:asm-analysis:asm-analysis:9.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4b071f211b37c38e0e9f5998550197c8593f6ad8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt"
          }
        }
      ],
      "name": "asm-analysis",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-analysis:asm_analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_analysis:asm-analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_analysis:asm_analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm-analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm_analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:analysis:asm-analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:analysis:asm_analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-analysis:analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_analysis:analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:analysis:analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-analysis:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_analysis:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:asm-analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:asm_analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-analysis:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm-analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm_analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_analysis:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:analysis:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:analysis:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/asm-analysis-9.3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/asm-analysis-9.3.jar"
        }
      ],
      "purl": "pkg:maven/org.objectweb.asm.tree.analysis/asm-analysis@9.3",
      "type": "library",
      "version": "9.3"
    },
    {
      "bom-ref": "pkg:maven/org.objectweb.asm.commons/asm-commons@9.3?package-id=3856cf5716df5770",
      "cpe": "cpe:2.3:a:asm-commons:asm-commons:9.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1f2a432d1212f5c352ae607d7b61dcae20c20af5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt"
          }
        }
      ],
      "name": "asm-commons",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-commons:asm_commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_commons:asm-commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_commons:asm_commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm-commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm_commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-commons:commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_commons:commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:asm-commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:asm_commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-commons:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm-commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm_commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_commons:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/asm-commons-9.3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/asm-commons-9.3.jar"
        }
      ],
      "purl": "pkg:maven/org.objectweb.asm.commons/asm-commons@9.3",
      "type": "library",
      "version": "9.3"
    },
    {
      "bom-ref": "pkg:maven/org.objectweb.asm.tree/asm-tree@9.3?package-id=62a7fe9f00c4c886",
      "cpe": "cpe:2.3:a:objectweb:asm-tree:9.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "78d2ecd61318b5a58cd04fb237636c0e86b77d97"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt"
          }
        }
      ],
      "name": "asm-tree",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm_tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-tree:asm-tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-tree:asm_tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_tree:asm-tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_tree:asm_tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-tree:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_tree:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:asm-tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:asm_tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-tree:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm-tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm_tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_tree:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/asm-tree-9.3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/asm-tree-9.3.jar"
        }
      ],
      "purl": "pkg:maven/org.objectweb.asm.tree/asm-tree@9.3",
      "type": "library",
      "version": "9.3"
    },
    {
      "bom-ref": "pkg:maven/org.asynchttpclient/async-http-client@2.5.3?package-id=69a4e3c20ccc83ca",
      "cpe": "cpe:2.3:a:async-http-client:async-http-client:2.5.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "507505543772f54342d6ee855fa8f459d4bc6a11"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.asynchttpclient",
      "name": "async-http-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async-http-client:async_http_client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http_client:async-http-client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http_client:async_http_client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asynchttpclient:async-http-client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asynchttpclient:async_http_client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async-http:async-http-client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async-http:async_http_client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http:async-http-client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http:async_http_client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async:async-http-client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async:async_http_client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/async-http-client-2.5.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "async-http-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.asynchttpclient"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/async-http-client-2.5.3.jar"
        }
      ],
      "purl": "pkg:maven/org.asynchttpclient/async-http-client@2.5.3",
      "type": "library",
      "version": "2.5.3"
    },
    {
      "bom-ref": "pkg:maven/org.asynchttpclient/async-http-client-netty-utils@2.5.3?package-id=eaad4f810aca0b06",
      "cpe": "cpe:2.3:a:async-http-client-netty-utils:async-http-client-netty-utils:2.5.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "71abe1781fa182d92e97bf60450026cc72984ac2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.asynchttpclient",
      "name": "async-http-client-netty-utils",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async-http-client-netty-utils:async_http_client_netty_utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http_client_netty_utils:async-http-client-netty-utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http_client_netty_utils:async_http_client_netty_utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async-http-client-netty:async-http-client-netty-utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async-http-client-netty:async_http_client_netty_utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http_client_netty:async-http-client-netty-utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http_client_netty:async_http_client_netty_utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async-http-client:async-http-client-netty-utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async-http-client:async_http_client_netty_utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http_client:async-http-client-netty-utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http_client:async_http_client_netty_utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asynchttpclient:async-http-client-netty-utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asynchttpclient:async_http_client_netty_utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async-http:async-http-client-netty-utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async-http:async_http_client_netty_utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http:async-http-client-netty-utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http:async_http_client_netty_utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async:async-http-client-netty-utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async:async_http_client_netty_utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/async-http-client-netty-utils-2.5.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "async-http-client-netty-utils"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.asynchttpclient"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/async-http-client-netty-utils-2.5.3.jar"
        }
      ],
      "purl": "pkg:maven/org.asynchttpclient/async-http-client-netty-utils@2.5.3",
      "type": "library",
      "version": "2.5.3"
    },
    {
      "bom-ref": "pkg:maven/org.apache.yetus/audience-annotations@0.13.0?package-id=8ff4c8c83249ce5e",
      "cpe": "cpe:2.3:a:apache:audience-annotations:0.13.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8ad1147dcd02196e3924013679c6bf4c25d8c351"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.yetus",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "audience-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:audience_annotations:0.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/audience-annotations-0.13.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "audience-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.yetus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/audience-annotations-0.13.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.yetus/audience-annotations@0.13.0",
      "type": "library",
      "version": "0.13.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.yetus/audience-annotations@0.5.0?package-id=f88c79dd5b4f2296",
      "cpe": "cpe:2.3:a:apache:audience-annotations:0.5.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "55762d3191a8d6610ef46d11e8cb70c7667342a3"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.yetus",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "audience-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:audience_annotations:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/audience-annotations-0.5.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "audience-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.yetus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/audience-annotations-0.5.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.yetus/audience-annotations@0.5.0",
      "type": "library",
      "version": "0.5.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/audit-libs@3.1.2-2.el9?arch=aarch64&upstream=audit-3.1.2-2.el9.src.rpm&distro=rhel-9.4&package-id=fc7c1ac14736ff3c",
      "cpe": "cpe:2.3:a:audit-libs:audit-libs:3.1.2-2.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "audit-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:audit-libs:audit_libs:3.1.2-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:audit_libs:audit-libs:3.1.2-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:audit_libs:audit_libs:3.1.2-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:audit-libs:3.1.2-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:audit_libs:3.1.2-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:audit:audit-libs:3.1.2-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:audit:audit_libs:3.1.2-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "2.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "362737"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "audit-3.1.2-2.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/audit-libs@3.1.2-2.el9?arch=aarch64&upstream=audit-3.1.2-2.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.1.2-2.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/avahi-libs@0.8-20.el9?arch=aarch64&upstream=avahi-0.8-20.el9.src.rpm&distro=rhel-9.4&package-id=6f60b248ee8186b6",
      "cpe": "cpe:2.3:a:avahi-libs:avahi-libs:0.8-20.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "avahi-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:avahi-libs:avahi_libs:0.8-20.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:avahi_libs:avahi-libs:0.8-20.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:avahi_libs:avahi_libs:0.8-20.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:avahi-libs:0.8-20.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:avahi_libs:0.8-20.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:avahi:avahi-libs:0.8-20.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:avahi:avahi_libs:0.8-20.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "20.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "300118"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "avahi-0.8-20.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/avahi-libs@0.8-20.el9?arch=aarch64&upstream=avahi-0.8-20.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "0.8-20.el9"
    },
    {
      "bom-ref": "pkg:maven/org.apache.calcite.avatica/avatica-core@1.17.0?package-id=5a1c03cf762a5615",
      "cpe": "cpe:2.3:a:apache:avatica-core:1.17.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d69e7e0f02610af0f432e5241d7a202ab48bf3cb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "avatica-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avatica_core:1.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avatica:1.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:calcite:1.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/avatica-core-1.17.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/avatica-core-1.17.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.calcite.avatica/avatica-core@1.17.0",
      "type": "library",
      "version": "1.17.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.calcite.avatica/avatica-metrics@1.17.0?package-id=f7db40a0dfdd6163",
      "cpe": "cpe:2.3:a:apache:avatica-metrics:1.17.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c1c778095d3069504b17155c468169075c646e75"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "avatica-metrics",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avatica_metrics:1.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avatica:1.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:calcite:1.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/avatica-metrics-1.17.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/avatica-metrics-1.17.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.calcite.avatica/avatica-metrics@1.17.0",
      "type": "library",
      "version": "1.17.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.calcite.avatica/avatica-server@1.17.0?package-id=69bac49eab692958",
      "cpe": "cpe:2.3:a:apache:avatica-server:1.17.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cadc51ec46ac0586c94ec1740f1dcb200ef244ac"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "avatica-server",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avatica_server:1.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avatica:1.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:calcite:1.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/avatica-server-1.17.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/avatica-server-1.17.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.calcite.avatica/avatica-server@1.17.0",
      "type": "library",
      "version": "1.17.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.avro/avro@1.7.4?package-id=124d74c480598b3b",
      "cpe": "cpe:2.3:a:apache:avro:1.7.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "416e7030879814f52845b97f04bb50ecd1cef372"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.avro",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "avro",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/avro-1.7.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "avro"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.avro"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/avro-1.7.4.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.avro/avro@1.7.4",
      "type": "library",
      "version": "1.7.4"
    },
    {
      "bom-ref": "pkg:maven/org.apache.avro/avro@1.9.2?package-id=ff0e472d3ad4500a",
      "cpe": "cpe:2.3:a:apache:avro:1.9.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7e67193b94e45d32277ac480ea86421fd3976424"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.avro",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "avro",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/avro-1.9.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "avro"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.avro"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/avro-1.9.2.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.avro/avro@1.9.2",
      "type": "library",
      "version": "1.9.2"
    },
    {
      "bom-ref": "pkg:maven/org.apache.avro/avro@1.9.2?package-id=0f12fc8c14f4cb89",
      "cpe": "cpe:2.3:a:apache:avro:1.9.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7e67193b94e45d32277ac480ea86421fd3976424"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.avro",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "avro",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/avro-1.9.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "avro"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.avro"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/avro-1.9.2.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.avro/avro@1.9.2",
      "type": "library",
      "version": "1.9.2"
    },
    {
      "bom-ref": "pkg:maven/org.apache.avro/avro@1.9.2?package-id=eb30927f5e124bcb",
      "cpe": "cpe:2.3:a:apache:avro:1.9.2:*:*:*:*:*:*:*",
      "group": "org.apache.avro",
      "name": "avro",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "avro"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.avro"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:org.apache.avro:avro"
        }
      ],
      "purl": "pkg:maven/org.apache.avro/avro@1.9.2",
      "type": "library",
      "version": "1.9.2"
    },
    {
      "bom-ref": "pkg:maven/org.apache.avro/avro-ipc@1.9.2?package-id=9a7e7136842c5a90",
      "cpe": "cpe:2.3:a:apache:avro-ipc:1.9.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2f773b34e4085e7912611e558ed78b1661a52049"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.avro",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "avro-ipc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avro_ipc:1.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avro:1.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/avro-ipc-1.9.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "avro-ipc"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.avro"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/avro-ipc-1.9.2.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.avro/avro-ipc@1.9.2",
      "type": "library",
      "version": "1.9.2"
    },
    {
      "bom-ref": "pkg:maven/org.apache.avro/avro-ipc-jetty@1.9.2?package-id=7f15887e337b10f4",
      "cpe": "cpe:2.3:a:apache:avro-ipc-jetty:1.9.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f93d9e827d5c299076281548d0e5ea420195d4be"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.avro",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "avro-ipc-jetty",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avro_ipc_jetty:1.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avro:1.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/avro-ipc-jetty-1.9.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "avro-ipc-jetty"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.avro"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/avro-ipc-jetty-1.9.2.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.avro/avro-ipc-jetty@1.9.2",
      "type": "library",
      "version": "1.9.2"
    },
    {
      "bom-ref": "pkg:maven/org.apache.avro/avro-mapred@1.9.2?package-id=754329f6db75a19e",
      "cpe": "cpe:2.3:a:apache:avro-mapred:1.9.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "54c4f49051c56ed52a510d4460d1091c287f633f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.avro",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "avro-mapred",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avro_mapred:1.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avro:1.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/avro-mapred-1.9.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "avro-mapred"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.avro"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/avro-mapred-1.9.2.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.avro/avro-mapred@1.9.2",
      "type": "library",
      "version": "1.9.2"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.754?package-id=51654d5f8bc6a9b5",
      "cpe": "cpe:2.3:a:aws-java-sdk-core:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d27758e54d813a9cf806cccf0ce072fa115b170d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-core:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_core:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_core:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/aws-java-sdk-core-1.12.754.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/aws-java-sdk-core-1.12.754.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.754",
      "type": "library",
      "version": "1.12.754"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.754?package-id=7bef6ca2b5ccd140",
      "cpe": "cpe:2.3:a:aws-java-sdk-core:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d27758e54d813a9cf806cccf0ce072fa115b170d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-core:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_core:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_core:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/aws-java-sdk-core-1.12.754.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/aws-java-sdk-core-1.12.754.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.754",
      "type": "library",
      "version": "1.12.754"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.754?package-id=927ca5fbf00523cf",
      "cpe": "cpe:2.3:a:aws-java-sdk-core:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d27758e54d813a9cf806cccf0ce072fa115b170d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-core:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_core:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_core:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/aws-java-sdk-core-1.12.754.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/aws-java-sdk-core-1.12.754.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.754",
      "type": "library",
      "version": "1.12.754"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.754?package-id=5ac5de4a255c656a",
      "cpe": "cpe:2.3:a:aws-java-sdk-core:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d27758e54d813a9cf806cccf0ce072fa115b170d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-core:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_core:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_core:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_core:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aws-java-sdk-core-1.12.754.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aws-java-sdk-core-1.12.754.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.754",
      "type": "library",
      "version": "1.12.754"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-ec2@1.12.754?package-id=570226aeefccfde3",
      "cpe": "cpe:2.3:a:aws-java-sdk-ec2:aws-java-sdk-ec2:1.12.754:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8c701a881c1b4929dcc720c94b29b51d8534d0ac"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-ec2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-ec2:aws_java_sdk_ec2:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_ec2:aws-java-sdk-ec2:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_ec2:aws_java_sdk_ec2:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-ec2:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_ec2:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-ec2:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_ec2:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-ec2:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_ec2:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-ec2:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_ec2:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-ec2:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_ec2:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-ec2:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_ec2:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aws-java-sdk-ec2-1.12.754.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-ec2"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aws-java-sdk-ec2-1.12.754.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-ec2@1.12.754",
      "type": "library",
      "version": "1.12.754"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-kinesis@1.12.754?package-id=3da63f558ed62d4e",
      "cpe": "cpe:2.3:a:aws-java-sdk-kinesis:aws-java-sdk-kinesis:1.12.754:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8cd04177bad776ee4bf5d116d00f992e7045538c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-kinesis",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-kinesis:aws_java_sdk_kinesis:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_kinesis:aws-java-sdk-kinesis:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_kinesis:aws_java_sdk_kinesis:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-kinesis:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_kinesis:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-kinesis:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_kinesis:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-kinesis:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_kinesis:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-kinesis:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_kinesis:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-kinesis:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_kinesis:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-kinesis:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_kinesis:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/aws-java-sdk-kinesis-1.12.754.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-kinesis"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/aws-java-sdk-kinesis-1.12.754.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-kinesis@1.12.754",
      "type": "library",
      "version": "1.12.754"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-kms@1.12.754?package-id=fb4e7979a0895056",
      "cpe": "cpe:2.3:a:aws-java-sdk-kms:aws-java-sdk-kms:1.12.754:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b1bb45484d22088e82c89abf0e117e61fa01622b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-kms",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-kms:aws_java_sdk_kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_kms:aws-java-sdk-kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_kms:aws_java_sdk_kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/aws-java-sdk-kms-1.12.754.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-kms"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/aws-java-sdk-kms-1.12.754.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-kms@1.12.754",
      "type": "library",
      "version": "1.12.754"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-kms@1.12.754?package-id=dca53cad41b57181",
      "cpe": "cpe:2.3:a:aws-java-sdk-kms:aws-java-sdk-kms:1.12.754:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b1bb45484d22088e82c89abf0e117e61fa01622b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-kms",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-kms:aws_java_sdk_kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_kms:aws-java-sdk-kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_kms:aws_java_sdk_kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_kms:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aws-java-sdk-kms-1.12.754.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-kms"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aws-java-sdk-kms-1.12.754.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-kms@1.12.754",
      "type": "library",
      "version": "1.12.754"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-rds@1.12.754?package-id=4fa3154b7b449add",
      "cpe": "cpe:2.3:a:aws-java-sdk-rds:aws-java-sdk-rds:1.12.754:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "78f52a8bbe631b781bda03f418c6da237410e83c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-rds",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-rds:aws_java_sdk_rds:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_rds:aws-java-sdk-rds:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_rds:aws_java_sdk_rds:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-rds:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_rds:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-rds:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_rds:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-rds:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_rds:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-rds:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_rds:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-rds:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_rds:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-rds:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_rds:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/aws-java-sdk-rds-1.12.754.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-rds"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/aws-java-sdk-rds-1.12.754.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-rds@1.12.754",
      "type": "library",
      "version": "1.12.754"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-s3@1.12.754?package-id=22a1f9e66ba6dbc6",
      "cpe": "cpe:2.3:a:aws-java-sdk-s3:aws-java-sdk-s3:1.12.754:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6c48a70ecb11832b35fe006372d7caa1214aadcb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-s3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-s3:aws_java_sdk_s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_s3:aws-java-sdk-s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_s3:aws_java_sdk_s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/aws-java-sdk-s3-1.12.754.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-s3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/aws-java-sdk-s3-1.12.754.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-s3@1.12.754",
      "type": "library",
      "version": "1.12.754"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-s3@1.12.754?package-id=992239cdd298840f",
      "cpe": "cpe:2.3:a:aws-java-sdk-s3:aws-java-sdk-s3:1.12.754:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6c48a70ecb11832b35fe006372d7caa1214aadcb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-s3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-s3:aws_java_sdk_s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_s3:aws-java-sdk-s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_s3:aws_java_sdk_s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_s3:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aws-java-sdk-s3-1.12.754.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-s3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aws-java-sdk-s3-1.12.754.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-s3@1.12.754",
      "type": "library",
      "version": "1.12.754"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-sts@1.12.754?package-id=a16fccbc8c303cb8",
      "cpe": "cpe:2.3:a:aws-java-sdk-sts:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "161d518c30235c0d23261b7711406a9afa9e8a36"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-sts",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-sts:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_sts:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_sts:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/aws-java-sdk-sts-1.12.754.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-sts"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/aws-java-sdk-sts-1.12.754.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-sts@1.12.754",
      "type": "library",
      "version": "1.12.754"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-sts@1.12.754?package-id=748041a1f83e4007",
      "cpe": "cpe:2.3:a:aws-java-sdk-sts:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "161d518c30235c0d23261b7711406a9afa9e8a36"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-sts",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-sts:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_sts:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_sts:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/aws-java-sdk-sts-1.12.754.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-sts"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/aws-java-sdk-sts-1.12.754.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-sts@1.12.754",
      "type": "library",
      "version": "1.12.754"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-sts@1.12.754?package-id=30bf34de7437b6f2",
      "cpe": "cpe:2.3:a:aws-java-sdk-sts:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "161d518c30235c0d23261b7711406a9afa9e8a36"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-sts",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-sts:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_sts:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_sts:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_sts:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aws-java-sdk-sts-1.12.754.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-sts"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aws-java-sdk-sts-1.12.754.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-sts@1.12.754",
      "type": "library",
      "version": "1.12.754"
    },
    {
      "bom-ref": "pkg:maven/com.microsoft.azure/azure-keyvault-core@1.0.0?package-id=45bf13045c276cad",
      "cpe": "cpe:2.3:a:azure-keyvault-core:azure-keyvault-core:1.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e89dd5e621e21b753096ec6a03f203c01482c612"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.microsoft.azure",
      "licenses": [
        {
          "license": {
            "name": "The MIT License (MIT)",
            "url": "http://opensource.org/licenses/MIT"
          }
        }
      ],
      "name": "azure-keyvault-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure-keyvault-core:azure_keyvault_core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure_keyvault_core:azure-keyvault-core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure_keyvault_core:azure_keyvault_core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure-keyvault:azure-keyvault-core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure-keyvault:azure_keyvault_core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure_keyvault:azure-keyvault-core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure_keyvault:azure_keyvault_core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft:azure-keyvault-core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft:azure_keyvault_core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure-keyvault-core:azure:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure:azure-keyvault-core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure:azure_keyvault_core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure_keyvault_core:azure:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure-keyvault:azure:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure_keyvault:azure:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft:azure:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure:azure:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/azure-keyvault-core-1.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "azure-keyvault-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.microsoft.azure"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/azure-keyvault-core-1.0.0.jar"
        }
      ],
      "purl": "pkg:maven/com.microsoft.azure/azure-keyvault-core@1.0.0",
      "type": "library",
      "version": "1.0.0"
    },
    {
      "bom-ref": "pkg:maven/com.microsoft.azure/azure-storage@8.6.0?package-id=24bb6bc2c6f8d7c9",
      "cpe": "cpe:2.3:a:azure-storage:azure-storage:8.6.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2386c73fbdb8145979a339d7342293ec08c17ee9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.microsoft.azure",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "azure-storage",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure-storage:azure_storage:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure_storage:azure-storage:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure_storage:azure_storage:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft:azure-storage:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft:azure_storage:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure-storage:azure:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure:azure-storage:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure:azure_storage:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure_storage:azure:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft:azure:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure:azure:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/azure-storage-8.6.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "azure-storage"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.microsoft.azure"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/azure-storage-8.6.0.jar"
        }
      ],
      "purl": "pkg:maven/com.microsoft.azure/azure-storage@8.6.0",
      "type": "library",
      "version": "8.6.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/basesystem@11-13.el9?arch=noarch&upstream=basesystem-11-13.el9.src.rpm&distro=rhel-9.4&package-id=fcabd006cb3bfe7d",
      "cpe": "cpe:2.3:a:basesystem:basesystem:11-13.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "basesystem",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:basesystem:11-13.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "13.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "0"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "basesystem-11-13.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/basesystem@11-13.el9?arch=noarch&upstream=basesystem-11-13.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "11-13.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/bash@5.1.8-9.el9?arch=aarch64&upstream=bash-5.1.8-9.el9.src.rpm&distro=rhel-9.4&package-id=42968379d5d62fd1",
      "cpe": "cpe:2.3:a:redhat:bash:5.1.8-9.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+"
          }
        }
      ],
      "name": "bash",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bash:bash:5.1.8-9.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "9.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "7716607"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "bash-5.1.8-9.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/bash@5.1.8-9.el9?arch=aarch64&upstream=bash-5.1.8-9.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "5.1.8-9.el9"
    },
    {
      "bom-ref": "pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.69?package-id=0dce6b3f97fbaa5c",
      "cpe": "cpe:2.3:a:bouncycastle-org:bcpkix-jdk15on:1.69:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "45c36fb72fafb0b688c6af795e6cc803f6f79ee5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "bcpkix-jdk15on",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle-org:bcpkix_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle_org:bcpkix-jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle_org:bcpkix_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcpkix-jdk15on:bcpkix-jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcpkix-jdk15on:bcpkix_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcpkix_jdk15on:bcpkix-jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcpkix_jdk15on:bcpkix_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle:bcpkix-jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle:bcpkix_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcpkix:bcpkix-jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcpkix:bcpkix_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/bcpkix-jdk15on-1.69.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/bcpkix-jdk15on-1.69.jar"
        }
      ],
      "purl": "pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.69",
      "type": "library",
      "version": "1.69"
    },
    {
      "bom-ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk15on@1.68?package-id=b2492da22c408ab5",
      "cpe": "cpe:2.3:a:bcprov-ext-jdk15on:bcprov-ext-jdk15on:1.68:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d25fd4c83ea5e4d28f5bc25ddc06bde1fd148956"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "bcprov-ext-jdk15on",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov-ext-jdk15on:bcprov_ext_jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov_ext_jdk15on:bcprov-ext-jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov_ext_jdk15on:bcprov_ext_jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle-org:bcprov-ext-jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle-org:bcprov_ext_jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle_org:bcprov-ext-jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle_org:bcprov_ext_jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle:bcprov-ext-jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle:bcprov_ext_jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov-ext:bcprov-ext-jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov-ext:bcprov_ext_jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov_ext:bcprov-ext-jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov_ext:bcprov_ext_jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov:bcprov-ext-jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov:bcprov_ext_jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/bcprov-ext-jdk15on-1.68.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/bcprov-ext-jdk15on-1.68.jar"
        }
      ],
      "purl": "pkg:maven/org.bouncycastle/bcprov-ext-jdk15on@1.68",
      "type": "library",
      "version": "1.68"
    },
    {
      "bom-ref": "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.69?package-id=17b4f9f080b8761c",
      "cpe": "cpe:2.3:a:bouncycastle-org:bcprov-jdk15on:1.69:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "91e1628251cf3ca90093ce9d0fe67e5b7dab3850"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "bcprov-jdk15on",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle-org:bcprov_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle_org:bcprov-jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle_org:bcprov_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov-jdk15on:bcprov-jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov-jdk15on:bcprov_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov_jdk15on:bcprov-jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov_jdk15on:bcprov_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle:bcprov-jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle:bcprov_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov:bcprov-jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov:bcprov_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/bcprov-jdk15on-1.69.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/bcprov-jdk15on-1.69.jar"
        }
      ],
      "purl": "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.69",
      "type": "library",
      "version": "1.69"
    },
    {
      "bom-ref": "pkg:maven/org.bouncycastle/bcutil-jdk15on@1.69?package-id=cf3b0234fe2f591e",
      "cpe": "cpe:2.3:a:bouncycastle-org:bcutil-jdk15on:1.69:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c3edf93d346e97f64f041e448e7455c39c7eff64"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "bcutil-jdk15on",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle-org:bcutil_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle_org:bcutil-jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle_org:bcutil_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcutil-jdk15on:bcutil-jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcutil-jdk15on:bcutil_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcutil_jdk15on:bcutil-jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcutil_jdk15on:bcutil_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle:bcutil-jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle:bcutil_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcutil:bcutil-jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcutil:bcutil_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/bcutil-jdk15on-1.69.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/bcutil-jdk15on-1.69.jar"
        }
      ],
      "purl": "pkg:maven/org.bouncycastle/bcutil-jdk15on@1.69",
      "type": "library",
      "version": "1.69"
    },
    {
      "bom-ref": "pkg:maven/com.github.vladimir-bukhtoyarov/bucket4j-core@4.10.0?package-id=0fd5faf83c7547cd",
      "cpe": "cpe:2.3:a:vladimir-bukhtoyarov:bucket4j-core:4.10.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "beb36c663ec78daf291d3a573c809003d557e9b2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.github.vladimir-bukhtoyarov",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "bucket4j-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir-bukhtoyarov:bucket4j_core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir_bukhtoyarov:bucket4j-core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir_bukhtoyarov:bucket4j_core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir-bukhtoyarov:bucket4j:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir_bukhtoyarov:bucket4j:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j-core:bucket4j-core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j-core:bucket4j_core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j_core:bucket4j-core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j_core:bucket4j_core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir-bukhtoyarov:core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir_bukhtoyarov:core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j-core:bucket4j:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j:bucket4j-core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j:bucket4j_core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j_core:bucket4j:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir:bucket4j-core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir:bucket4j_core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:bucket4j-core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:bucket4j_core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j-core:core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j_core:core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:bucket4j-core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:bucket4j_core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j:bucket4j:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir:bucket4j:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:bucket4j:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j:core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:bucket4j:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir:core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/bucket4j-core-4.10.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "bucket4j-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.github.vladimir-bukhtoyarov"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/bucket4j-core-4.10.0.jar"
        }
      ],
      "purl": "pkg:maven/com.github.vladimir-bukhtoyarov/bucket4j-core@4.10.0",
      "type": "library",
      "version": "4.10.0"
    },
    {
      "bom-ref": "pkg:maven/net.bytebuddy/byte-buddy@1.12.7?package-id=4d9018ccfedff376",
      "cpe": "cpe:2.3:a:byte-buddy:byte-buddy:1.12.7:*:*:*:*:*:*:*",
      "group": "net.bytebuddy",
      "name": "byte-buddy",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte-buddy:byte_buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy:byte-buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy:byte_buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bytebuddy:byte-buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bytebuddy:byte_buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte:byte-buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte:byte_buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/byte-buddy-1.12.7.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "byte-buddy"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.bytebuddy"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/byte-buddy-1.12.7.jar:net.bytebuddy:byte-buddy"
        }
      ],
      "purl": "pkg:maven/net.bytebuddy/byte-buddy@1.12.7",
      "type": "library",
      "version": "1.12.7"
    },
    {
      "bom-ref": "pkg:maven/net.bytebuddy/byte-buddy-agent@1.12.7?package-id=edcf3169d916f9a2",
      "cpe": "cpe:2.3:a:byte-buddy-agent:byte-buddy-agent:1.12.7:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8b23f1a6afed2b787102a3625c1cfddc56b17a73"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.bytebuddy",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "byte-buddy-agent",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte-buddy-agent:byte_buddy_agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy_agent:byte-buddy-agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy_agent:byte_buddy_agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte-buddy:byte-buddy-agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte-buddy:byte_buddy_agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy:byte-buddy-agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy:byte_buddy_agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bytebuddy:byte-buddy-agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bytebuddy:byte_buddy_agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte:byte-buddy-agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte:byte_buddy_agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/byte-buddy-agent-1.12.7.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "byte-buddy-agent"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.bytebuddy"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/byte-buddy-agent-1.12.7.jar"
        }
      ],
      "purl": "pkg:maven/net.bytebuddy/byte-buddy-agent@1.12.7",
      "type": "library",
      "version": "1.12.7"
    },
    {
      "bom-ref": "pkg:maven/net.bytebuddy/byte-buddy-dep@1.12.7?package-id=608778bebad6f2f6",
      "cpe": "cpe:2.3:a:byte-buddy-dep:byte-buddy-dep:1.12.7:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e2a08a3fae74979ee76a8dd67cfd37958874e0fb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.bytebuddy",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "byte-buddy-dep",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte-buddy-dep:byte_buddy_dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy_dep:byte-buddy-dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy_dep:byte_buddy_dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte-buddy-dep:byte-buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte-buddy-dep:byte_buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte-buddy:byte-buddy-dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte-buddy:byte_buddy_dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy:byte-buddy-dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy:byte_buddy_dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy_dep:byte-buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy_dep:byte_buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bytebuddy:byte-buddy-dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bytebuddy:byte_buddy_dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte-buddy:byte-buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte-buddy:byte_buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy:byte-buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy:byte_buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bytebuddy:byte-buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bytebuddy:byte_buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte:byte-buddy-dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte:byte_buddy_dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte:byte-buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte:byte_buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/byte-buddy-1.12.7.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "byte-buddy-dep"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.bytebuddy"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/byte-buddy-1.12.7.jar"
        }
      ],
      "purl": "pkg:maven/net.bytebuddy/byte-buddy-dep@1.12.7",
      "type": "library",
      "version": "1.12.7"
    },
    {
      "bom-ref": "pkg:rpm/rhel/bzip2-libs@1.0.8-8.el9?arch=aarch64&upstream=bzip2-1.0.8-8.el9.src.rpm&distro=rhel-9.4&package-id=619049d03006a9b3",
      "cpe": "cpe:2.3:a:bzip2-libs:bzip2-libs:1.0.8-8.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "bzip2-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bzip2-libs:bzip2_libs:1.0.8-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bzip2_libs:bzip2-libs:1.0.8-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bzip2_libs:bzip2_libs:1.0.8-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:bzip2-libs:1.0.8-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:bzip2_libs:1.0.8-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bzip2:bzip2-libs:1.0.8-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bzip2:bzip2_libs:1.0.8-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "8.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "74460"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "bzip2-1.0.8-8.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/bzip2-libs@1.0.8-8.el9?arch=aarch64&upstream=bzip2-1.0.8-8.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.0.8-8.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/ca-certificates@2023.2.60_v7.0.306-90.1.el9_2?arch=noarch&upstream=ca-certificates-2023.2.60_v7.0.306-90.1.el9_2.src.rpm&distro=rhel-9.4&package-id=c20cc291effb1ef6",
      "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:2023.2.60_v7.0.306-90.1.el9_2:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "ca-certificates",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca-certificates:ca_certificates:2023.2.60_v7.0.306-90.1.el9_2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca_certificates:ca-certificates:2023.2.60_v7.0.306-90.1.el9_2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca_certificates:ca_certificates:2023.2.60_v7.0.306-90.1.el9_2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:ca-certificates:2023.2.60_v7.0.306-90.1.el9_2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:ca_certificates:2023.2.60_v7.0.306-90.1.el9_2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca:ca-certificates:2023.2.60_v7.0.306-90.1.el9_2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca:ca_certificates:2023.2.60_v7.0.306-90.1.el9_2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "90.1.el9_2"
        },
        {
          "name": "syft:metadata:size",
          "value": "2354545"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "ca-certificates-2023.2.60_v7.0.306-90.1.el9_2.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/ca-certificates@2023.2.60_v7.0.306-90.1.el9_2?arch=noarch&upstream=ca-certificates-2023.2.60_v7.0.306-90.1.el9_2.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2023.2.60_v7.0.306-90.1.el9_2"
    },
    {
      "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.8.8?package-id=2717f514cea6726e",
      "cpe": "cpe:2.3:a:ben-manes:ben-manes:2.8.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "298bb2108157513a39a1a52a686a1fe8b57cc973"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "caffeine",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben-manes:ben_manes:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben_manes:ben-manes:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben_manes:ben_manes:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben-manes:caffeine:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben_manes:caffeine:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:caffeine:ben-manes:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:caffeine:ben_manes:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:caffeine:caffeine:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:ben-manes:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:ben_manes:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:caffeine:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben:ben-manes:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben:ben_manes:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben:caffeine:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/caffeine-2.8.8.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/caffeine-2.8.8.jar"
        }
      ],
      "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.8.8",
      "type": "library",
      "version": "2.8.8"
    },
    {
      "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.8.8?package-id=15d5d403a9638bff",
      "cpe": "cpe:2.3:a:ben-manes:ben-manes:2.8.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "298bb2108157513a39a1a52a686a1fe8b57cc973"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "caffeine",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben-manes:ben_manes:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben_manes:ben-manes:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben_manes:ben_manes:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben-manes:caffeine:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben_manes:caffeine:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:caffeine:ben-manes:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:caffeine:ben_manes:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:caffeine:caffeine:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:ben-manes:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:ben_manes:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:caffeine:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben:ben-manes:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben:ben_manes:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben:caffeine:2.8.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/caffeine-2.8.8.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/caffeine-2.8.8.jar"
        }
      ],
      "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.8.8",
      "type": "library",
      "version": "2.8.8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.calcite/calcite-core@1.21.0?package-id=a8a891bb183284bc",
      "cpe": "cpe:2.3:a:apache:calcite-core:1.21.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cc4925ff83fb0ba25b417169a6cba77f5a6908aa"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.calcite",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "calcite-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:calcite_core:1.21.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:calcite:1.21.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/calcite-core-1.21.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "calcite-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.calcite"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/calcite-core-1.21.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.calcite/calcite-core@1.21.0",
      "type": "library",
      "version": "1.21.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.calcite/calcite-linq4j@1.21.0?package-id=a54c75eace03e3c4",
      "cpe": "cpe:2.3:a:apache:calcite-linq4j:1.21.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "25ce2a98c29794a86f81dbbc94e392538394d09f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.calcite",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "calcite-linq4j",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:calcite_linq4j:1.21.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:calcite:1.21.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/calcite-linq4j-1.21.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "calcite-linq4j"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.calcite"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/calcite-linq4j-1.21.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.calcite/calcite-linq4j@1.21.0",
      "type": "library",
      "version": "1.21.0"
    },
    {
      "bom-ref": "pkg:maven/cglib/cglib@3.2.0?package-id=e6daa3c86b2e5a99",
      "cpe": "cpe:2.3:a:cglib:cglib:3.2.0:*:*:*:*:*:*:*",
      "group": "cglib",
      "name": "cglib",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/guice-4.1.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "cglib"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "cglib"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/guice-4.1.0.jar:cglib:cglib"
        }
      ],
      "purl": "pkg:maven/cglib/cglib@3.2.0",
      "type": "library",
      "version": "3.2.0"
    },
    {
      "bom-ref": "pkg:maven/cglib/cglib@3.2.0?package-id=793ece95d76fdb20",
      "cpe": "cpe:2.3:a:cglib:cglib:3.2.0:*:*:*:*:*:*:*",
      "group": "cglib",
      "name": "cglib",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/guice-4.1.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "cglib"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "cglib"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/guice-4.1.0.jar:cglib:cglib"
        }
      ],
      "purl": "pkg:maven/cglib/cglib@3.2.0",
      "type": "library",
      "version": "3.2.0"
    },
    {
      "bom-ref": "pkg:maven/org.checkerframework.checker.qual/checker-qual@2.5.7?package-id=88e6f26c74a18fdf",
      "cpe": "cpe:2.3:a:checkerframework:checker-qual:2.5.7:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2bd4f1921c78c2adffbe2eb01117c7936d0a0789"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "checker-qual",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:checker_qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker-qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker_qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker-qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker_qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:checker:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker-qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker_qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker-qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker_qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/checker-qual-2.5.7.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/checker-qual-2.5.7.jar"
        }
      ],
      "purl": "pkg:maven/org.checkerframework.checker.qual/checker-qual@2.5.7",
      "type": "library",
      "version": "2.5.7"
    },
    {
      "bom-ref": "pkg:maven/org.checkerframework.checker.qual/checker-qual@3.5.0?package-id=02665dffb97fadaf",
      "cpe": "cpe:2.3:a:checkerframework:checker-qual:3.5.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2f50520c8abea66fbd8d26e481d3aef5c673b510"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "checker-qual",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:checker_qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker-qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker_qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker-qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker_qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:checker:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker-qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker_qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker-qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker_qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/postgresql-metadata-storage/checker-qual-3.5.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/postgresql-metadata-storage/checker-qual-3.5.0.jar"
        }
      ],
      "purl": "pkg:maven/org.checkerframework.checker.qual/checker-qual@3.5.0",
      "type": "library",
      "version": "3.5.0"
    },
    {
      "bom-ref": "pkg:maven/org.checkerframework.checker.qual/checker-qual@3.8.0?package-id=1f1161a070da9834",
      "cpe": "cpe:2.3:a:checkerframework:checker-qual:3.8.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6b83e4a33220272c3a08991498ba9dc09519f190"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "checker-qual",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:checker_qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker-qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker_qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker-qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker_qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:checker:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker-qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker_qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker-qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker_qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/checker-qual-3.8.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/checker-qual-3.8.0.jar"
        }
      ],
      "purl": "pkg:maven/org.checkerframework.checker.qual/checker-qual@3.8.0",
      "type": "library",
      "version": "3.8.0"
    },
    {
      "bom-ref": "pkg:maven/org.checkerframework.checker.qual/checker-qual@3.8.0?package-id=2060cc791d53d07b",
      "cpe": "cpe:2.3:a:checkerframework:checker-qual:3.8.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6b83e4a33220272c3a08991498ba9dc09519f190"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "checker-qual",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:checker_qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker-qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker_qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker-qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker_qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:checker:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker-qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker_qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker-qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker_qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/checker-qual-3.8.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/checker-qual-3.8.0.jar"
        }
      ],
      "purl": "pkg:maven/org.checkerframework.checker.qual/checker-qual@3.8.0",
      "type": "library",
      "version": "3.8.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml/classmate@1.1.0?package-id=7979a0818d384dc1",
      "cpe": "cpe:2.3:a:classmate:classmate:1.1.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "dbbd699a1486ad0f2ed6f5af6cfed66acacb9056"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "classmate",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:classmate:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/classmate-1.1.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "classmate"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/classmate-1.1.0.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml/classmate@1.1.0",
      "type": "library",
      "version": "1.1.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml/classmate@1.1.0?package-id=a839b4ee6478aa8e",
      "cpe": "cpe:2.3:a:classmate:classmate:1.1.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "classmate",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:classmate:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sonatype:classmate:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oss:classmate:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jdbi-2.63.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "classmate"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jdbi-2.63.1.jar:com.fasterxml:classmate"
        }
      ],
      "purl": "pkg:maven/com.fasterxml/classmate@1.1.0",
      "type": "library",
      "version": "1.1.0"
    },
    {
      "bom-ref": "pkg:maven/io.kubernetes/client-java@11.0.4?package-id=22d228c62b8aa8a7",
      "cpe": "cpe:2.3:a:client-java:client-java:11.0.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4cfe748d02a8546185a6fefd70f33c2ab52ad995"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.kubernetes",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "client-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client-java:client_java:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java:client-java:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java:client_java:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kubernetes:client-java:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kubernetes:client_java:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:client-java:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:client_java:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/client-java-11.0.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "client-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.kubernetes"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/client-java-11.0.4.jar"
        }
      ],
      "purl": "pkg:maven/io.kubernetes/client-java@11.0.4",
      "type": "library",
      "version": "11.0.4"
    },
    {
      "bom-ref": "pkg:maven/io.kubernetes/client-java-api@11.0.4?package-id=860752e752467d1b",
      "cpe": "cpe:2.3:a:client-java-api:client-java-api:11.0.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d3817a875a7c26fb51e29e849a189f8ad4e68c52"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.kubernetes",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "client-java-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client-java-api:client_java_api:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java_api:client-java-api:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java_api:client_java_api:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client-java:client-java-api:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client-java:client_java_api:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java:client-java-api:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java:client_java_api:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kubernetes:client-java-api:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kubernetes:client_java_api:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:client-java-api:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:client_java_api:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/client-java-api-11.0.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "client-java-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.kubernetes"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/client-java-api-11.0.4.jar"
        }
      ],
      "purl": "pkg:maven/io.kubernetes/client-java-api@11.0.4",
      "type": "library",
      "version": "11.0.4"
    },
    {
      "bom-ref": "pkg:maven/io.kubernetes/client-java-extended@11.0.4?package-id=7386af68c1b8cfc3",
      "cpe": "cpe:2.3:a:client-java-extended:client-java-extended:11.0.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6186261a15c3f7893fe6ad22f1d97db41e30ed85"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.kubernetes",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "client-java-extended",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client-java-extended:client_java_extended:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java_extended:client-java-extended:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java_extended:client_java_extended:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client-java:client-java-extended:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client-java:client_java_extended:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java:client-java-extended:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java:client_java_extended:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kubernetes:client-java-extended:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kubernetes:client_java_extended:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:client-java-extended:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:client_java_extended:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/client-java-extended-11.0.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "client-java-extended"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.kubernetes"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/client-java-extended-11.0.4.jar"
        }
      ],
      "purl": "pkg:maven/io.kubernetes/client-java-extended@11.0.4",
      "type": "library",
      "version": "11.0.4"
    },
    {
      "bom-ref": "pkg:maven/io.kubernetes/client-java-proto@11.0.4?package-id=fbe1c8937d7b3568",
      "cpe": "cpe:2.3:a:client-java-proto:client-java-proto:11.0.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "dc6aafebdd033080c3a26aa156710cb34a45db92"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.kubernetes",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "client-java-proto",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client-java-proto:client_java_proto:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java_proto:client-java-proto:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java_proto:client_java_proto:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client-java:client-java-proto:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client-java:client_java_proto:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java:client-java-proto:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java:client_java_proto:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kubernetes:client-java-proto:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kubernetes:client_java_proto:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:client-java-proto:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:client_java_proto:11.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/client-java-proto-11.0.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "client-java-proto"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.kubernetes"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/client-java-proto-11.0.4.jar"
        }
      ],
      "purl": "pkg:maven/io.kubernetes/client-java-proto@11.0.4",
      "type": "library",
      "version": "11.0.4"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.server/codec@2.0.0-M15?package-id=5769ff5b76862b66",
      "cpe": "cpe:2.3:a:apache:directory:2.0.0-M15:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1c16e4e477183641c5f0dd5cdecd27ec331bacb5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:kerberos:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:server:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:codec:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/apacheds-kerberos-codec-2.0.0-M15.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/apacheds-kerberos-codec-2.0.0-M15.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.server/codec@2.0.0-M15",
      "type": "library",
      "version": "2.0.0-M15"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.server/codec@2.0.0-M15?package-id=91550ce090d91ce9",
      "cpe": "cpe:2.3:a:apache:directory:2.0.0-M15:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1c16e4e477183641c5f0dd5cdecd27ec331bacb5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:kerberos:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:server:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:codec:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/apacheds-kerberos-codec-2.0.0-M15.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/apacheds-kerberos-codec-2.0.0-M15.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.server/codec@2.0.0-M15",
      "type": "library",
      "version": "2.0.0-M15"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.server/codec@2.0.0-M15?package-id=7e34ead9640fb837",
      "cpe": "cpe:2.3:a:apache:directory:2.0.0-M15:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1c16e4e477183641c5f0dd5cdecd27ec331bacb5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:kerberos:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:server:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:codec:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/apacheds-kerberos-codec-2.0.0-M15.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/apacheds-kerberos-codec-2.0.0-M15.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.server/codec@2.0.0-M15",
      "type": "library",
      "version": "2.0.0-M15"
    },
    {
      "bom-ref": "pkg:maven/io.confluent/common-config@5.5.15?package-id=cbdab451536f5e58",
      "cpe": "cpe:2.3:a:common-config:common-config:5.5.15:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f6f9fc7a8a8f5b1e98c2c1201e3f56042b0740a3"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.confluent",
      "name": "common-config",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common-config:common_config:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_config:common-config:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_config:common_config:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:confluent:common-config:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:confluent:common_config:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:common-config:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:common_config:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/common-config-5.5.15.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "common-config"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.confluent"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/common-config-5.5.15.jar"
        }
      ],
      "purl": "pkg:maven/io.confluent/common-config@5.5.15",
      "type": "library",
      "version": "5.5.15"
    },
    {
      "bom-ref": "pkg:maven/io.confluent/common-utils@5.5.15?package-id=6ac99c59a21b82cb",
      "cpe": "cpe:2.3:a:common-utils:common-utils:5.5.15:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e4ed8bfafaa9a9dc652ffcdd7c1ddc850d8eb32f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.confluent",
      "name": "common-utils",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common-utils:common_utils:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_utils:common-utils:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_utils:common_utils:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:confluent:common-utils:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:confluent:common_utils:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:common-utils:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:common_utils:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/common-utils-5.5.15.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "common-utils"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.confluent"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/common-utils-5.5.15.jar"
        }
      ],
      "purl": "pkg:maven/io.confluent/common-utils@5.5.15",
      "type": "library",
      "version": "5.5.15"
    },
    {
      "bom-ref": "pkg:maven/io.confluent/common-utils@6.0.15?package-id=b069948a3e82da2c",
      "cpe": "cpe:2.3:a:common-utils:common-utils:6.0.15:*:*:*:*:*:*:*",
      "group": "io.confluent",
      "name": "common-utils",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common-utils:common_utils:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_utils:common-utils:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_utils:common_utils:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:confluent:common-utils:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:confluent:common_utils:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:common-utils:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:common_utils:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "common-utils"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.confluent"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:io.confluent:common-utils"
        }
      ],
      "purl": "pkg:maven/io.confluent/common-utils@6.0.15",
      "type": "library",
      "version": "6.0.15"
    },
    {
      "bom-ref": "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?package-id=67feef52a8072c02",
      "cpe": "cpe:2.3:a:apache:commons-beanutils:1.9.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d52b9abcd97f38c81342bb7e7ae1eee9b73cba51"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-beanutils",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-beanutils",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_beanutils:1.9.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.9.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-beanutils-1.9.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-beanutils"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-beanutils"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-beanutils-1.9.4.jar"
        }
      ],
      "purl": "pkg:maven/commons-beanutils/commons-beanutils@1.9.4",
      "type": "library",
      "version": "1.9.4"
    },
    {
      "bom-ref": "pkg:maven/commons-cli/commons-cli@1.2?package-id=106ec2ff6910d51b",
      "cpe": "cpe:2.3:a:apache:commons-cli:1.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2bf96b7aa8b611c177d329452af1dc933e14501c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-cli",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-cli",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_cli:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:cli:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-cli-1.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-cli"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-cli"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-cli-1.2.jar"
        }
      ],
      "purl": "pkg:maven/commons-cli/commons-cli@1.2",
      "type": "library",
      "version": "1.2"
    },
    {
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.13?package-id=283b7c68c8ba704b",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-codec:1.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3f18e1aa31031d89db6f01ba05d501258ce69d2c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-codec",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/commons-codec-1.13.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/commons-codec-1.13.jar"
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.13",
      "type": "library",
      "version": "1.13"
    },
    {
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.13?package-id=2cff3c589e746426",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-codec:1.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3f18e1aa31031d89db6f01ba05d501258ce69d2c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-codec",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-codec-1.13.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-codec-1.13.jar"
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.13",
      "type": "library",
      "version": "1.13"
    },
    {
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.13?package-id=de0ee144aa322722",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-codec:1.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3f18e1aa31031d89db6f01ba05d501258ce69d2c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-codec",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/commons-codec-1.13.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/commons-codec-1.13.jar"
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.13",
      "type": "library",
      "version": "1.13"
    },
    {
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.13?package-id=a27282cdf1e47857",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-codec:1.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3f18e1aa31031d89db6f01ba05d501258ce69d2c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-codec",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/commons-codec-1.13.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/commons-codec-1.13.jar"
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.13",
      "type": "library",
      "version": "1.13"
    },
    {
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.13?package-id=6e4136238b67fc53",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-codec:1.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3f18e1aa31031d89db6f01ba05d501258ce69d2c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-codec",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-codec-1.13.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-codec-1.13.jar"
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.13",
      "type": "library",
      "version": "1.13"
    },
    {
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.4?package-id=910fde9fd3f430a1",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-codec:1.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4216af16d38465bbab0f3dff8efa14204f7a399a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-codec",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_codec:1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-codec:1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_codec:1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons-codec:1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons_codec:1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons-codec:1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons_codec:1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-codec:1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_codec:1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-codec-1.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-codec-1.4.jar"
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.4",
      "type": "library",
      "version": "1.4"
    },
    {
      "bom-ref": "pkg:maven/commons-collections/commons-collections@3.2.2?package-id=d8dc48a6b31c77e5",
      "cpe": "cpe:2.3:a:apache:commons-collections:3.2.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-collections",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-collections",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:collections:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-collections-3.2.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-collections"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-collections"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-collections-3.2.2.jar"
        }
      ],
      "purl": "pkg:maven/commons-collections/commons-collections@3.2.2",
      "type": "library",
      "version": "3.2.2"
    },
    {
      "bom-ref": "pkg:maven/commons-collections/commons-collections@3.2.2?package-id=b4b2f889b5c35efb",
      "cpe": "cpe:2.3:a:apache:commons-collections:3.2.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-collections",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-collections",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:collections:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-collections-3.2.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-collections"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-collections"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-collections-3.2.2.jar"
        }
      ],
      "purl": "pkg:maven/commons-collections/commons-collections@3.2.2",
      "type": "library",
      "version": "3.2.2"
    },
    {
      "bom-ref": "pkg:maven/commons-collections/commons-collections@3.2.2?package-id=8788cbc8b0106959",
      "cpe": "cpe:2.3:a:apache:commons-collections:3.2.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-collections",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-collections",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:collections:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-collections-3.2.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-collections"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-collections"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-collections-3.2.2.jar"
        }
      ],
      "purl": "pkg:maven/commons-collections/commons-collections@3.2.2",
      "type": "library",
      "version": "3.2.2"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-collections4@4.2?package-id=db5566b08ca346d8",
      "cpe": "cpe:2.3:a:apache:commons-collections4:4.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "54ebea0a5b653d3c680131e73fe807bb8f78c4ed"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-collections4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_collections4:4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/commons-collections4-4.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-collections4"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/commons-collections4-4.2.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-collections4@4.2",
      "type": "library",
      "version": "4.2"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-collections4@4.2?package-id=40ac485dc0166f1b",
      "cpe": "cpe:2.3:a:apache:commons-collections4:4.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "54ebea0a5b653d3c680131e73fe807bb8f78c4ed"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-collections4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_collections4:4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-collections4-4.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-collections4"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-collections4-4.2.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-collections4@4.2",
      "type": "library",
      "version": "4.2"
    },
    {
      "bom-ref": "pkg:maven/org.codehaus.janino/commons-compiler@3.0.11?package-id=92caf7603e310a9e",
      "cpe": "cpe:2.3:a:commons-compiler:commons-compiler:3.0.11:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f2a6ec7fbc929c9fc87ff8bb486c0574951c5b09"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.codehaus.janino",
      "licenses": [
        {
          "license": {
            "name": "https://raw.githubusercontent.com/janino-compiler/janino/master/LICENSE"
          }
        }
      ],
      "name": "commons-compiler",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-compiler:commons_compiler:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_compiler:commons-compiler:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_compiler:commons_compiler:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:commons-compiler:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:commons_compiler:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-compiler:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_compiler:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:janino:commons-compiler:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:janino:commons_compiler:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-compiler-3.0.11.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-compiler"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.codehaus.janino"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-compiler-3.0.11.jar"
        }
      ],
      "purl": "pkg:maven/org.codehaus.janino/commons-compiler@3.0.11",
      "type": "library",
      "version": "3.0.11"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-compress@1.21?package-id=29df0bdfe08f4e14",
      "cpe": "cpe:2.3:a:apache:commons-compress:1.21:*:*:*:*:*:*:*",
      "group": "org.apache.commons",
      "name": "commons-compress",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_compress:1.21:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.21:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-compress"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:org.apache.commons:commons-compress"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-compress@1.21",
      "type": "library",
      "version": "1.21"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-compress@1.21?package-id=2e057858a4be293b",
      "cpe": "cpe:2.3:a:apache:commons-compress:1.21:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4ec95b60d4e86b5c95a0e919cb172a0af98011ef"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-compress",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_compress:1.21:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:compress:1.21:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.21:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-compress-1.21.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-compress"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-compress-1.21.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-compress@1.21",
      "type": "library",
      "version": "1.21"
    },
    {
      "bom-ref": "pkg:maven/commons-configuration/commons-configuration@1.6?package-id=e9a0d8f129b95b33",
      "cpe": "cpe:2.3:a:apache:commons-configuration:1.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "32cadde23955d7681b0d94a2715846d20b425235"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-configuration",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-configuration",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-configuration-1.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-configuration-1.6.jar"
        }
      ],
      "purl": "pkg:maven/commons-configuration/commons-configuration@1.6",
      "type": "library",
      "version": "1.6"
    },
    {
      "bom-ref": "pkg:maven/commons-configuration/commons-configuration@1.6?package-id=8f1b8d3f050ce12d",
      "cpe": "cpe:2.3:a:apache:commons-configuration:1.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "32cadde23955d7681b0d94a2715846d20b425235"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-configuration",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-configuration",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/commons-configuration-1.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/commons-configuration-1.6.jar"
        }
      ],
      "purl": "pkg:maven/commons-configuration/commons-configuration@1.6",
      "type": "library",
      "version": "1.6"
    },
    {
      "bom-ref": "pkg:maven/commons-configuration/commons-configuration@1.6?package-id=4d71d4675d55c0e4",
      "cpe": "cpe:2.3:a:apache:commons-configuration:1.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "32cadde23955d7681b0d94a2715846d20b425235"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-configuration",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-configuration",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/commons-configuration-1.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/commons-configuration-1.6.jar"
        }
      ],
      "purl": "pkg:maven/commons-configuration/commons-configuration@1.6",
      "type": "library",
      "version": "1.6"
    },
    {
      "bom-ref": "pkg:maven/commons-configuration/commons-configuration@1.6?package-id=c58bcf9f6337440d",
      "cpe": "cpe:2.3:a:apache:commons-configuration:1.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "32cadde23955d7681b0d94a2715846d20b425235"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-configuration",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-configuration",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/commons-configuration-1.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/commons-configuration-1.6.jar"
        }
      ],
      "purl": "pkg:maven/commons-configuration/commons-configuration@1.6",
      "type": "library",
      "version": "1.6"
    },
    {
      "bom-ref": "pkg:maven/commons-configuration/commons-configuration@1.6?package-id=98e14eb5af49b9e5",
      "cpe": "cpe:2.3:a:apache:commons-configuration:1.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "32cadde23955d7681b0d94a2715846d20b425235"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-configuration",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-configuration",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-configuration-1.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-configuration-1.6.jar"
        }
      ],
      "purl": "pkg:maven/commons-configuration/commons-configuration@1.6",
      "type": "library",
      "version": "1.6"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-dbcp2@2.0.1?package-id=6b01fa562ae9283d",
      "cpe": "cpe:2.3:a:apache:commons-dbcp2:2.0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "dc887691eab129c5728e26b095751fcadd36719d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-dbcp2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_dbcp2:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:dbcp2:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-dbcp2-2.0.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-dbcp2"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-dbcp2-2.0.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-dbcp2@2.0.1",
      "type": "library",
      "version": "2.0.1"
    },
    {
      "bom-ref": "pkg:maven/commons-digester/commons-digester@1.8?package-id=d8c27c0de1269a2e",
      "cpe": "cpe:2.3:a:apache:commons-digester:1.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "dc6a73fdbd1fa3f0944e8497c6c872fa21dca37e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "commons-digester",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_digester:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:digester:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-digester-1.8.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-digester-1.8.jar"
        }
      ],
      "purl": "pkg:maven/commons-digester/commons-digester@1.8",
      "type": "library",
      "version": "1.8"
    },
    {
      "bom-ref": "pkg:maven/commons-digester/commons-digester@1.8?package-id=361e32fe8b18fdc8",
      "cpe": "cpe:2.3:a:apache:commons-digester:1.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "dc6a73fdbd1fa3f0944e8497c6c872fa21dca37e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "commons-digester",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_digester:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:digester:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/commons-digester-1.8.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/commons-digester-1.8.jar"
        }
      ],
      "purl": "pkg:maven/commons-digester/commons-digester@1.8",
      "type": "library",
      "version": "1.8"
    },
    {
      "bom-ref": "pkg:maven/commons-digester/commons-digester@1.8?package-id=032aa5a379fe126d",
      "cpe": "cpe:2.3:a:apache:commons-digester:1.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "dc6a73fdbd1fa3f0944e8497c6c872fa21dca37e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "commons-digester",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_digester:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:digester:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-digester-1.8.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-digester-1.8.jar"
        }
      ],
      "purl": "pkg:maven/commons-digester/commons-digester@1.8",
      "type": "library",
      "version": "1.8"
    },
    {
      "bom-ref": "pkg:maven/commons-io/commons-io@2.11.0?package-id=d9a58764de2ffc7a",
      "cpe": "cpe:2.3:a:apache:commons-io:2.11.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-io",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-io",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_io:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/commons-io-2.11.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-io"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-io"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/commons-io-2.11.0.jar"
        }
      ],
      "purl": "pkg:maven/commons-io/commons-io@2.11.0",
      "type": "library",
      "version": "2.11.0"
    },
    {
      "bom-ref": "pkg:maven/commons-io/commons-io@2.11.0?package-id=dc6ddde11b684468",
      "cpe": "cpe:2.3:a:apache:commons-io:2.11.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-io",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-io",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_io:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-io-2.11.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-io"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-io"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-io-2.11.0.jar"
        }
      ],
      "purl": "pkg:maven/commons-io/commons-io@2.11.0",
      "type": "library",
      "version": "2.11.0"
    },
    {
      "bom-ref": "pkg:maven/commons-io/commons-io@2.4?package-id=c6b61d5468ff3b3f",
      "cpe": "cpe:2.3:a:apache:commons-io:2.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b1b6ea3b7e4aa4f492509a4952029cd8e48019ad"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-io",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-io",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_io:2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:io:2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-io-2.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-io"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-io"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-io-2.4.jar"
        }
      ],
      "purl": "pkg:maven/commons-io/commons-io@2.4",
      "type": "library",
      "version": "2.4"
    },
    {
      "bom-ref": "pkg:maven/commons-io/commons-io@2.6?package-id=be721c890e69daf3",
      "cpe": "cpe:2.3:a:apache:commons-io:2.6:*:*:*:*:*:*:*",
      "group": "commons-io",
      "name": "commons-io",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_io:2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/velocity-engine-core-2.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-io"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-io"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/velocity-engine-core-2.2.jar:commons-io:commons-io"
        }
      ],
      "purl": "pkg:maven/commons-io/commons-io@2.6",
      "type": "library",
      "version": "2.6"
    },
    {
      "bom-ref": "pkg:maven/commons-lang/commons-lang@2.6?package-id=2ecb319058bda3ba",
      "cpe": "cpe:2.3:a:apache:commons-lang:2.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0ce1edb914c94ebc388f086c6827e8bdeec71ac2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-lang",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-lang",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_lang:2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:lang:2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-lang-2.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-lang"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-lang"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-lang-2.6.jar"
        }
      ],
      "purl": "pkg:maven/commons-lang/commons-lang@2.6",
      "type": "library",
      "version": "2.6"
    },
    {
      "bom-ref": "pkg:maven/commons-lang/commons-lang@2.6?package-id=eef7a94ff29f5e5a",
      "cpe": "cpe:2.3:a:apache:commons-lang:2.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0ce1edb914c94ebc388f086c6827e8bdeec71ac2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-lang",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-lang",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_lang:2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:lang:2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-lang-2.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-lang"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-lang"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-lang-2.6.jar"
        }
      ],
      "purl": "pkg:maven/commons-lang/commons-lang@2.6",
      "type": "library",
      "version": "2.6"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0?package-id=d32893399526dc83",
      "cpe": "cpe:2.3:a:apache:commons-lang3:3.12.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-lang3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_lang3:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:lang3:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/commons-lang3-3.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-lang3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/commons-lang3-3.12.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.12.0",
      "type": "library",
      "version": "3.12.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0?package-id=03fff9f584d2d4dc",
      "cpe": "cpe:2.3:a:apache:commons-lang3:3.12.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-lang3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_lang3:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:lang3:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/commons-lang3-3.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-lang3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/commons-lang3-3.12.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.12.0",
      "type": "library",
      "version": "3.12.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0?package-id=8c835c5110e4f8bb",
      "cpe": "cpe:2.3:a:apache:commons-lang3:3.12.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-lang3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_lang3:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:lang3:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/commons-lang3-3.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-lang3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/commons-lang3-3.12.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.12.0",
      "type": "library",
      "version": "3.12.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0?package-id=037d09f8f2fd102e",
      "cpe": "cpe:2.3:a:apache:commons-lang3:3.12.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-lang3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_lang3:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:lang3:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/commons-lang3-3.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-lang3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/commons-lang3-3.12.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.12.0",
      "type": "library",
      "version": "3.12.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0?package-id=51905c510593f718",
      "cpe": "cpe:2.3:a:apache:commons-lang3:3.12.0:*:*:*:*:*:*:*",
      "group": "org.apache.commons",
      "name": "commons-lang3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_lang3:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-lang3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:org.apache.commons:commons-lang3"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.12.0",
      "type": "library",
      "version": "3.12.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0?package-id=0bf3628ba136fdc2",
      "cpe": "cpe:2.3:a:apache:commons-lang3:3.12.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-lang3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_lang3:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:lang3:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-lang3-3.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-lang3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-lang3-3.12.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.12.0",
      "type": "library",
      "version": "3.12.0"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.1?package-id=adec667aa873b319",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-logging:1.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5043bfebc3db072ed80fbd362e7caf00e885d8ae"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-logging",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/commons-logging-1.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/commons-logging-1.1.1.jar"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.1?package-id=83b5e39163be05ce",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-logging:1.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5043bfebc3db072ed80fbd362e7caf00e885d8ae"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-logging",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-logging-1.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-logging-1.1.1.jar"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.1?package-id=369b55fab53635c3",
      "cpe": "cpe:2.3:a:apache:commons-logging:1.1.1:*:*:*:*:*:*:*",
      "group": "commons-logging",
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/htrace-core4-4.0.1-incubating.jar:commons-logging:commons-logging"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.1?package-id=374d70956cf59db7",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-logging:1.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5043bfebc3db072ed80fbd362e7caf00e885d8ae"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-logging",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/commons-logging-1.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/commons-logging-1.1.1.jar"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.1?package-id=fc461728b23b9287",
      "cpe": "cpe:2.3:a:apache:commons-logging:1.1.1:*:*:*:*:*:*:*",
      "group": "commons-logging",
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/htrace-core4-4.0.1-incubating.jar:commons-logging:commons-logging"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.1?package-id=9aad004093cc28cf",
      "cpe": "cpe:2.3:a:apache:commons-logging:1.1.1:*:*:*:*:*:*:*",
      "group": "commons-logging",
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/htrace-core4-4.0.1-incubating.jar:commons-logging:commons-logging"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.1?package-id=38622bcfb594aec6",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-logging:1.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5043bfebc3db072ed80fbd362e7caf00e885d8ae"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-logging",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/commons-logging-1.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/commons-logging-1.1.1.jar"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.1?package-id=45730e43e899fe3c",
      "cpe": "cpe:2.3:a:apache:commons-logging:1.1.1:*:*:*:*:*:*:*",
      "group": "commons-logging",
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/htrace-core4-4.0.1-incubating.jar:commons-logging:commons-logging"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.1?package-id=250b0ed44acfce1e",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-logging:1.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5043bfebc3db072ed80fbd362e7caf00e885d8ae"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-logging",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-logging-1.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-logging-1.1.1.jar"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.3?package-id=432f1ad5c96e0ab9",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-logging:1.1.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-logging",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_logging:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-logging:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_logging:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons-logging:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons_logging:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons-logging:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons_logging:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-logging:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_logging:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-logging-1.1.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-logging-1.1.3.jar"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.3",
      "type": "library",
      "version": "1.1.3"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-math3@3.1.1?package-id=90a940e544aa5178",
      "cpe": "cpe:2.3:a:apache:commons-math3:3.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6719d757a98ff24a83d9d727bef9cec83f59b6e1"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-math3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_math3:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:math3:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-math3-3.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-math3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-math3-3.1.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-math3@3.1.1",
      "type": "library",
      "version": "3.1.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-math3@3.6.1?package-id=0c26f235f15a4f57",
      "cpe": "cpe:2.3:a:apache:commons-math3:3.6.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-math3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_math3:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:math3:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-datasketches/commons-math3-3.6.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-math3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-datasketches/commons-math3-3.6.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-math3@3.6.1",
      "type": "library",
      "version": "3.6.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-math3@3.6.1?package-id=aca52c103cfb8cd9",
      "cpe": "cpe:2.3:a:apache:commons-math3:3.6.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-math3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_math3:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:math3:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-stats/commons-math3-3.6.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-math3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-stats/commons-math3-3.6.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-math3@3.6.1",
      "type": "library",
      "version": "3.6.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-math3@3.6.1?package-id=1a8430d63e3d9814",
      "cpe": "cpe:2.3:a:apache:commons-math3:3.6.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-math3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_math3:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:math3:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-math3-3.6.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-math3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-math3-3.6.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-math3@3.6.1",
      "type": "library",
      "version": "3.6.1"
    },
    {
      "bom-ref": "pkg:maven/commons-net/commons-net@3.1?package-id=1bca39c0969acb16",
      "cpe": "cpe:2.3:a:apache:commons-net:3.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2298164a7c2484406f2aa5ac85b205d39019896f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-net",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-net",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_net:3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:net:3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-net-3.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-net"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-net"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-net-3.1.jar"
        }
      ],
      "purl": "pkg:maven/commons-net/commons-net@3.1",
      "type": "library",
      "version": "3.1"
    },
    {
      "bom-ref": "pkg:maven/commons-net/commons-net@3.6?package-id=765b4f00967998b8",
      "cpe": "cpe:2.3:a:apache:commons-net:3.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b71de00508dcb078d2b24b5fa7e538636de9b3da"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-net",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-net",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_net:3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:net:3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-net-3.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-net"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-net"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-net-3.6.jar"
        }
      ],
      "purl": "pkg:maven/commons-net/commons-net@3.6",
      "type": "library",
      "version": "3.6"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-pool2@2.2?package-id=e9101aded12aac1f",
      "cpe": "cpe:2.3:a:apache:commons-pool2:2.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bd1a6e384f3cf0f9b9a60e1e6c1c1ecbbee7e0b7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-pool2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_pool2:2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:pool2:2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-pool2-2.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-pool2"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-pool2-2.2.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-pool2@2.2",
      "type": "library",
      "version": "2.2"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-text@1.10.0?package-id=1f6e94f63ba75cdc",
      "cpe": "cpe:2.3:a:apache:commons-text:1.10.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3363381aef8cef2dbc1023b3e3a9433b08b64e01"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-text",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_text:1.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-text-1.10.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-text"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-text-1.10.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-text@1.10.0",
      "type": "library",
      "version": "1.10.0"
    },
    {
      "bom-ref": "pkg:maven/com.ning/compress-lzf@1.0.4?package-id=26352309e9e5bf11",
      "cpe": "cpe:2.3:a:compress-lzf:compress-lzf:1.0.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3833ca68f9f42fd11d4e0a036e9a3faae5d5f1a8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.ning",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "name": "compress-lzf",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:compress-lzf:compress_lzf:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:compress_lzf:compress-lzf:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:compress_lzf:compress_lzf:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:compress-lzf:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:compress_lzf:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:compress:compress-lzf:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:compress:compress_lzf:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ning:compress-lzf:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ning:compress_lzf:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/compress-lzf-1.0.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "compress-lzf"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.ning"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/compress-lzf-1.0.4.jar"
        }
      ],
      "purl": "pkg:maven/com.ning/compress-lzf@1.0.4",
      "type": "library",
      "version": "1.0.4"
    },
    {
      "bom-ref": "pkg:maven/org.skife.config/config-magic@0.9?package-id=28b528716e41b441",
      "cpe": "cpe:2.3:a:config-magic:config-magic:0.9:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c22383d089321fd0c58a15c1c6ef5d24b5b5ee0c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.skife.config",
      "licenses": [
        {
          "license": {
            "name": "Apache License 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "name": "config-magic",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:config-magic:config_magic:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:config_magic:config-magic:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:config_magic:config_magic:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:config-magic:config:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:config:config-magic:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:config:config_magic:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:config_magic:config:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:skife:config-magic:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:skife:config_magic:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:config:config:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:skife:config:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/config-magic-0.9.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "config-magic"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.skife.config"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/config-magic-0.9.jar"
        }
      ],
      "purl": "pkg:maven/org.skife.config/config-magic@0.9",
      "type": "library",
      "version": "0.9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/copy-jdk-configs@4.0-3.el9?arch=noarch&upstream=copy-jdk-configs-4.0-3.el9.src.rpm&distro=rhel-9.4&package-id=455a8bf6ef1f1c68",
      "cpe": "cpe:2.3:a:copy-jdk-configs:copy-jdk-configs:4.0-3.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "copy-jdk-configs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:copy-jdk-configs:copy_jdk_configs:4.0-3.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:copy_jdk_configs:copy-jdk-configs:4.0-3.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:copy_jdk_configs:copy_jdk_configs:4.0-3.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:copy-jdk:copy-jdk-configs:4.0-3.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:copy-jdk:copy_jdk_configs:4.0-3.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:copy_jdk:copy-jdk-configs:4.0-3.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:copy_jdk:copy_jdk_configs:4.0-3.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:copy-jdk-configs:4.0-3.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:copy_jdk_configs:4.0-3.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:copy:copy-jdk-configs:4.0-3.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:copy:copy_jdk_configs:4.0-3.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "19806"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "copy-jdk-configs-4.0-3.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/copy-jdk-configs@4.0-3.el9?arch=noarch&upstream=copy-jdk-configs-4.0-3.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "4.0-3.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/coreutils-single@8.32-35.el9?arch=aarch64&upstream=coreutils-8.32-35.el9.src.rpm&distro=rhel-9.4&package-id=540c649af6ac7fc7",
      "cpe": "cpe:2.3:a:coreutils-single:coreutils-single:8.32-35.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+"
          }
        }
      ],
      "name": "coreutils-single",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:coreutils-single:coreutils_single:8.32-35.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:coreutils_single:coreutils-single:8.32-35.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:coreutils_single:coreutils_single:8.32-35.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:coreutils:coreutils-single:8.32-35.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:coreutils:coreutils_single:8.32-35.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:coreutils-single:8.32-35.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:coreutils_single:8.32-35.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "35.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "1515473"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "coreutils-8.32-35.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/coreutils-single@8.32-35.el9?arch=aarch64&upstream=coreutils-8.32-35.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "8.32-35.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/cracklib@2.9.6-27.el9?arch=aarch64&upstream=cracklib-2.9.6-27.el9.src.rpm&distro=rhel-9.4&package-id=a5c748a3833deb02",
      "cpe": "cpe:2.3:a:cracklib:cracklib:2.9.6-27.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "cracklib",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:cracklib:2.9.6-27.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "27.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "431058"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "cracklib-2.9.6-27.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/cracklib@2.9.6-27.el9?arch=aarch64&upstream=cracklib-2.9.6-27.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.9.6-27.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/cracklib-dicts@2.9.6-27.el9?arch=aarch64&upstream=cracklib-2.9.6-27.el9.src.rpm&distro=rhel-9.4&package-id=276036edf215843a",
      "cpe": "cpe:2.3:a:cracklib-dicts:cracklib-dicts:2.9.6-27.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "cracklib-dicts",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cracklib-dicts:cracklib_dicts:2.9.6-27.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cracklib_dicts:cracklib-dicts:2.9.6-27.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cracklib_dicts:cracklib_dicts:2.9.6-27.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cracklib:cracklib-dicts:2.9.6-27.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cracklib:cracklib_dicts:2.9.6-27.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:cracklib-dicts:2.9.6-27.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:cracklib_dicts:2.9.6-27.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "27.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "9815154"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "cracklib-2.9.6-27.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/cracklib-dicts@2.9.6-27.el9?arch=aarch64&upstream=cracklib-2.9.6-27.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.9.6-27.el9"
    },
    {
      "bom-ref": "pkg:maven/cron-scheduler/cron-scheduler@0.1?package-id=fb74af2599f682d5",
      "cpe": "cpe:2.3:a:cron-scheduler:cron-scheduler:0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d25497d443d0843dbf2973e802c06722f2cb4578"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "cron-scheduler",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cron-scheduler:cron_scheduler:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cron_scheduler:cron-scheduler:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cron_scheduler:cron_scheduler:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cron:cron-scheduler:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cron:cron_scheduler:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/cron-scheduler-0.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/cron-scheduler-0.1.jar"
        }
      ],
      "purl": "pkg:maven/cron-scheduler/cron-scheduler@0.1",
      "type": "library",
      "version": "0.1"
    },
    {
      "bom-ref": "pkg:rpm/rhel/crypto-policies@20240202-1.git283706d.el9?arch=noarch&upstream=crypto-policies-20240202-1.git283706d.el9.src.rpm&distro=rhel-9.4&package-id=93d58366de27ef4a",
      "cpe": "cpe:2.3:a:crypto-policies:crypto-policies:20240202-1.git283706d.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        }
      ],
      "name": "crypto-policies",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto-policies:crypto_policies:20240202-1.git283706d.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto_policies:crypto-policies:20240202-1.git283706d.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto_policies:crypto_policies:20240202-1.git283706d.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto:crypto-policies:20240202-1.git283706d.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto:crypto_policies:20240202-1.git283706d.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:crypto-policies:20240202-1.git283706d.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:crypto_policies:20240202-1.git283706d.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.git283706d.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "86194"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "crypto-policies-20240202-1.git283706d.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/crypto-policies@20240202-1.git283706d.el9?arch=noarch&upstream=crypto-policies-20240202-1.git283706d.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "20240202-1.git283706d.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/crypto-policies-scripts@20240202-1.git283706d.el9?arch=noarch&upstream=crypto-policies-20240202-1.git283706d.el9.src.rpm&distro=rhel-9.4&package-id=5dbec2fe7bee574b",
      "cpe": "cpe:2.3:a:crypto-policies-scripts:crypto-policies-scripts:20240202-1.git283706d.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "LGPL-2.1-or-later"
          }
        }
      ],
      "name": "crypto-policies-scripts",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto-policies-scripts:crypto_policies_scripts:20240202-1.git283706d.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto_policies_scripts:crypto-policies-scripts:20240202-1.git283706d.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto_policies_scripts:crypto_policies_scripts:20240202-1.git283706d.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto-policies:crypto-policies-scripts:20240202-1.git283706d.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto-policies:crypto_policies_scripts:20240202-1.git283706d.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto_policies:crypto-policies-scripts:20240202-1.git283706d.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto_policies:crypto_policies_scripts:20240202-1.git283706d.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto:crypto-policies-scripts:20240202-1.git283706d.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto:crypto_policies_scripts:20240202-1.git283706d.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:crypto-policies-scripts:20240202-1.git283706d.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:crypto_policies_scripts:20240202-1.git283706d.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.git283706d.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "241152"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "crypto-policies-20240202-1.git283706d.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/crypto-policies-scripts@20240202-1.git283706d.el9?arch=noarch&upstream=crypto-policies-20240202-1.git283706d.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "20240202-1.git283706d.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/cups-libs@2.3.3op2-27.el9_4?arch=aarch64&epoch=1&upstream=cups-2.3.3op2-27.el9_4.src.rpm&distro=rhel-9.4&package-id=b7643707eab1dd86",
      "cpe": "cpe:2.3:a:cups-libs:cups-libs:1\\:2.3.3op2-27.el9_4:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2 and zlib"
          }
        }
      ],
      "name": "cups-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cups-libs:cups_libs:1\\:2.3.3op2-27.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cups_libs:cups-libs:1\\:2.3.3op2-27.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cups_libs:cups_libs:1\\:2.3.3op2-27.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:cups-libs:1\\:2.3.3op2-27.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:cups_libs:1\\:2.3.3op2-27.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cups:cups-libs:1\\:2.3.3op2-27.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cups:cups_libs:1\\:2.3.3op2-27.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "1"
        },
        {
          "name": "syft:metadata:release",
          "value": "27.el9_4"
        },
        {
          "name": "syft:metadata:size",
          "value": "747553"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "cups-2.3.3op2-27.el9_4.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/cups-libs@2.3.3op2-27.el9_4?arch=aarch64&epoch=1&upstream=cups-2.3.3op2-27.el9_4.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1:2.3.3op2-27.el9_4"
    },
    {
      "bom-ref": "pkg:maven/org.apache.curator/curator-client@2.7.1?package-id=d4ed8672f46800ed",
      "cpe": "cpe:2.3:a:apache:curator-client:2.7.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a591dfc085db3e9d4d480381cc7e6ae8a26b34af"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.curator",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "curator-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator_client:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/curator-client-2.7.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "curator-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.curator"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/curator-client-2.7.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.curator/curator-client@2.7.1",
      "type": "library",
      "version": "2.7.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.curator/curator-client@5.4.0?package-id=49ae06936a02633d",
      "cpe": "cpe:2.3:a:apache:curator-client:5.4.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a607ca5a06d16d01048fad42dffbd85fdde04a95"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.curator",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "curator-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator_client:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-client-5.4.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "curator-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.curator"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-client-5.4.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.curator/curator-client@5.4.0",
      "type": "library",
      "version": "5.4.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.curator/curator-framework@2.7.1?package-id=9aceb63d5fbf705c",
      "cpe": "cpe:2.3:a:apache:curator-framework:2.7.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8c7b1eeb78e43bb91ea737111ba3dec0512be876"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.curator",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "curator-framework",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator_framework:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/curator-framework-2.7.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "curator-framework"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.curator"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/curator-framework-2.7.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.curator/curator-framework@2.7.1",
      "type": "library",
      "version": "2.7.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.curator/curator-framework@5.4.0?package-id=a9e668a40a34420f",
      "cpe": "cpe:2.3:a:apache:curator-framework:5.4.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "95b32910374186a72133050dc1a4a5e8c68e982f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.curator",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "curator-framework",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator_framework:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/curator-framework-5.4.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "curator-framework"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.curator"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/curator-framework-5.4.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.curator/curator-framework@5.4.0",
      "type": "library",
      "version": "5.4.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.curator/curator-framework@5.4.0?package-id=e19c0226f6c01a5a",
      "cpe": "cpe:2.3:a:apache:curator-framework:5.4.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "95b32910374186a72133050dc1a4a5e8c68e982f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.curator",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "curator-framework",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator_framework:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-framework-5.4.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "curator-framework"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.curator"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-framework-5.4.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.curator/curator-framework@5.4.0",
      "type": "library",
      "version": "5.4.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.curator/curator-recipes@2.7.1?package-id=4a45400f8f608a22",
      "cpe": "cpe:2.3:a:apache:curator-recipes:2.7.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a2c180efc6a38a4f8c9197eb35bb4eb5716cd2fa"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.curator",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "curator-recipes",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator_recipes:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/curator-recipes-2.7.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "curator-recipes"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.curator"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/curator-recipes-2.7.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.curator/curator-recipes@2.7.1",
      "type": "library",
      "version": "2.7.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.curator/curator-recipes@5.4.0?package-id=7459ee0a299ef31d",
      "cpe": "cpe:2.3:a:apache:curator-recipes:5.4.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3f56b12fd498dfdc9a9cbc9232f9a6ba999ae893"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.curator",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "curator-recipes",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator_recipes:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/curator-recipes-5.4.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "curator-recipes"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.curator"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/curator-recipes-5.4.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.curator/curator-recipes@5.4.0",
      "type": "library",
      "version": "5.4.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.curator/curator-recipes@5.4.0?package-id=74e66ae0186b4731",
      "cpe": "cpe:2.3:a:apache:curator-recipes:5.4.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3f56b12fd498dfdc9a9cbc9232f9a6ba999ae893"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.curator",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "curator-recipes",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator_recipes:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-recipes-5.4.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "curator-recipes"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.curator"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-recipes-5.4.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.curator/curator-recipes@5.4.0",
      "type": "library",
      "version": "5.4.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.curator/curator-x-discovery@5.4.0?package-id=0990aa99c24f19ce",
      "cpe": "cpe:2.3:a:apache:curator-x-discovery:5.4.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "62d8fe7187fddd1440c07ccc2782519cdb0842d8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.curator",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "curator-x-discovery",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator_x_discovery:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-x-discovery-5.4.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "curator-x-discovery"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.curator"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-x-discovery-5.4.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.curator/curator-x-discovery@5.4.0",
      "type": "library",
      "version": "5.4.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/curl-minimal@7.76.1-29.el9_4?arch=aarch64&upstream=curl-7.76.1-29.el9_4.src.rpm&distro=rhel-9.4&package-id=4fad1d01ff033ff9",
      "cpe": "cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-29.el9_4:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "curl-minimal",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-29.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-29.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-29.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:curl-minimal:7.76.1-29.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:curl_minimal:7.76.1-29.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:curl:curl-minimal:7.76.1-29.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:curl:curl_minimal:7.76.1-29.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "29.el9_4"
        },
        {
          "name": "syft:metadata:size",
          "value": "249217"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "curl-7.76.1-29.el9_4.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/curl-minimal@7.76.1-29.el9_4?arch=aarch64&upstream=curl-7.76.1-29.el9_4.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "7.76.1-29.el9_4"
    },
    {
      "bom-ref": "pkg:rpm/rhel/cyrus-sasl-lib@2.1.27-21.el9?arch=aarch64&upstream=cyrus-sasl-2.1.27-21.el9.src.rpm&distro=rhel-9.4&package-id=c948dfadcf8a5c6c",
      "cpe": "cpe:2.3:a:cyrus-sasl-lib:cyrus-sasl-lib:2.1.27-21.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD with advertising"
          }
        }
      ],
      "name": "cyrus-sasl-lib",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyrus-sasl-lib:cyrus_sasl_lib:2.1.27-21.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyrus_sasl_lib:cyrus-sasl-lib:2.1.27-21.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyrus_sasl_lib:cyrus_sasl_lib:2.1.27-21.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyrus-sasl:cyrus-sasl-lib:2.1.27-21.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyrus-sasl:cyrus_sasl_lib:2.1.27-21.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyrus_sasl:cyrus-sasl-lib:2.1.27-21.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyrus_sasl:cyrus_sasl_lib:2.1.27-21.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:cyrus-sasl-lib:2.1.27-21.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:cyrus_sasl_lib:2.1.27-21.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyrus:cyrus-sasl-lib:2.1.27-21.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyrus:cyrus_sasl_lib:2.1.27-21.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "21.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "2456584"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "cyrus-sasl-2.1.27-21.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/cyrus-sasl-lib@2.1.27-21.el9?arch=aarch64&upstream=cyrus-sasl-2.1.27-21.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.1.27-21.el9"
    },
    {
      "bom-ref": "pkg:maven/org.apache.datasketches/datasketches-java@3.2.0?package-id=e936c4d89241a589",
      "cpe": "cpe:2.3:a:apache:datasketches-java:3.2.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ceb2774dcd51210437a2f139b64d33213bf7f523"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.datasketches",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "datasketches-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:datasketches_java:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:datasketches:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/datasketches-java-3.2.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "datasketches-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.datasketches"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/datasketches-java-3.2.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.datasketches/datasketches-java@3.2.0",
      "type": "library",
      "version": "3.2.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.datasketches/datasketches-memory@2.0.0?package-id=a81217fc535dfe00",
      "cpe": "cpe:2.3:a:apache:datasketches-memory:2.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "163d9f33eaea6c8600cd7cd84e7427e69e15a115"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.datasketches",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "datasketches-memory",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:datasketches_memory:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:datasketches:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/datasketches-memory-2.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "datasketches-memory"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.datasketches"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/datasketches-memory-2.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.datasketches/datasketches-memory@2.0.0",
      "type": "library",
      "version": "2.0.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/dbus-libs@1.12.20-8.el9?arch=aarch64&epoch=1&upstream=dbus-1.12.20-8.el9.src.rpm&distro=rhel-9.4&package-id=75f240f74db08142",
      "cpe": "cpe:2.3:a:dbus-libs:dbus-libs:1\\:1.12.20-8.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "(GPLv2+ or AFL) and GPLv2+"
          }
        }
      ],
      "name": "dbus-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dbus-libs:dbus_libs:1\\:1.12.20-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dbus_libs:dbus-libs:1\\:1.12.20-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dbus_libs:dbus_libs:1\\:1.12.20-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:dbus-libs:1\\:1.12.20-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:dbus_libs:1\\:1.12.20-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dbus:dbus-libs:1\\:1.12.20-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dbus:dbus_libs:1\\:1.12.20-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "1"
        },
        {
          "name": "syft:metadata:release",
          "value": "8.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "368654"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "dbus-1.12.20-8.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/dbus-libs@1.12.20-8.el9?arch=aarch64&epoch=1&upstream=dbus-1.12.20-8.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1:1.12.20-8.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/dejavu-sans-fonts@2.37-18.el9?arch=noarch&upstream=dejavu-fonts-2.37-18.el9.src.rpm&distro=rhel-9.4&package-id=8ffd65a3ba31d3c5",
      "cpe": "cpe:2.3:a:dejavu-sans-fonts:dejavu-sans-fonts:2.37-18.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Bitstream Vera and Public Domain"
          }
        }
      ],
      "name": "dejavu-sans-fonts",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu-sans-fonts:dejavu_sans_fonts:2.37-18.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu_sans_fonts:dejavu-sans-fonts:2.37-18.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu_sans_fonts:dejavu_sans_fonts:2.37-18.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu-sans:dejavu-sans-fonts:2.37-18.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu-sans:dejavu_sans_fonts:2.37-18.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu_sans:dejavu-sans-fonts:2.37-18.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu_sans:dejavu_sans_fonts:2.37-18.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu:dejavu-sans-fonts:2.37-18.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu:dejavu_sans_fonts:2.37-18.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:dejavu-sans-fonts:2.37-18.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:dejavu_sans_fonts:2.37-18.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "18.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "5930958"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "dejavu-fonts-2.37-18.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/dejavu-sans-fonts@2.37-18.el9?arch=noarch&upstream=dejavu-fonts-2.37-18.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.37-18.el9"
    },
    {
      "bom-ref": "pkg:maven/org.apache.derby.osgi.EmbeddedActivator/derby@10.14.2.0?package-id=664262283429e99f",
      "cpe": "cpe:2.3:a:apache:EmbeddedActivator:10.14.2.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7efad40ef52fbb1f08142f07a83b42d29e47d8ce"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "derby",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:derby:10.14.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:osgi:10.14.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/derby-10.14.2.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/derby-10.14.2.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.derby.osgi.EmbeddedActivator/derby@10.14.2.0",
      "type": "library",
      "version": "10.14.2.0"
    },
    {
      "bom-ref": "pkg:maven/derbyclient/derbyclient@10.14.2.0?package-id=6a4a3ad45cc07055",
      "cpe": "cpe:2.3:a:derbyclient:derbyclient:10.14.2.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "fdd338d43e09bf7cd16f5523a0f717e5ef79a1a8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "derbyclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/derbyclient-10.14.2.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/derbyclient-10.14.2.0.jar"
        }
      ],
      "purl": "pkg:maven/derbyclient/derbyclient@10.14.2.0",
      "type": "library",
      "version": "10.14.2.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.derby.drda.NetworkServerControl/derbynet@10.14.2.0?package-id=375fc7d79f228737",
      "cpe": "cpe:2.3:a:apache:NetworkServerControl:10.14.2.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d03edf879317c7102884c4689e03a4d1a5f84126"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "derbynet",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:derbynet:10.14.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:derby:10.14.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:drda:10.14.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/derbynet-10.14.2.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/derbynet-10.14.2.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.derby.drda.NetworkServerControl/derbynet@10.14.2.0",
      "type": "library",
      "version": "10.14.2.0"
    },
    {
      "bom-ref": "pkg:maven/com.lmax.disruptor/disruptor@3.3.6?package-id=9cd4a8564d3566e5",
      "cpe": "cpe:2.3:a:disruptor:disruptor:3.3.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "09bfca4ee4f691f3737b3f4f006d0c4770f178eb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "disruptor",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lmax:disruptor:3.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/disruptor-3.3.6.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/disruptor-3.3.6.jar"
        }
      ],
      "purl": "pkg:maven/com.lmax.disruptor/disruptor@3.3.6",
      "type": "library",
      "version": "3.3.6"
    },
    {
      "bom-ref": "pkg:rpm/rhel/dnf-data@4.14.0-9.el9?arch=noarch&upstream=dnf-4.14.0-9.el9.src.rpm&distro=rhel-9.4&package-id=c7a819f5889d270d",
      "cpe": "cpe:2.3:a:dnf-data:dnf-data:4.14.0-9.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+"
          }
        }
      ],
      "name": "dnf-data",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dnf-data:dnf_data:4.14.0-9.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dnf_data:dnf-data:4.14.0-9.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dnf_data:dnf_data:4.14.0-9.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:dnf-data:4.14.0-9.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:dnf_data:4.14.0-9.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dnf:dnf-data:4.14.0-9.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dnf:dnf_data:4.14.0-9.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "9.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "39092"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "dnf-4.14.0-9.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/dnf-data@4.14.0-9.el9?arch=noarch&upstream=dnf-4.14.0-9.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "4.14.0-9.el9"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-avro-extensions@26.0.0?package-id=3d7c49552f7c4c4d",
      "cpe": "cpe:2.3:a:apache:druid-avro-extensions:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ff215227382b61f30e831e82a544d83d6a580938"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-avro-extensions",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_avro_extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/druid-avro-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-avro-extensions"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/druid-avro-extensions-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-avro-extensions@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid/druid-aws-common@26.0.0?package-id=245c62ce00907993",
      "cpe": "cpe:2.3:a:apache:druid-aws-common:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "76452c4c10d250fb75d48847ef2e127dbd98c184"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-aws-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_aws_common:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-aws-common-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-aws-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-aws-common-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid/druid-aws-common@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-aws-rds-extensions@26.0.0?package-id=2523cbf2f58c58c6",
      "cpe": "cpe:2.3:a:apache:druid-aws-rds-extensions:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e9009db483ba4ae121bdd87ac694497d77c6bddf"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-aws-rds-extensions",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_aws_rds_extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/druid-aws-rds-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-aws-rds-extensions"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/druid-aws-rds-extensions-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-aws-rds-extensions@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-azure-extensions@26.0.0?package-id=d60236dc03b60fbf",
      "cpe": "cpe:2.3:a:apache:druid-azure-extensions:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4e38dbdf244bc4a9f411e362eaaaf86b5a570111"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-azure-extensions",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_azure_extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/druid-azure-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-azure-extensions"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/druid-azure-extensions-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-azure-extensions@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-basic-security@26.0.0?package-id=e55061c8d49291c6",
      "cpe": "cpe:2.3:a:apache:druid-basic-security:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3459b1830fa5dfed2e00b3f279a05a9414d44fbc"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-basic-security",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_basic_security:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-basic-security/druid-basic-security-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-basic-security"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-basic-security/druid-basic-security-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-basic-security@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-bloom-filter@26.0.0?package-id=36066e5e31a6677d",
      "cpe": "cpe:2.3:a:apache:druid-bloom-filter:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "616019c1afa74858b1b93147d0840d90a25e8662"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-bloom-filter",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_bloom_filter:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-bloom-filter/druid-bloom-filter-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-bloom-filter"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-bloom-filter/druid-bloom-filter-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-bloom-filter@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-catalog@26.0.0?package-id=aaea534dced3392e",
      "cpe": "cpe:2.3:a:apache:druid-catalog:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9e77be9e29e8751c16b5afa852f0da79f8911327"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-catalog",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_catalog:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-catalog/druid-catalog-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-catalog"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-catalog/druid-catalog-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-catalog@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-datasketches@26.0.0?package-id=8623532fb38a7986",
      "cpe": "cpe:2.3:a:apache:druid-datasketches:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e4fb337bc66b45d511827eb1feec776422bae880"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-datasketches",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_datasketches:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-datasketches/druid-datasketches-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-datasketches"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-datasketches/druid-datasketches-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-datasketches@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-ec2-extensions@26.0.0?package-id=f507aa05b70b7ac7",
      "cpe": "cpe:2.3:a:apache:druid-ec2-extensions:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63e01bf8479a1aa1981d9afc93bdf3046930a4ea"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-ec2-extensions",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_ec2_extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ec2-extensions/druid-ec2-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-ec2-extensions"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ec2-extensions/druid-ec2-extensions-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-ec2-extensions@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid/druid-gcp-common@26.0.0?package-id=e65057434940f9e6",
      "cpe": "cpe:2.3:a:apache:druid-gcp-common:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1af56e0b64a25ba65e189b4c84f2090736afd04f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-gcp-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_gcp_common:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-gcp-common-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-gcp-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-gcp-common-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid/druid-gcp-common@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-google-extensions@26.0.0?package-id=938cf477379f71ce",
      "cpe": "cpe:2.3:a:apache:druid-google-extensions:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ed166b70c5b8c9e345a3a93b0da813fb36d9d783"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-google-extensions",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_google_extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-google-extensions/druid-google-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-google-extensions"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-google-extensions/druid-google-extensions-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-google-extensions@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-hdfs-storage@26.0.0?package-id=7827943d8c972361",
      "cpe": "cpe:2.3:a:apache:druid-hdfs-storage:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b0150841488d4547f7132022824c0a9636a92c63"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-hdfs-storage",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_hdfs_storage:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/druid-hdfs-storage-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-hdfs-storage"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/druid-hdfs-storage-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-hdfs-storage@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-histogram@26.0.0?package-id=f6fdf256b70c8f9b",
      "cpe": "cpe:2.3:a:apache:druid-histogram:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "05ae505c07393f8273e2802256f8b25c271491dd"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-histogram",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_histogram:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-histogram/druid-histogram-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-histogram"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-histogram/druid-histogram-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-histogram@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid/druid-indexing-hadoop@26.0.0?package-id=ff99d21920d3cc86",
      "cpe": "cpe:2.3:a:apache:druid-indexing-hadoop:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e2d48cab76439d8eb2ab48ba6da22715d1182cee"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-indexing-hadoop",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_indexing_hadoop:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-indexing-hadoop-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-indexing-hadoop"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-indexing-hadoop-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid/druid-indexing-hadoop@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid/druid-indexing-service@26.0.0?package-id=1ecc7eee435d2ab3",
      "cpe": "cpe:2.3:a:apache:druid-indexing-service:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2c4ba8ca07103b4b584ead7b680c26847555068f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid",
      "name": "druid-indexing-service",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_indexing_service:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-indexing-service-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-indexing-service"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-indexing-service-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid/druid-indexing-service@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-kafka-extraction-namespace@26.0.0?package-id=2e19831d392cb7ec",
      "cpe": "cpe:2.3:a:apache:druid-kafka-extraction-namespace:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0c6be3803d9c344b7d610ef4dd1be56dbbe9a568"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-kafka-extraction-namespace",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_kafka_extraction_namespace:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/druid-kafka-extraction-namespace-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-kafka-extraction-namespace"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/druid-kafka-extraction-namespace-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-kafka-extraction-namespace@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-kafka-indexing-service@26.0.0?package-id=bb7cde10ebb7717d",
      "cpe": "cpe:2.3:a:apache:druid-kafka-indexing-service:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "16dbfcd1825f0c14286ff4f11221b25af417439d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-kafka-indexing-service",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_kafka_indexing_service:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-indexing-service/druid-kafka-indexing-service-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-kafka-indexing-service"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-indexing-service/druid-kafka-indexing-service-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-kafka-indexing-service@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-kerberos@26.0.0?package-id=500ed1cb88445edc",
      "cpe": "cpe:2.3:a:apache:druid-kerberos:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "54595ad3f8d69a5bc48c7fedae99fb63d86a5a4d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-kerberos",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_kerberos:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/druid-kerberos-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-kerberos"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/druid-kerberos-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-kerberos@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-kinesis-indexing-service@26.0.0?package-id=6b024424c0e95563",
      "cpe": "cpe:2.3:a:apache:druid-kinesis-indexing-service:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6833e372b3783dcb488624687d1b2916428c8a50"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-kinesis-indexing-service",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_kinesis_indexing_service:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/druid-kinesis-indexing-service-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-kinesis-indexing-service"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/druid-kinesis-indexing-service-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-kinesis-indexing-service@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-kubernetes-extensions@26.0.0?package-id=025d51a5be7b6be7",
      "cpe": "cpe:2.3:a:apache:druid-kubernetes-extensions:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "59098af26ca2e5bbeb98fa5352fbef245f34bec7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-kubernetes-extensions",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_kubernetes_extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/druid-kubernetes-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-kubernetes-extensions"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/druid-kubernetes-extensions-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-kubernetes-extensions@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-lookups-cached-global@26.0.0?package-id=14c19b350be5cf83",
      "cpe": "cpe:2.3:a:apache:druid-lookups-cached-global:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ef3a55c42e51bc4c16a6e8b5b31d85c82b460ad6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-lookups-cached-global",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_lookups_cached_global:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/druid-lookups-cached-global-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-lookups-cached-global"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/druid-lookups-cached-global-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-lookups-cached-global@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-lookups-cached-global@26.0.0?package-id=383b9c3801eb27bf",
      "cpe": "cpe:2.3:a:apache:druid-lookups-cached-global:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ef3a55c42e51bc4c16a6e8b5b31d85c82b460ad6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-lookups-cached-global",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_lookups_cached_global:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-global/druid-lookups-cached-global-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-lookups-cached-global"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-global/druid-lookups-cached-global-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-lookups-cached-global@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-lookups-cached-single@26.0.0?package-id=d6adcff03cf5ba12",
      "cpe": "cpe:2.3:a:apache:druid-lookups-cached-single:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "713cfbdfe73d8c39a81dbcbf034221fc43d01f85"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-lookups-cached-single",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_lookups_cached_single:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-single/druid-lookups-cached-single-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-lookups-cached-single"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-single/druid-lookups-cached-single-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-lookups-cached-single@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-multi-stage-query@26.0.0?package-id=e245e5eaecc0d452",
      "cpe": "cpe:2.3:a:apache:druid-multi-stage-query:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9feb50d9a4665932336e317a8f28aaf28ebbcb5d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-multi-stage-query",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_multi_stage_query:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-multi-stage-query/druid-multi-stage-query-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-multi-stage-query"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-multi-stage-query/druid-multi-stage-query-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-multi-stage-query@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/tech.stackable/druid-opa-authorizer@0.5.0?package-id=e6e8765549b03dc5",
      "cpe": "cpe:2.3:a:druid-opa-authorizer:druid-opa-authorizer:0.5.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4ad9cc2cf7b341b0e0e9f83e6cbd0304df7511b9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "tech.stackable",
      "name": "druid-opa-authorizer",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:druid-opa-authorizer:druid_opa_authorizer:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:druid_opa_authorizer:druid-opa-authorizer:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:druid_opa_authorizer:druid_opa_authorizer:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:druid-opa:druid-opa-authorizer:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:druid-opa:druid_opa_authorizer:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:druid_opa:druid-opa-authorizer:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:druid_opa:druid_opa_authorizer:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:druid:druid-opa-authorizer:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:druid:druid_opa_authorizer:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/druid-opa-authorizer-0.5.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-opa-authorizer"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "tech.stackable"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/druid-opa-authorizer-0.5.0.jar"
        }
      ],
      "purl": "pkg:maven/tech.stackable/druid-opa-authorizer@0.5.0",
      "type": "library",
      "version": "0.5.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-orc-extensions@26.0.0?package-id=d6ba75f5fb84057e",
      "cpe": "cpe:2.3:a:apache:druid-orc-extensions:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "74ecd15ac0d5950bd014021ed23f4afdb860f256"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-orc-extensions",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_orc_extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/druid-orc-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-orc-extensions"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/druid-orc-extensions-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-orc-extensions@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-pac4j@26.0.0?package-id=0619dc2ee799f15d",
      "cpe": "cpe:2.3:a:apache:druid-pac4j:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bf771dd80158d17f142c0a04a8ddd827dcce7223"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-pac4j",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_pac4j:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/druid-pac4j-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-pac4j"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/druid-pac4j-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-pac4j@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-parquet-extensions@26.0.0?package-id=12dae84c7f892f22",
      "cpe": "cpe:2.3:a:apache:druid-parquet-extensions:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0c980d4f8a88bb4ba73c2d9999f8cb4bac236a2c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-parquet-extensions",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_parquet_extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/druid-parquet-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-parquet-extensions"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/druid-parquet-extensions-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-parquet-extensions@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid/druid-processing@26.0.0?package-id=c40d4e3d2c49fa85",
      "cpe": "cpe:2.3:a:apache:druid-processing:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c9e9c493f89cc526a8ba48f07da66004d1fca160"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-processing",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_processing:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-processing-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-processing"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-processing-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid/druid-processing@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-protobuf-extensions@26.0.0?package-id=81f2fd5e7aaeb3a6",
      "cpe": "cpe:2.3:a:apache:druid-protobuf-extensions:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a579c65b50892dd1e768d9b1e0f467f1e689d452"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-protobuf-extensions",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_protobuf_extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-protobuf-extensions"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-protobuf-extensions@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-s3-extensions@26.0.0?package-id=1c78b90e6d1a905a",
      "cpe": "cpe:2.3:a:apache:druid-s3-extensions:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6f8f9dbbf4d0e408006cf924561e193cc85a2ca5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-s3-extensions",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_s3_extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/druid-s3-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-s3-extensions"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/druid-s3-extensions-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-s3-extensions@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid/druid-server@26.0.0?package-id=f7d99d6952d5e20f",
      "cpe": "cpe:2.3:a:apache:druid-server:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7136cd98861bed4e41dc85b939f002d4ada41c9b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-server",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_server:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-server-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-server"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-server-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid/druid-server@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid/druid-services@26.0.0?package-id=f6c093f1b8e31243",
      "cpe": "cpe:2.3:a:apache:druid-services:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2638f7cc7b91d5e90516355740222911d3fd37ba"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-services",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_services:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-services-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-services"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-services-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid/druid-services@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid/druid-sql@26.0.0?package-id=9f14db51de91f8b4",
      "cpe": "cpe:2.3:a:apache:druid-sql:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "612785b0ccb721e2ad54911025b76fcf5482d7ca"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-sql",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_sql:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-sql-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-sql"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-sql-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid/druid-sql@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-stats@26.0.0?package-id=50a6d5e012b41df5",
      "cpe": "cpe:2.3:a:apache:druid-stats:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1350589b77ebc3ae4c32298966242c631f5db784"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-stats",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_stats:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-stats/druid-stats-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-stats"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-stats/druid-stats-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-stats@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/epel-release@9-7.el9?arch=noarch&upstream=epel-release-9-7.el9.src.rpm&distro=rhel-9.4&package-id=75b6b95b0c191fcb",
      "cpe": "cpe:2.3:a:fedoraproject:epel-release:9-7.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2"
          }
        }
      ],
      "name": "epel-release",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fedoraproject:epel_release:9-7.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:epel-release:epel-release:9-7.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:epel-release:epel_release:9-7.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:epel_release:epel-release:9-7.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:epel_release:epel_release:9-7.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:epel:epel-release:9-7.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:epel:epel_release:9-7.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "26865"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "epel-release-9-7.el9.src.rpm"
        }
      ],
      "publisher": "Fedora Project",
      "purl": "pkg:rpm/rhel/epel-release@9-7.el9?arch=noarch&upstream=epel-release-9-7.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "9-7.el9"
    },
    {
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0?package-id=1b193c025d2b3ead",
      "cpe": "cpe:2.3:a:error-prone-annotations:error-prone-annotations:2.11.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c5a0ace696d3f8b1c1d8cc036d8c03cc0cbe6b69"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.errorprone",
      "licenses": [
        {
          "license": {
            "name": "Apache 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "error_prone_annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone-annotations:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone-annotations:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/error_prone_annotations-2.11.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "error_prone_annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.errorprone"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/error_prone_annotations-2.11.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0",
      "type": "library",
      "version": "2.11.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0?package-id=4f9b96941fea27d0",
      "cpe": "cpe:2.3:a:error-prone-annotations:error-prone-annotations:2.11.0:*:*:*:*:*:*:*",
      "group": "com.google.errorprone",
      "licenses": [
        {
          "license": {
            "name": "Apache 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "error_prone_annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone-annotations:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "error_prone_annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.errorprone"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:com.google.errorprone:error_prone_annotations"
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0",
      "type": "library",
      "version": "2.11.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0?package-id=6a5d274146a145f8",
      "cpe": "cpe:2.3:a:error-prone-annotations:error-prone-annotations:2.11.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c5a0ace696d3f8b1c1d8cc036d8c03cc0cbe6b69"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.errorprone",
      "licenses": [
        {
          "license": {
            "name": "Apache 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "error_prone_annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone-annotations:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone-annotations:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/error_prone_annotations-2.11.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "error_prone_annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.errorprone"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/error_prone_annotations-2.11.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0",
      "type": "library",
      "version": "2.11.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.5.1?package-id=9930e523e0a5be90",
      "cpe": "cpe:2.3:a:error-prone-annotations:error-prone-annotations:2.5.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "562d366678b89ce5d6b6b82c1a073880341e3fba"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.errorprone",
      "licenses": [
        {
          "license": {
            "name": "Apache 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "error_prone_annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone-annotations:error_prone_annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:error-prone-annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:error_prone_annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:error-prone-annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:error_prone_annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone-annotations:annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:error-prone-annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:error_prone_annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:error-prone-annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:error_prone_annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:error-prone-annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:error_prone_annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:error-prone-annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:error_prone_annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:error-prone-annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:error_prone_annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/error_prone_annotations-2.5.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "error_prone_annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.errorprone"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/error_prone_annotations-2.5.1.jar"
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.5.1",
      "type": "library",
      "version": "2.5.1"
    },
    {
      "bom-ref": "pkg:maven/com.esri.geometry/esri-geometry-api@2.2.0?package-id=7e77d1264f364556",
      "cpe": "cpe:2.3:a:esri-geometry-api:esri-geometry-api:2.2.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2663f80d28c2470630a996464d6130b2809c9dbe"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.esri.geometry",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "esri-geometry-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esri-geometry-api:esri_geometry_api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esri_geometry_api:esri-geometry-api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esri_geometry_api:esri_geometry_api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esri-geometry:esri-geometry-api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esri-geometry:esri_geometry_api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esri_geometry:esri-geometry-api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esri_geometry:esri_geometry_api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:geometry:esri-geometry-api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:geometry:esri_geometry_api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esri:esri-geometry-api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esri:esri_geometry_api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/esri-geometry-api-2.2.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "esri-geometry-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.esri.geometry"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/esri-geometry-api-2.2.0.jar"
        }
      ],
      "purl": "pkg:maven/com.esri.geometry/esri-geometry-api@2.2.0",
      "type": "library",
      "version": "2.2.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/expat@2.5.0-2.el9_4?arch=aarch64&upstream=expat-2.5.0-2.el9_4.src.rpm&distro=rhel-9.4&package-id=c881c544a891de24",
      "cpe": "cpe:2.3:a:redhat:expat:2.5.0-2.el9_4:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "expat",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:expat:expat:2.5.0-2.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "2.el9_4"
        },
        {
          "name": "syft:metadata:size",
          "value": "341802"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "expat-2.5.0-2.el9_4.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/expat@2.5.0-2.el9_4?arch=aarch64&upstream=expat-2.5.0-2.el9_4.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.5.0-2.el9_4"
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/failureaccess@1.0.1?package-id=cebc6a4fe5f12cba",
      "cpe": "cpe:2.3:a:failureaccess:failureaccess:1.0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.guava",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "failureaccess",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:failureaccess:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:failureaccess:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/failureaccess-1.0.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "failureaccess"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/failureaccess-1.0.1.jar"
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.1",
      "type": "library",
      "version": "1.0.1"
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/failureaccess@1.0.1?package-id=9081a2109ca0b4bc",
      "cpe": "cpe:2.3:a:failureaccess:failureaccess:1.0.1:*:*:*:*:*:*:*",
      "group": "com.google.guava",
      "name": "failureaccess",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:failureaccess:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:failureaccess:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-client-5.4.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "failureaccess"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-client-5.4.0.jar:com.google.guava:failureaccess"
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.1",
      "type": "library",
      "version": "1.0.1"
    },
    {
      "bom-ref": "pkg:maven/fastutil/fastutil@8.5.4?package-id=6541068dc5b3fce1",
      "cpe": "cpe:2.3:a:fastutil:fastutil:8.5.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "799748e42a644db85394db066af658809f89c523"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "fastutil",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/fastutil-8.5.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/fastutil-8.5.4.jar"
        }
      ],
      "purl": "pkg:maven/fastutil/fastutil@8.5.4",
      "type": "library",
      "version": "8.5.4"
    },
    {
      "bom-ref": "pkg:maven/fastutil-core/fastutil-core@8.5.4?package-id=fb0d60e55de486d5",
      "cpe": "cpe:2.3:a:fastutil-core:fastutil-core:8.5.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c693557ee87e311340eb0f8a811b8bca027af421"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "fastutil-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastutil-core:fastutil_core:8.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastutil_core:fastutil-core:8.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastutil_core:fastutil_core:8.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastutil:fastutil-core:8.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastutil:fastutil_core:8.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/fastutil-core-8.5.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/fastutil-core-8.5.4.jar"
        }
      ],
      "purl": "pkg:maven/fastutil-core/fastutil-core@8.5.4",
      "type": "library",
      "version": "8.5.4"
    },
    {
      "bom-ref": "pkg:maven/fastutil-extra/fastutil-extra@8.5.4?package-id=ee3bc04e89de4152",
      "cpe": "cpe:2.3:a:fastutil-extra:fastutil-extra:8.5.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "912b86862ad070dd3d21f51e05e361eba1f515da"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "fastutil-extra",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastutil-extra:fastutil_extra:8.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastutil_extra:fastutil-extra:8.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastutil_extra:fastutil_extra:8.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastutil:fastutil-extra:8.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastutil:fastutil_extra:8.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/fastutil-extra-8.5.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/fastutil-extra-8.5.4.jar"
        }
      ],
      "purl": "pkg:maven/fastutil-extra/fastutil-extra@8.5.4",
      "type": "library",
      "version": "8.5.4"
    },
    {
      "bom-ref": "pkg:rpm/rhel/file-libs@5.39-16.el9?arch=aarch64&upstream=file-5.39-16.el9.src.rpm&distro=rhel-9.4&package-id=cad8035b53244f70",
      "cpe": "cpe:2.3:a:file-libs:file-libs:5.39-16.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "file-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file-libs:file_libs:5.39-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file_libs:file-libs:5.39-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file_libs:file_libs:5.39-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:file-libs:5.39-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:file_libs:5.39-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file:file-libs:5.39-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file:file_libs:5.39-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "16.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "8102796"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "file-5.39-16.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/file-libs@5.39-16.el9?arch=aarch64&upstream=file-5.39-16.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "5.39-16.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/filesystem@3.16-2.el9?arch=aarch64&upstream=filesystem-3.16-2.el9.src.rpm&distro=rhel-9.4&package-id=507e0d52b459cf4e",
      "cpe": "cpe:2.3:a:filesystem:filesystem:3.16-2.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "filesystem",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:filesystem:3.16-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "2.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "106"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "filesystem-3.16-2.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/filesystem@3.16-2.el9?arch=aarch64&upstream=filesystem-3.16-2.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.16-2.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/findutils@4.8.0-6.el9?arch=aarch64&epoch=1&upstream=findutils-4.8.0-6.el9.src.rpm&distro=rhel-9.4&package-id=4d36feb6068a3e3d",
      "cpe": "cpe:2.3:a:findutils:findutils:1\\:4.8.0-6.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+"
          }
        }
      ],
      "name": "findutils",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:findutils:1\\:4.8.0-6.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "1"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "1805102"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "findutils-4.8.0-6.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/findutils@4.8.0-6.el9?arch=aarch64&epoch=1&upstream=findutils-4.8.0-6.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1:4.8.0-6.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/fonts-filesystem@2.0.5-7.el9.1?arch=noarch&epoch=1&upstream=fonts-rpm-macros-2.0.5-7.el9.1.src.rpm&distro=rhel-9.4&package-id=d72ee663c8d4ff8e",
      "cpe": "cpe:2.3:a:fonts-filesystem:fonts-filesystem:1\\:2.0.5-7.el9.1:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "fonts-filesystem",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fonts-filesystem:fonts_filesystem:1\\:2.0.5-7.el9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fonts_filesystem:fonts-filesystem:1\\:2.0.5-7.el9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fonts_filesystem:fonts_filesystem:1\\:2.0.5-7.el9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:fonts-filesystem:1\\:2.0.5-7.el9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:fonts_filesystem:1\\:2.0.5-7.el9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fonts:fonts-filesystem:1\\:2.0.5-7.el9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fonts:fonts_filesystem:1\\:2.0.5-7.el9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "1"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el9.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "0"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "fonts-rpm-macros-2.0.5-7.el9.1.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/fonts-filesystem@2.0.5-7.el9.1?arch=noarch&epoch=1&upstream=fonts-rpm-macros-2.0.5-7.el9.1.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1:2.0.5-7.el9.1"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gawk@5.1.0-6.el9?arch=aarch64&upstream=gawk-5.1.0-6.el9.src.rpm&distro=rhel-9.4&package-id=21e85db440632d14",
      "cpe": "cpe:2.3:a:redhat:gawk:5.1.0-6.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+ and GPLv2+ and LGPLv2+ and BSD"
          }
        }
      ],
      "name": "gawk",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gawk:gawk:5.1.0-6.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "2416214"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gawk-5.1.0-6.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/gawk@5.1.0-6.el9?arch=aarch64&upstream=gawk-5.1.0-6.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "5.1.0-6.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gdbm-libs@1.19-4.el9?arch=aarch64&epoch=1&upstream=gdbm-1.19-4.el9.src.rpm&distro=rhel-9.4&package-id=1a5c3a8caebda072",
      "cpe": "cpe:2.3:a:gdbm-libs:gdbm-libs:1\\:1.19-4.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+"
          }
        }
      ],
      "name": "gdbm-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gdbm-libs:gdbm_libs:1\\:1.19-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gdbm_libs:gdbm-libs:1\\:1.19-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gdbm_libs:gdbm_libs:1\\:1.19-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:gdbm-libs:1\\:1.19-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:gdbm_libs:1\\:1.19-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gdbm:gdbm-libs:1\\:1.19-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gdbm:gdbm_libs:1\\:1.19-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "1"
        },
        {
          "name": "syft:metadata:release",
          "value": "4.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "173370"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gdbm-1.19-4.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/gdbm-libs@1.19-4.el9?arch=aarch64&epoch=1&upstream=gdbm-1.19-4.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1:1.19-4.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/glib2@2.68.4-14.el9?arch=aarch64&upstream=glib2-2.68.4-14.el9.src.rpm&distro=rhel-9.4&package-id=d20d142dab7d7fbc",
      "cpe": "cpe:2.3:a:redhat:glib2:2.68.4-14.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "glib2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glib2:glib2:2.68.4-14.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "14.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "13871039"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "glib2-2.68.4-14.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/glib2@2.68.4-14.el9?arch=aarch64&upstream=glib2-2.68.4-14.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.68.4-14.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/glibc@2.34-100.el9_4.2?arch=aarch64&upstream=glibc-2.34-100.el9_4.2.src.rpm&distro=rhel-9.4&package-id=38b64dfc9db44511",
      "cpe": "cpe:2.3:a:redhat:glibc:2.34-100.el9_4.2:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL"
          }
        }
      ],
      "name": "glibc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc:glibc:2.34-100.el9_4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "100.el9_4.2"
        },
        {
          "name": "syft:metadata:size",
          "value": "6471716"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "glibc-2.34-100.el9_4.2.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/glibc@2.34-100.el9_4.2?arch=aarch64&upstream=glibc-2.34-100.el9_4.2.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.34-100.el9_4.2"
    },
    {
      "bom-ref": "pkg:rpm/rhel/glibc-common@2.34-100.el9_4.2?arch=aarch64&upstream=glibc-2.34-100.el9_4.2.src.rpm&distro=rhel-9.4&package-id=39810ce674b2ef59",
      "cpe": "cpe:2.3:a:glibc-common:glibc-common:2.34-100.el9_4.2:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL"
          }
        }
      ],
      "name": "glibc-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc-common:glibc_common:2.34-100.el9_4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc_common:glibc-common:2.34-100.el9_4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc_common:glibc_common:2.34-100.el9_4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:glibc-common:2.34-100.el9_4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:glibc_common:2.34-100.el9_4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc:glibc-common:2.34-100.el9_4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc:glibc_common:2.34-100.el9_4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "100.el9_4.2"
        },
        {
          "name": "syft:metadata:size",
          "value": "1355781"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "glibc-2.34-100.el9_4.2.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/glibc-common@2.34-100.el9_4.2?arch=aarch64&upstream=glibc-2.34-100.el9_4.2.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.34-100.el9_4.2"
    },
    {
      "bom-ref": "pkg:rpm/rhel/glibc-minimal-langpack@2.34-100.el9_4.2?arch=aarch64&upstream=glibc-2.34-100.el9_4.2.src.rpm&distro=rhel-9.4&package-id=d47b67020a44dba2",
      "cpe": "cpe:2.3:a:glibc-minimal-langpack:glibc-minimal-langpack:2.34-100.el9_4.2:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL"
          }
        }
      ],
      "name": "glibc-minimal-langpack",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc-minimal-langpack:glibc_minimal_langpack:2.34-100.el9_4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc_minimal_langpack:glibc-minimal-langpack:2.34-100.el9_4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc_minimal_langpack:glibc_minimal_langpack:2.34-100.el9_4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc-minimal:glibc-minimal-langpack:2.34-100.el9_4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc-minimal:glibc_minimal_langpack:2.34-100.el9_4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc_minimal:glibc-minimal-langpack:2.34-100.el9_4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc_minimal:glibc_minimal_langpack:2.34-100.el9_4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:glibc-minimal-langpack:2.34-100.el9_4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:glibc_minimal_langpack:2.34-100.el9_4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc:glibc-minimal-langpack:2.34-100.el9_4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc:glibc_minimal_langpack:2.34-100.el9_4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "100.el9_4.2"
        },
        {
          "name": "syft:metadata:size",
          "value": "0"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "glibc-2.34-100.el9_4.2.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/glibc-minimal-langpack@2.34-100.el9_4.2?arch=aarch64&upstream=glibc-2.34-100.el9_4.2.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.34-100.el9_4.2"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gmp@6.2.0-13.el9?arch=aarch64&epoch=1&upstream=gmp-6.2.0-13.el9.src.rpm&distro=rhel-9.4&package-id=5846cc2cccab5f4d",
      "cpe": "cpe:2.3:a:redhat:gmp:1\\:6.2.0-13.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv3+ or GPLv2+"
          }
        }
      ],
      "name": "gmp",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gmp:gmp:1\\:6.2.0-13.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "1"
        },
        {
          "name": "syft:metadata:release",
          "value": "13.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "671972"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gmp-6.2.0-13.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/gmp@6.2.0-13.el9?arch=aarch64&epoch=1&upstream=gmp-6.2.0-13.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1:6.2.0-13.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gnupg2@2.3.3-4.el9?arch=aarch64&upstream=gnupg2-2.3.3-4.el9.src.rpm&distro=rhel-9.4&package-id=7a6875040db71c2a",
      "cpe": "cpe:2.3:a:gnupg2:gnupg2:2.3.3-4.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+"
          }
        }
      ],
      "name": "gnupg2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:gnupg2:2.3.3-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "4.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "9762269"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gnupg2-2.3.3-4.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/gnupg2@2.3.3-4.el9?arch=aarch64&upstream=gnupg2-2.3.3-4.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.3.3-4.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gnutls@3.8.3-4.el9_4?arch=aarch64&upstream=gnutls-3.8.3-4.el9_4.src.rpm&distro=rhel-9.4&package-id=b15c45829ee57734",
      "cpe": "cpe:2.3:a:gnutls:gnutls:3.8.3-4.el9_4:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+ and LGPLv2+"
          }
        }
      ],
      "name": "gnutls",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:gnutls:3.8.3-4.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "4.el9_4"
        },
        {
          "name": "syft:metadata:size",
          "value": "3386787"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gnutls-3.8.3-4.el9_4.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/gnutls@3.8.3-4.el9_4?arch=aarch64&upstream=gnutls-3.8.3-4.el9_4.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.8.3-4.el9_4"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gobject-introspection@1.68.0-11.el9?arch=aarch64&upstream=gobject-introspection-1.68.0-11.el9.src.rpm&distro=rhel-9.4&package-id=e1b698d6882426c0",
      "cpe": "cpe:2.3:a:gobject-introspection:gobject-introspection:1.68.0-11.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+ and LGPLv2+ and MIT"
          }
        }
      ],
      "name": "gobject-introspection",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gobject-introspection:gobject_introspection:1.68.0-11.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gobject_introspection:gobject-introspection:1.68.0-11.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gobject_introspection:gobject_introspection:1.68.0-11.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gobject:gobject-introspection:1.68.0-11.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gobject:gobject_introspection:1.68.0-11.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:gobject-introspection:1.68.0-11.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:gobject_introspection:1.68.0-11.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "11.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "993785"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gobject-introspection-1.68.0-11.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/gobject-introspection@1.68.0-11.el9?arch=aarch64&upstream=gobject-introspection-1.68.0-11.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.68.0-11.el9"
    },
    {
      "bom-ref": "pkg:maven/com.google.api-client/google-api-client@1.26.0?package-id=46f10f06b2604634",
      "cpe": "cpe:2.3:a:google-api-client:google-api-client:1.26.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "87019438eb0db88025cfb6cd61cc992b7dfd0306"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.api-client",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "google-api-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-client:google_api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_client:google-api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_client:google_api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api-client:google-api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api-client:google_api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api_client:google-api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api_client:google_api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-client:api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-client:api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api:google-api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api:google_api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api:google-api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api:google_api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_client:api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_client:api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:googleapis:google-api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:googleapis:google_api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:google-api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:google_api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google-api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google_api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api-client:api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api-client:api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api:google-api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api:google_api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api_client:api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api_client:api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api:api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api:api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api:api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api:api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:googleapis:api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:googleapis:api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api:api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api:api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/google-api-client-1.26.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "google-api-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.api-client"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/google-api-client-1.26.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.api-client/google-api-client@1.26.0",
      "type": "library",
      "version": "1.26.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.apis/google-api-services-storage@v1-rev20190523-1.26.0?package-id=5b73cb17f3310f8e",
      "cpe": "cpe:2.3:a:google-api-services-storage:google-api-services-storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*",
      "group": "com.google.apis",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "google-api-services-storage",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-services-storage:google_api_services_storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services_storage:google-api-services-storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services_storage:google_api_services_storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-services:google-api-services-storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-services:google_api_services_storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services:google-api-services-storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services:google_api_services_storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api:google-api-services-storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api:google_api_services_storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api:google-api-services-storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api:google_api_services_storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sonatype:google-api-services-storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sonatype:google_api_services_storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google-api-services-storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google_api_services_storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apis:google-api-services-storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apis:google_api_services_storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oss:google-api-services-storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oss:google_api_services_storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-google-extensions/google-api-services-storage-v1-rev20190523-1.26.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "google-api-services-storage"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.apis"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-google-extensions/google-api-services-storage-v1-rev20190523-1.26.0.jar:com.google.apis:google-api-services-storage"
        }
      ],
      "purl": "pkg:maven/com.google.apis/google-api-services-storage@v1-rev20190523-1.26.0",
      "type": "library",
      "version": "v1-rev20190523-1.26.0"
    },
    {
      "bom-ref": "pkg:maven/google-api-services-storage-v1-rev20190523/google-api-services-storage-v1-rev20190523@1.26.0?package-id=1507f20459508a0d",
      "cpe": "cpe:2.3:a:google-api-services-storage-v1-rev20190523:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "fb8da304ec52a8a4b0d9bf3d39edbbeb0671fb79"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "google-api-services-storage-v1-rev20190523",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-services-storage-v1-rev20190523:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services_storage_v1_rev20190523:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services_storage_v1_rev20190523:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-services-storage-v1:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-services-storage-v1:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services_storage_v1:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services_storage_v1:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-services-storage:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-services-storage:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services_storage:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services_storage:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-services:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-services:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-google-extensions/google-api-services-storage-v1-rev20190523-1.26.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-google-extensions/google-api-services-storage-v1-rev20190523-1.26.0.jar"
        }
      ],
      "purl": "pkg:maven/google-api-services-storage-v1-rev20190523/google-api-services-storage-v1-rev20190523@1.26.0",
      "type": "library",
      "version": "1.26.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client@1.26.0?package-id=f4cee4b4427b2e62",
      "cpe": "cpe:2.3:a:google-http-client:google-http-client:1.26.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "56b37604d200c1c58af9c5836fab44be685e1f6a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.http-client",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "google-http-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http-client:google_http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http_client:google-http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http_client:google_http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http-client:http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http-client:http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http:google-http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http:google_http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http:google-http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http:google_http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http_client:http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http_client:http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-client:google-http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-client:google_http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_client:google-http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_client:google_http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google-http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google_http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http:http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http:http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http:http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http:http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-client:http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-client:http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:google-http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:google_http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_client:http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_client:http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/google-http-client-1.26.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "google-http-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.http-client"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/google-http-client-1.26.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client@1.26.0",
      "type": "library",
      "version": "1.26.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-jackson2@1.26.0?package-id=3283e12caf39498d",
      "cpe": "cpe:2.3:a:google-http-client-jackson2:google-http-client-jackson2:1.26.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "05566e38726feeb9a29d0149818424d1b1a8b970"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.http-client",
      "name": "google-http-client-jackson2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http-client-jackson2:google_http_client_jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http_client_jackson2:google-http-client-jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http_client_jackson2:google_http_client_jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http-client:google-http-client-jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http-client:google_http_client_jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http_client:google-http-client-jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http_client:google_http_client_jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http:google-http-client-jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http:google_http_client_jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http:google-http-client-jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http:google_http_client_jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-client:google-http-client-jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-client:google_http_client_jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_client:google-http-client-jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_client:google_http_client_jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google-http-client-jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google_http_client_jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:google-http-client-jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:google_http_client_jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/google-http-client-jackson2-1.26.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "google-http-client-jackson2"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.http-client"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/google-http-client-jackson2-1.26.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-jackson2@1.26.0",
      "type": "library",
      "version": "1.26.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.oauth-client/google-oauth-client@1.26.0?package-id=de213907319482bf",
      "cpe": "cpe:2.3:a:google-oauth-client:google-oauth-client:1.26.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a4efb7949a9176e2313a98ab5419173939c9ae1b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.oauth-client",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "google-oauth-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-oauth-client:google_oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_oauth_client:google-oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_oauth_client:google_oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-oauth-client:oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-oauth-client:oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-oauth:google-oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-oauth:google_oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_oauth:google-oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_oauth:google_oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_oauth_client:oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_oauth_client:oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth-client:google-oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth-client:google_oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth_client:google-oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth_client:google_oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google-oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google_oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-oauth:oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-oauth:oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_oauth:oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_oauth:oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth-client:oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth-client:oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth:google-oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth:google_oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth_client:oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth_client:oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth:oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth:oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/google-oauth-client-1.26.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "google-oauth-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.oauth-client"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/google-oauth-client-1.26.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.oauth-client/google-oauth-client@1.26.0",
      "type": "library",
      "version": "1.26.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gpg-pubkey@5a6340b3-6229229e?distro=rhel-9.4&package-id=6a4614b48b443e33",
      "cpe": "cpe:2.3:a:gpg-pubkey:gpg-pubkey:5a6340b3-6229229e:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "pubkey"
          }
        }
      ],
      "name": "gpg-pubkey",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpg-pubkey:gpg_pubkey:5a6340b3-6229229e:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpg_pubkey:gpg-pubkey:5a6340b3-6229229e:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpg_pubkey:gpg_pubkey:5a6340b3-6229229e:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpg:gpg-pubkey:5a6340b3-6229229e:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpg:gpg_pubkey:5a6340b3-6229229e:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "6229229e"
        },
        {
          "name": "syft:metadata:size",
          "value": "0"
        }
      ],
      "purl": "pkg:rpm/rhel/gpg-pubkey@5a6340b3-6229229e?distro=rhel-9.4",
      "type": "library",
      "version": "5a6340b3-6229229e"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gpg-pubkey@fd431d51-4ae0493b?distro=rhel-9.4&package-id=0b9edfc7dd36b25d",
      "cpe": "cpe:2.3:a:gpg-pubkey:gpg-pubkey:fd431d51-4ae0493b:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "pubkey"
          }
        }
      ],
      "name": "gpg-pubkey",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpg-pubkey:gpg_pubkey:fd431d51-4ae0493b:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpg_pubkey:gpg-pubkey:fd431d51-4ae0493b:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpg_pubkey:gpg_pubkey:fd431d51-4ae0493b:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpg:gpg-pubkey:fd431d51-4ae0493b:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpg:gpg_pubkey:fd431d51-4ae0493b:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "4ae0493b"
        },
        {
          "name": "syft:metadata:size",
          "value": "0"
        }
      ],
      "purl": "pkg:rpm/rhel/gpg-pubkey@fd431d51-4ae0493b?distro=rhel-9.4",
      "type": "library",
      "version": "fd431d51-4ae0493b"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gpgme@1.15.1-6.el9?arch=aarch64&upstream=gpgme-1.15.1-6.el9.src.rpm&distro=rhel-9.4&package-id=9e2d8ea7ce313eb5",
      "cpe": "cpe:2.3:a:redhat:gpgme:1.15.1-6.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+ and GPLv3+"
          }
        }
      ],
      "name": "gpgme",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpgme:gpgme:1.15.1-6.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "616153"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gpgme-1.15.1-6.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/gpgme@1.15.1-6.el9?arch=aarch64&upstream=gpgme-1.15.1-6.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.15.1-6.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/grep@3.6-5.el9?arch=aarch64&upstream=grep-3.6-5.el9.src.rpm&distro=rhel-9.4&package-id=d8aed437fd654ee1",
      "cpe": "cpe:2.3:a:redhat:grep:3.6-5.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+"
          }
        }
      ],
      "name": "grep",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:grep:grep:3.6-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "5.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "837024"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "grep-3.6-5.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/grep@3.6-5.el9?arch=aarch64&upstream=grep-3.6-5.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.6-5.el9"
    },
    {
      "bom-ref": "pkg:maven/com.google.gson/gson@2.2.4?package-id=9940f3f4fca12513",
      "cpe": "cpe:2.3:a:google:gson:2.2.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a60a5e993c98c864010053cb901b7eab25306568"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "gson",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gson:gson:2.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/gson-2.2.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/gson-2.2.4.jar"
        }
      ],
      "purl": "pkg:maven/com.google.gson/gson@2.2.4",
      "type": "library",
      "version": "2.2.4"
    },
    {
      "bom-ref": "pkg:maven/com.google.gson/gson@2.2.4?package-id=0d356a5b502c4df5",
      "cpe": "cpe:2.3:a:google:gson:2.2.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a60a5e993c98c864010053cb901b7eab25306568"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "gson",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gson:gson:2.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/gson-2.2.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/gson-2.2.4.jar"
        }
      ],
      "purl": "pkg:maven/com.google.gson/gson@2.2.4",
      "type": "library",
      "version": "2.2.4"
    },
    {
      "bom-ref": "pkg:maven/com.google.gson/gson@2.3.1?package-id=a13fd979fb565f9b",
      "cpe": "cpe:2.3:a:google:gson:2.3.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ecb6e1f8e4b0e84c4b886c2f14a1500caf309757"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "gson",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gson:gson:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/gson-2.3.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/gson-2.3.1.jar"
        }
      ],
      "purl": "pkg:maven/com.google.gson/gson@2.3.1",
      "type": "library",
      "version": "2.3.1"
    },
    {
      "bom-ref": "pkg:maven/com.google.code.gson/gson@2.8.6?package-id=eedd8f43a02bca3a",
      "cpe": "cpe:2.3:a:google:gson:2.8.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9180733b7df8542621dc12e21e87557e8c99b8cb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.code.gson",
      "name": "gson",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:code:gson:2.8.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gson:gson:2.8.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/gson-2.8.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "gson"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.code.gson"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/gson-2.8.6.jar"
        }
      ],
      "purl": "pkg:maven/com.google.code.gson/gson@2.8.6",
      "type": "library",
      "version": "2.8.6"
    },
    {
      "bom-ref": "pkg:maven/com.google.code.gson/gson@2.8.9?package-id=ccd3c2e23de353ea",
      "cpe": "cpe:2.3:a:google:gson:2.8.9:*:*:*:*:*:*:*",
      "group": "com.google.code.gson",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "gson",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:code:gson:2.8.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gson:gson:2.8.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "gson"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.code.gson"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:com.google.code.gson:gson"
        }
      ],
      "purl": "pkg:maven/com.google.code.gson/gson@2.8.9",
      "type": "library",
      "version": "2.8.9"
    },
    {
      "bom-ref": "pkg:maven/io.gsonfire/gson-fire@1.8.5?package-id=b66f3d0e2fa6a2e5",
      "cpe": "cpe:2.3:a:gson-fire:gson-fire:1.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "907df2bf39d70510951b7bafbf661f286eed90a5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.gsonfire",
      "licenses": [
        {
          "license": {
            "name": "\"Apache-2.0\";link=\"https://www.apache.org/licenses/LICENSE-2.0.txt\""
          }
        }
      ],
      "name": "gson-fire",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gson-fire:gson_fire:1.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gson_fire:gson-fire:1.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gson_fire:gson_fire:1.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gsonfire:gson-fire:1.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gsonfire:gson_fire:1.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gson:gson-fire:1.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gson:gson_fire:1.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/gson-fire-1.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "gson-fire"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.gsonfire"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/gson-fire-1.8.5.jar"
        }
      ],
      "purl": "pkg:maven/io.gsonfire/gson-fire@1.8.5",
      "type": "library",
      "version": "1.8.5"
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/guava@11.0.2?package-id=aca4f18096ff22f1",
      "cpe": "cpe:2.3:a:google:guava:11.0.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "35a3c69e19d72743cac83778aecbee68680f63eb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.guava",
      "name": "guava",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:guava:11.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/guava-11.0.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "guava"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/guava-11.0.2.jar"
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@11.0.2",
      "type": "library",
      "version": "11.0.2"
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/guava@16.0.1?package-id=8f88c57791364b32",
      "cpe": "cpe:2.3:a:google:guava:16.0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5fa98cd1a63c99a44dd8d3b77e4762b066a5d0c5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.guava",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guava",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:guava:16.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/guava-16.0.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "guava"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/guava-16.0.1.jar"
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@16.0.1",
      "type": "library",
      "version": "16.0.1"
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/guava@16.0.1?package-id=bb51bff91568a6b2",
      "cpe": "cpe:2.3:a:google:guava:16.0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5fa98cd1a63c99a44dd8d3b77e4762b066a5d0c5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.guava",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guava",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:guava:16.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/guava-16.0.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "guava"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/guava-16.0.1.jar"
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@16.0.1",
      "type": "library",
      "version": "16.0.1"
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/guava@16.0.1?package-id=650095757db9f175",
      "cpe": "cpe:2.3:a:google:guava:16.0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5fa98cd1a63c99a44dd8d3b77e4762b066a5d0c5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.guava",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guava",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:guava:16.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/guava-16.0.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "guava"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/guava-16.0.1.jar"
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@16.0.1",
      "type": "library",
      "version": "16.0.1"
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/guava@16.0.1?package-id=cc94102ccfe9b06b",
      "cpe": "cpe:2.3:a:google:guava:16.0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5fa98cd1a63c99a44dd8d3b77e4762b066a5d0c5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.guava",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guava",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:guava:16.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/guava-16.0.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "guava"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/guava-16.0.1.jar"
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@16.0.1",
      "type": "library",
      "version": "16.0.1"
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/guava@30.1.1-jre?package-id=df760d9775f34589",
      "cpe": "cpe:2.3:a:google:guava:30.1.1-jre:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "87e0fd1df874ea3cbe577702fe6f17068b790fd8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.guava",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guava",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:guava:30.1.1-jre:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/guava-30.1.1-jre.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "guava"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/guava-30.1.1-jre.jar"
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@30.1.1-jre",
      "type": "library",
      "version": "30.1.1-jre"
    },
    {
      "bom-ref": "pkg:maven/com.google.inject/guice@4.1.0?package-id=cc0eb81f502e3759",
      "cpe": "cpe:2.3:a:google:inject:4.1.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "eeb69005da379a10071aa4948c48d89250febb07"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guice",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guice:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:guice:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:guice:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/guice-4.1.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/guice-4.1.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.inject/guice@4.1.0",
      "type": "library",
      "version": "4.1.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.inject/guice@4.1.0?package-id=e3974eb410d65624",
      "cpe": "cpe:2.3:a:google:inject:4.1.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "eeb69005da379a10071aa4948c48d89250febb07"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guice",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guice:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:guice:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:guice:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/guice-4.1.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/guice-4.1.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.inject/guice@4.1.0",
      "type": "library",
      "version": "4.1.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.inject.assistedinject/guice-assistedinject@4.1.0?package-id=4cb440ad488c1adc",
      "cpe": "cpe:2.3:a:guice-assistedinject:guice-assistedinject:4.1.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "af799dd7e23e6fe8c988da12314582072b07edcb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guice-assistedinject",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-assistedinject:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_assistedinject:guice-assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_assistedinject:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:assistedinject:guice-assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:assistedinject:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-assistedinject:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_assistedinject:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:assistedinject:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guice-assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-assistedinject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_assistedinject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:guice-assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:guice-assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:assistedinject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/guice-assistedinject-4.1.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/guice-assistedinject-4.1.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.inject.assistedinject/guice-assistedinject@4.1.0",
      "type": "library",
      "version": "4.1.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.inject.assistedinject/guice-assistedinject@4.1.0?package-id=edb5664fe6ee121e",
      "cpe": "cpe:2.3:a:guice-assistedinject:guice-assistedinject:4.1.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "af799dd7e23e6fe8c988da12314582072b07edcb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guice-assistedinject",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-assistedinject:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_assistedinject:guice-assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_assistedinject:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:assistedinject:guice-assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:assistedinject:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-assistedinject:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_assistedinject:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:assistedinject:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guice-assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-assistedinject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_assistedinject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:guice-assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:guice-assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:assistedinject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/guice-assistedinject-4.1.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/guice-assistedinject-4.1.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.inject.assistedinject/guice-assistedinject@4.1.0",
      "type": "library",
      "version": "4.1.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.inject.multibindings/guice-multibindings@4.1.0?package-id=2a3e5db53110d672",
      "cpe": "cpe:2.3:a:guice-multibindings:guice-multibindings:4.1.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3b27257997ac51b0f8d19676f1ea170427e86d51"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guice-multibindings",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-multibindings:guice_multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_multibindings:guice-multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_multibindings:guice_multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-multibindings:multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_multibindings:multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:multibindings:guice-multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:multibindings:guice_multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:multibindings:multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guice-multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guice_multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-multibindings:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_multibindings:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:guice-multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:guice_multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:guice-multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:guice_multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:multibindings:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/guice-multibindings-4.1.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/guice-multibindings-4.1.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.inject.multibindings/guice-multibindings@4.1.0",
      "type": "library",
      "version": "4.1.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.inject.servlet/guice-servlet@4.1.0?package-id=a26124baebae6625",
      "cpe": "cpe:2.3:a:guice-servlet:guice-servlet:4.1.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "90ac2db772d9b85e2b05417b74f7464bcc061dcb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guice-servlet",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-servlet:guice_servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_servlet:guice-servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_servlet:guice_servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-servlet:servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_servlet:servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:guice-servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:guice_servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guice-servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guice_servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-servlet:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_servlet:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:guice-servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:guice_servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:guice-servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:guice_servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/guice-servlet-4.1.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/guice-servlet-4.1.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.inject.servlet/guice-servlet@4.1.0",
      "type": "library",
      "version": "4.1.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gzip@1.12-1.el9?arch=aarch64&upstream=gzip-1.12-1.el9.src.rpm&distro=rhel-9.4&package-id=07af3ea6d7a381f6",
      "cpe": "cpe:2.3:a:redhat:gzip:1.12-1.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+ and GFDL"
          }
        }
      ],
      "name": "gzip",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gzip:gzip:1.12-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "421717"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gzip-1.12-1.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/gzip@1.12-1.el9?arch=aarch64&upstream=gzip-1.12-1.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.12-1.el9"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-annotations@2.8.5?package-id=af31dc5ac22e5aaf",
      "cpe": "cpe:2.3:a:apache:hadoop-annotations:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3a301159daf9368b05364577c985498857b5c48f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_annotations:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-annotations-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-annotations-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-annotations@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-annotations@2.8.5?package-id=0078bb263d489fe7",
      "cpe": "cpe:2.3:a:apache:hadoop-annotations:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3a301159daf9368b05364577c985498857b5c48f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_annotations:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hadoop-annotations-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hadoop-annotations-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-annotations@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-annotations@2.8.5?package-id=9b64e8a7f048dcce",
      "cpe": "cpe:2.3:a:apache:hadoop-annotations:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3a301159daf9368b05364577c985498857b5c48f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_annotations:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/hadoop-annotations-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/hadoop-annotations-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-annotations@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-annotations@2.8.5?package-id=ae8d83564b3d980d",
      "cpe": "cpe:2.3:a:apache:hadoop-annotations:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3a301159daf9368b05364577c985498857b5c48f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_annotations:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-annotations-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-annotations-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-annotations@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5?package-id=00ae889bc3be42a7",
      "cpe": "cpe:2.3:a:apache:hadoop-auth:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63fe1f9d9ef6bdf2cb52dfeb28ed8faf78e4b85c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-auth",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_auth:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-auth-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-auth"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-auth-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5?package-id=30bc21c2542ea24b",
      "cpe": "cpe:2.3:a:apache:hadoop-auth:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63fe1f9d9ef6bdf2cb52dfeb28ed8faf78e4b85c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-auth",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_auth:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/hadoop-auth-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-auth"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/hadoop-auth-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5?package-id=2cbf2a3dbcbe3a2f",
      "cpe": "cpe:2.3:a:apache:hadoop-auth:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63fe1f9d9ef6bdf2cb52dfeb28ed8faf78e4b85c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-auth",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_auth:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hadoop-auth-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-auth"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hadoop-auth-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5?package-id=7d2e56993b253ee8",
      "cpe": "cpe:2.3:a:apache:hadoop-auth:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63fe1f9d9ef6bdf2cb52dfeb28ed8faf78e4b85c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-auth",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_auth:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/hadoop-auth-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-auth"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/hadoop-auth-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5?package-id=481e85af26997c19",
      "cpe": "cpe:2.3:a:apache:hadoop-auth:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63fe1f9d9ef6bdf2cb52dfeb28ed8faf78e4b85c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-auth",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_auth:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-auth-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-auth"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-auth-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-aws@2.8.5?package-id=c6a153433b9ba690",
      "cpe": "cpe:2.3:a:apache:hadoop-aws:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ad0b3accf16d34e759af01e0a7349b55b6a649cf"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-aws",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_aws:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-aws-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-aws"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-aws-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-aws@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-client@2.8.5?package-id=f92177300a975e3c",
      "cpe": "cpe:2.3:a:apache:hadoop-client:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "45e11f6004581e53959bc3d38c4d01dbeb5f4b22"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_client:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-client-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-client-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-client@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-client@2.8.5?package-id=13245ec325ddd9c0",
      "cpe": "cpe:2.3:a:apache:hadoop-client:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "45e11f6004581e53959bc3d38c4d01dbeb5f4b22"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_client:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-client-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-client-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-client@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5?package-id=d7b63adf33dff23b",
      "cpe": "cpe:2.3:a:apache:hadoop-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "376e807b4f9df627b03aeaf85999cd1ffe496f05"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5?package-id=d60d7c353beb7e00",
      "cpe": "cpe:2.3:a:apache:hadoop-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "376e807b4f9df627b03aeaf85999cd1ffe496f05"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/hadoop-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/hadoop-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5?package-id=46ee65a1d09f927e",
      "cpe": "cpe:2.3:a:apache:hadoop-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "376e807b4f9df627b03aeaf85999cd1ffe496f05"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hadoop-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hadoop-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5?package-id=13aa7d25d002839b",
      "cpe": "cpe:2.3:a:apache:hadoop-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "376e807b4f9df627b03aeaf85999cd1ffe496f05"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/hadoop-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/hadoop-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5?package-id=c5be575696c17ec5",
      "cpe": "cpe:2.3:a:apache:hadoop-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "376e807b4f9df627b03aeaf85999cd1ffe496f05"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.8.5?package-id=8cc05b4bd149c891",
      "cpe": "cpe:2.3:a:apache:hadoop-hdfs-client:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9d72fa62b01c32f1c0587d53c5005fc49f2bd11c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-hdfs-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_hdfs_client:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-hdfs-client-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-hdfs-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-hdfs-client-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.8.5?package-id=353fa37bd57af115",
      "cpe": "cpe:2.3:a:apache:hadoop-hdfs-client:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9d72fa62b01c32f1c0587d53c5005fc49f2bd11c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-hdfs-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_hdfs_client:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hadoop-hdfs-client-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-hdfs-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hadoop-hdfs-client-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.8.5?package-id=0f29de07b0d3a9b1",
      "cpe": "cpe:2.3:a:apache:hadoop-hdfs-client:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9d72fa62b01c32f1c0587d53c5005fc49f2bd11c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-hdfs-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_hdfs_client:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/hadoop-hdfs-client-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-hdfs-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/hadoop-hdfs-client-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.8.5?package-id=8a7a3b20bfe82d25",
      "cpe": "cpe:2.3:a:apache:hadoop-hdfs-client:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9d72fa62b01c32f1c0587d53c5005fc49f2bd11c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-hdfs-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_hdfs_client:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-hdfs-client-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-hdfs-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-hdfs-client-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-app@2.8.5?package-id=366725aa43899dae",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-app:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4d4c3514f45942cd576e8daae07f11239f5627f9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-app",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_app:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-mapreduce-client-app-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-app"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-mapreduce-client-app-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-app@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-app@2.8.5?package-id=820c8002365198e4",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-app:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4d4c3514f45942cd576e8daae07f11239f5627f9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-app",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_app:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-mapreduce-client-app-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-app"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-mapreduce-client-app-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-app@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-common@2.8.5?package-id=22ef694d05c22292",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "41ae839f4c21c04ca46392a5af2b13a2dd6eeec9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-mapreduce-client-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-mapreduce-client-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-common@2.8.5?package-id=7f9d8ec00acee3cb",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "41ae839f4c21c04ca46392a5af2b13a2dd6eeec9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-mapreduce-client-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-mapreduce-client-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.8.5?package-id=bb9f25dba52bd492",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-core:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c8fd0834b1f10fbebbe8e0e477a4055dc0997f9a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_core:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-mapreduce-client-core-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-mapreduce-client-core-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.8.5?package-id=5d338b8a4b98b707",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-core:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c8fd0834b1f10fbebbe8e0e477a4055dc0997f9a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_core:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hadoop-mapreduce-client-core-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hadoop-mapreduce-client-core-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.8.5?package-id=187fcc0410515c61",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-core:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c8fd0834b1f10fbebbe8e0e477a4055dc0997f9a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_core:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/hadoop-mapreduce-client-core-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/hadoop-mapreduce-client-core-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.8.5?package-id=4cbe0c37006b66f4",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-core:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c8fd0834b1f10fbebbe8e0e477a4055dc0997f9a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_core:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-mapreduce-client-core-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-mapreduce-client-core-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-jobclient@2.8.5?package-id=9e92d153194aa685",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-jobclient:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a01c7f515227979efc96ccbfbc1c8978bc0cbabb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-jobclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_jobclient:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-mapreduce-client-jobclient-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-jobclient"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-mapreduce-client-jobclient-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-jobclient@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-jobclient@2.8.5?package-id=b8f23de2fc7968be",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-jobclient:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a01c7f515227979efc96ccbfbc1c8978bc0cbabb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-jobclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_jobclient:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-mapreduce-client-jobclient-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-jobclient"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-mapreduce-client-jobclient-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-jobclient@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-shuffle@2.8.5?package-id=53e908a9d26344ce",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-shuffle:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6ce759a7079e2943b641347da618239f0dbe1fe5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-shuffle",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_shuffle:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-mapreduce-client-shuffle-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-shuffle"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-mapreduce-client-shuffle-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-shuffle@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-shuffle@2.8.5?package-id=8260dab89c48616c",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-shuffle:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6ce759a7079e2943b641347da618239f0dbe1fe5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-shuffle",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_shuffle:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-mapreduce-client-shuffle-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-shuffle"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-mapreduce-client-shuffle-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-shuffle@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.8.5?package-id=716065b2ffbe8f9e",
      "cpe": "cpe:2.3:a:apache:hadoop-yarn-api:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "db973263bfdc8c0bb974616898b5e15ecca7df27"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-yarn-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_yarn_api:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-yarn-api-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-yarn-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-yarn-api-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.8.5?package-id=5a229a5fca948e10",
      "cpe": "cpe:2.3:a:apache:hadoop-yarn-api:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "db973263bfdc8c0bb974616898b5e15ecca7df27"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-yarn-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_yarn_api:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-yarn-api-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-yarn-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-yarn-api-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.8.5?package-id=b74909de0563d1f9",
      "cpe": "cpe:2.3:a:apache:hadoop-yarn-client:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e727aab328356525b05bf43e2f1cb6940955a28f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-yarn-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_yarn_client:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-yarn-client-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-yarn-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-yarn-client-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.8.5?package-id=561ab880a9160dc1",
      "cpe": "cpe:2.3:a:apache:hadoop-yarn-client:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e727aab328356525b05bf43e2f1cb6940955a28f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-yarn-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_yarn_client:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-yarn-client-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-yarn-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-yarn-client-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.8.5?package-id=1ce9fb8042ee3ef4",
      "cpe": "cpe:2.3:a:apache:hadoop-yarn-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8b98829ab9e688a168629d20504f0a352e81e9fb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-yarn-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_yarn_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-yarn-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-yarn-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-yarn-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-yarn-server-common@2.8.5?package-id=f10cecfd89ddbf40",
      "cpe": "cpe:2.3:a:apache:hadoop-yarn-server-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bcfe2a6fb2d7a1674c1058e97c943cdbe43c3d71"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-yarn-server-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_yarn_server_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-yarn-server-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-yarn-server-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-yarn-server-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-yarn-server-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-yarn-server-common@2.8.5?package-id=1e1ece6837ad2100",
      "cpe": "cpe:2.3:a:apache:hadoop-yarn-server-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bcfe2a6fb2d7a1674c1058e97c943cdbe43c3d71"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-yarn-server-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_yarn_server_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-yarn-server-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-yarn-server-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-yarn-server-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-yarn-server-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.hibernate/hibernate-validator@5.2.5.Final?package-id=c6e7b08de46bd077",
      "cpe": "cpe:2.3:a:hibernate-validator:hibernate-validator:5.2.5.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c7e539ab701705d82276a599cb1ba222e1433bd8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.hibernate",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "hibernate-validator",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hibernate-validator:hibernate_validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hibernate_validator:hibernate-validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hibernate_validator:hibernate_validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hibernate-validator:validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hibernate:hibernate-validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hibernate:hibernate_validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hibernate_validator:validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validator:hibernate-validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validator:hibernate_validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hibernate:validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validator:validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/hibernate-validator-5.2.5.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hibernate-validator"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.hibernate"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/hibernate-validator-5.2.5.Final.jar"
        }
      ],
      "purl": "pkg:maven/org.hibernate/hibernate-validator@5.2.5.Final",
      "type": "library",
      "version": "5.2.5.Final"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?package-id=32b827e41807e0e7",
      "cpe": "cpe:2.3:a:apache:hive-storage-api:2.8.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4b151bcdfe290542f27a442ed09be99f815f88e8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hive",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "hive-storage-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hive_storage_api:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hive:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-bloom-filter/hive-storage-api-2.8.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hive-storage-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hive"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-bloom-filter/hive-storage-api-2.8.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hive/hive-storage-api@2.8.1",
      "type": "library",
      "version": "2.8.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?package-id=54e6658ca4d8c5d6",
      "cpe": "cpe:2.3:a:apache:hive-storage-api:2.8.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4b151bcdfe290542f27a442ed09be99f815f88e8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hive",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "hive-storage-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hive_storage_api:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hive:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hive-storage-api-2.8.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hive-storage-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hive"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hive-storage-api-2.8.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hive/hive-storage-api@2.8.1",
      "type": "library",
      "version": "2.8.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.htrace/htrace-core4@4.0.1-incubating?package-id=70d177959a3c0c2b",
      "cpe": "cpe:2.3:a:apache:htrace-core4:4.0.1-incubating:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f4ef727cb4675788ac66f48e217020acc1690960"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.htrace",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "htrace-core4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:htrace_core4:4.0.1-incubating:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:htrace:4.0.1-incubating:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "htrace-core4"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.htrace"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/htrace-core4-4.0.1-incubating.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.htrace/htrace-core4@4.0.1-incubating",
      "type": "library",
      "version": "4.0.1-incubating"
    },
    {
      "bom-ref": "pkg:maven/org.apache.htrace/htrace-core4@4.0.1-incubating?package-id=c15a396309911318",
      "cpe": "cpe:2.3:a:apache:htrace-core4:4.0.1-incubating:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f4ef727cb4675788ac66f48e217020acc1690960"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.htrace",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "htrace-core4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:htrace_core4:4.0.1-incubating:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:htrace:4.0.1-incubating:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "htrace-core4"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.htrace"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/htrace-core4-4.0.1-incubating.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.htrace/htrace-core4@4.0.1-incubating",
      "type": "library",
      "version": "4.0.1-incubating"
    },
    {
      "bom-ref": "pkg:maven/org.apache.htrace/htrace-core4@4.0.1-incubating?package-id=128c775df47f9988",
      "cpe": "cpe:2.3:a:apache:htrace-core4:4.0.1-incubating:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f4ef727cb4675788ac66f48e217020acc1690960"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.htrace",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "htrace-core4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:htrace_core4:4.0.1-incubating:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:htrace:4.0.1-incubating:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "htrace-core4"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.htrace"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/htrace-core4-4.0.1-incubating.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.htrace/htrace-core4@4.0.1-incubating",
      "type": "library",
      "version": "4.0.1-incubating"
    },
    {
      "bom-ref": "pkg:maven/org.apache.htrace/htrace-core4@4.0.1-incubating?package-id=9952f057d0a0a53b",
      "cpe": "cpe:2.3:a:apache:htrace-core4:4.0.1-incubating:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f4ef727cb4675788ac66f48e217020acc1690960"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.htrace",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "htrace-core4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:htrace_core4:4.0.1-incubating:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:htrace:4.0.1-incubating:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "htrace-core4"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.htrace"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/htrace-core4-4.0.1-incubating.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.htrace/htrace-core4@4.0.1-incubating",
      "type": "library",
      "version": "4.0.1-incubating"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?package-id=4d0a989dc3595a9e",
      "cpe": "cpe:2.3:a:apache:httpclient:4.5.14:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1194890e6f56ec29177673f2f12d0b8e627dec98"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "httpclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/httpclient-4.5.14.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpclient"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/httpclient-4.5.14.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14",
      "type": "library",
      "version": "4.5.14"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?package-id=489acf71ecbfc555",
      "cpe": "cpe:2.3:a:apache:httpclient:4.5.14:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1194890e6f56ec29177673f2f12d0b8e627dec98"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "httpclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/httpclient-4.5.14.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpclient"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/httpclient-4.5.14.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14",
      "type": "library",
      "version": "4.5.14"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?package-id=28a6a196bd85a9b3",
      "cpe": "cpe:2.3:a:apache:httpclient:4.5.14:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1194890e6f56ec29177673f2f12d0b8e627dec98"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "httpclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/httpclient-4.5.14.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpclient"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/httpclient-4.5.14.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14",
      "type": "library",
      "version": "4.5.14"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?package-id=1eddb49a58b75922",
      "cpe": "cpe:2.3:a:apache:httpclient:4.5.14:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1194890e6f56ec29177673f2f12d0b8e627dec98"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "httpclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/httpclient-4.5.14.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpclient"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/httpclient-4.5.14.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14",
      "type": "library",
      "version": "4.5.14"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.2?package-id=9871ba35b44c949c",
      "cpe": "cpe:2.3:a:apache:httpclient:4.5.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "733db77aa8d9b2d68015189df76ab06304406e50"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "httpclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/httpclient-4.5.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpclient"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/httpclient-4.5.2.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.2",
      "type": "library",
      "version": "4.5.2"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11?package-id=4aa6e2deac360053",
      "cpe": "cpe:2.3:a:apache:httpcore:4.4.11:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "de748cf874e4e193b42eceea9fe5574fabb9d4df"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "httpcore",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/httpcore-4.4.11.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpcore"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/httpcore-4.4.11.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11",
      "type": "library",
      "version": "4.4.11"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11?package-id=f0f75dc404aa6d49",
      "cpe": "cpe:2.3:a:apache:httpcore:4.4.11:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "de748cf874e4e193b42eceea9fe5574fabb9d4df"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "httpcore",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/httpcore-4.4.11.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpcore"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/httpcore-4.4.11.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11",
      "type": "library",
      "version": "4.4.11"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11?package-id=5491783a5e815226",
      "cpe": "cpe:2.3:a:apache:httpcore:4.4.11:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "de748cf874e4e193b42eceea9fe5574fabb9d4df"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "httpcore",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/httpcore-4.4.11.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpcore"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/httpcore-4.4.11.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11",
      "type": "library",
      "version": "4.4.11"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11?package-id=f9f307775f221212",
      "cpe": "cpe:2.3:a:apache:httpcore:4.4.11:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "de748cf874e4e193b42eceea9fe5574fabb9d4df"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "httpcore",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/httpcore-4.4.11.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpcore"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/httpcore-4.4.11.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11",
      "type": "library",
      "version": "4.4.11"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.4?package-id=2da9b62d75f68966",
      "cpe": "cpe:2.3:a:apache:httpcore:4.4.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b31526a230871fbe285fbcbe2813f9c0839ae9b0"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "name": "httpcore",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/httpcore-4.4.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpcore"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/httpcore-4.4.4.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.4",
      "type": "library",
      "version": "4.4.4"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.server/i18n@2.0.0-M15?package-id=fddee6615c1923dd",
      "cpe": "cpe:2.3:a:apache:directory:2.0.0-M15:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "71c61c84683152ec2a6a65f3f96fe534e304fa22"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "i18n",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:server:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:i18n:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/apacheds-i18n-2.0.0-M15.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/apacheds-i18n-2.0.0-M15.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.server/i18n@2.0.0-M15",
      "type": "library",
      "version": "2.0.0-M15"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.server/i18n@2.0.0-M15?package-id=85c753afe436a49f",
      "cpe": "cpe:2.3:a:apache:directory:2.0.0-M15:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "71c61c84683152ec2a6a65f3f96fe534e304fa22"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "i18n",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:server:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:i18n:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/apacheds-i18n-2.0.0-M15.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/apacheds-i18n-2.0.0-M15.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.server/i18n@2.0.0-M15",
      "type": "library",
      "version": "2.0.0-M15"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.server/i18n@2.0.0-M15?package-id=1156f7104633602f",
      "cpe": "cpe:2.3:a:apache:directory:2.0.0-M15:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "71c61c84683152ec2a6a65f3f96fe534e304fa22"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "i18n",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:server:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:i18n:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/apacheds-i18n-2.0.0-M15.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/apacheds-i18n-2.0.0-M15.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.server/i18n@2.0.0-M15",
      "type": "library",
      "version": "2.0.0-M15"
    },
    {
      "bom-ref": "pkg:maven/com.ibm/icu4j@55.1?package-id=fc23a7be60f804b2",
      "cpe": "cpe:2.3:a:ibm-corporation:icu4j:55.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "670e165010677d0ae8ffaba6f3135895042b63b9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "icu4j",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ibm_corporation:icu4j:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu-project-org:icu4j:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu_project_org:icu4j:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ibm-corporation:icu:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ibm_corporation:icu:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu-project-org:icu:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu_project_org:icu:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu4j:icu4j:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ibm:icu4j:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu4j:icu:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu:icu4j:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ibm:icu:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu:icu:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/icu4j-55.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/icu4j-55.1.jar"
        }
      ],
      "purl": "pkg:maven/com.ibm/icu4j@55.1",
      "type": "library",
      "version": "55.1"
    },
    {
      "bom-ref": "pkg:rpm/rhel/inotify-tools@3.22.1.0-1.el9?arch=aarch64&upstream=inotify-tools-3.22.1.0-1.el9.src.rpm&distro=rhel-9.4&package-id=45db751f0a0518eb",
      "cpe": "cpe:2.3:a:fedoraproject:inotify-tools:3.22.1.0-1.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2"
          }
        }
      ],
      "name": "inotify-tools",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fedoraproject:inotify_tools:3.22.1.0-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inotify-tools:inotify-tools:3.22.1.0-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inotify-tools:inotify_tools:3.22.1.0-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inotify_tools:inotify-tools:3.22.1.0-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inotify_tools:inotify_tools:3.22.1.0-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inotify:inotify-tools:3.22.1.0-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inotify:inotify_tools:3.22.1.0-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "236238"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "inotify-tools-3.22.1.0-1.el9.src.rpm"
        }
      ],
      "publisher": "Fedora Project",
      "purl": "pkg:rpm/rhel/inotify-tools@3.22.1.0-1.el9?arch=aarch64&upstream=inotify-tools-3.22.1.0-1.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.22.1.0-1.el9"
    },
    {
      "bom-ref": "pkg:maven/com.github.seancfoley.ipaddress/ipaddress@5.3.4?package-id=265bb4a4075b7c71",
      "cpe": "cpe:2.3:a:seancfoley:seancfoley:5.3.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "67613a3a83092588b85b163b9aeb3e87ec46b4ea"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "ipaddress",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ipaddress:seancfoley:5.3.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:seancfoley:ipaddress:5.3.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ipaddress:ipaddress:5.3.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:seancfoley:5.3.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:ipaddress:5.3.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/ipaddress-5.3.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/ipaddress-5.3.4.jar"
        }
      ],
      "purl": "pkg:maven/com.github.seancfoley.ipaddress/ipaddress@5.3.4",
      "type": "library",
      "version": "5.3.4"
    },
    {
      "bom-ref": "pkg:rpm/rhel/iputils@20210202-9.el9?arch=aarch64&upstream=iputils-20210202-9.el9.src.rpm&distro=rhel-9.4&package-id=2e076bc794b2a8d1",
      "cpe": "cpe:2.3:a:iputils:iputils:20210202-9.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD and GPLv2+"
          }
        }
      ],
      "name": "iputils",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:iputils:20210202-9.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "9.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "704159"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "iputils-20210202-9.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/iputils@20210202-9.el9?arch=aarch64&upstream=iputils-20210202-9.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "20210202-9.el9"
    },
    {
      "bom-ref": "pkg:maven/com.sun.xml.bind.jaxb/isorelax@20090621?package-id=5eef81de65bc10e3",
      "cpe": "cpe:2.3:a:isorelax:isorelax:20090621:*:*:*:*:*:*:*",
      "group": "com.sun.xml.bind.jaxb",
      "name": "isorelax",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bind:isorelax:20090621:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:isorelax:20090621:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb:isorelax:20090621:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:isorelax:20090621:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xml:isorelax:20090621:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/woodstox-core-6.2.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "isorelax"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.xml.bind.jaxb"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/woodstox-core-6.2.1.jar:com.sun.xml.bind.jaxb:isorelax"
        }
      ],
      "purl": "pkg:maven/com.sun.xml.bind.jaxb/isorelax@20090621",
      "type": "library",
      "version": "20090621"
    },
    {
      "bom-ref": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.7?package-id=85190ce8643e6175",
      "cpe": "cpe:2.3:a:istack-commons-runtime:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c197c86ceec7318b1284bffb49b54226ca774003"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.istack",
      "licenses": [
        {
          "license": {
            "name": "https://glassfish.java.net/public/CDDL+GPL_1_1.html, https://glassfish.java.net/public/CDDL+GPL_1_1.html"
          }
        }
      ],
      "name": "istack-commons-runtime",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack-commons-runtime:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack_commons_runtime:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack_commons_runtime:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-runtime:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-runtime:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_runtime:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_runtime:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack-commons-runtime:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack-commons-runtime:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack_commons_runtime:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack_commons_runtime:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack-commons:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack-commons:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack_commons:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack_commons:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-runtime:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-runtime:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_runtime:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_runtime:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack-commons:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack-commons:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack_commons:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack_commons:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack-commons-runtime:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack_commons_runtime:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-runtime:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_runtime:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack-commons:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack_commons:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/istack-commons-runtime-3.0.7.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "istack-commons-runtime"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.istack"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/istack-commons-runtime-3.0.7.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.7",
      "type": "library",
      "version": "3.0.7"
    },
    {
      "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@1.1?package-id=51bca8eba060b9e8",
      "cpe": "cpe:2.3:a:j2objc-annotations:j2objc-annotations:1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ed28ded51a8b1c6b112568def5f4b455e6809019"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.j2objc",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "j2objc-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc-annotations:j2objc_annotations:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc_annotations:j2objc-annotations:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc_annotations:j2objc_annotations:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:j2objc-annotations:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:j2objc_annotations:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc-annotations:j2objc:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc:j2objc-annotations:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc:j2objc_annotations:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc_annotations:j2objc:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:j2objc:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc:j2objc:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/j2objc-annotations-1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "j2objc-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.j2objc"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/j2objc-annotations-1.1.jar"
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@1.1",
      "type": "library",
      "version": "1.1"
    },
    {
      "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?package-id=927ae041c3d73c4d",
      "cpe": "cpe:2.3:a:j2objc-annotations:j2objc-annotations:1.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ba035118bc8bac37d7eff77700720999acd9986d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.j2objc",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "j2objc-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc-annotations:j2objc_annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc_annotations:j2objc-annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc_annotations:j2objc_annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:j2objc-annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:j2objc_annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc-annotations:j2objc:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc:j2objc-annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc:j2objc_annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc_annotations:j2objc:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:j2objc:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc:j2objc:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/j2objc-annotations-1.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "j2objc-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.j2objc"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/j2objc-annotations-1.3.jar"
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@1.3",
      "type": "library",
      "version": "1.3"
    },
    {
      "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?package-id=131eb8f396c07872",
      "cpe": "cpe:2.3:a:j2objc-annotations:j2objc-annotations:1.3:*:*:*:*:*:*:*",
      "group": "com.google.j2objc",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "j2objc-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc-annotations:j2objc_annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc_annotations:j2objc-annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc_annotations:j2objc_annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sonatype:j2objc-annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sonatype:j2objc_annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:j2objc-annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:j2objc_annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc-annotations:j2objc:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc:j2objc-annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc:j2objc_annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc_annotations:j2objc:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oss:j2objc-annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oss:j2objc_annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sonatype:j2objc:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:j2objc:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc:j2objc:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oss:j2objc:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "j2objc-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.j2objc"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:com.google.j2objc:j2objc-annotations"
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@1.3",
      "type": "library",
      "version": "1.3"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.10.5?package-id=0f2c9a51186ad600",
      "cpe": "cpe:2.3:a:jackson-annotations:jackson-annotations:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "33298de8da86f92f8ccd61ced214d3b16f8c531e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.core",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-annotations-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-annotations-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.2?package-id=9ccafec86f977667",
      "cpe": "cpe:2.3:a:jackson-annotations:jackson-annotations:2.13.2:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson_annotations:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson-annotations:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson_annotations:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-annotations:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_annotations:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-annotations:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_annotations:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-annotations:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_annotations:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-jackson-1.12.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-jackson-1.12.3.jar:com.fasterxml.jackson.core:jackson-annotations"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.2",
      "type": "library",
      "version": "2.13.2"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.3?package-id=35a220add862b738",
      "cpe": "cpe:2.3:a:jackson-annotations:jackson-annotations:2.13.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7198b3aac15285a49e218e08441c5f70af00fc51"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.core",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson_annotations:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson-annotations:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson_annotations:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-annotations:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_annotations:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-annotations:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_annotations:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-annotations:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_annotations:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/jackson-annotations-2.13.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/jackson-annotations-2.13.3.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.3",
      "type": "library",
      "version": "2.13.3"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.4.0?package-id=cbda840d97a30158",
      "cpe": "cpe:2.3:a:jackson-annotations:jackson-annotations:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-annotations"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.4.0?package-id=d4f132d93ec2ad1b",
      "cpe": "cpe:2.3:a:jackson-annotations:jackson-annotations:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-annotations"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.4.0?package-id=47913fae8b74f535",
      "cpe": "cpe:2.3:a:jackson-annotations:jackson-annotations:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-annotations"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.4.0?package-id=e27d5f7f5e177e3e",
      "cpe": "cpe:2.3:a:jackson-annotations:jackson-annotations:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-annotations"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.5?package-id=6412ba9c65668c1c",
      "cpe": "cpe:2.3:a:jackson-core:jackson-core:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "db2ba27938de7f2d478a97d6abcdaa17cbbd3cea"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.core",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-core-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-core-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.2?package-id=018f50c832378b69",
      "cpe": "cpe:2.3:a:jackson-core:jackson-core:2.13.2:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-core:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_core:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-core:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_core:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:core:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:core:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:core:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:core:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:2.13.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-jackson-1.12.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-jackson-1.12.3.jar:com.fasterxml.jackson.core:jackson-core"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.2",
      "type": "library",
      "version": "2.13.2"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3?package-id=e2627ae559170bd0",
      "cpe": "cpe:2.3:a:jackson-core:jackson-core:2.13.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a27014716e4421684416e5fa83d896ddb87002da"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.core",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/jackson-core-2.13.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/jackson-core-2.13.3.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3",
      "type": "library",
      "version": "2.13.3"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.4.0?package-id=f0d17bde7e8be819",
      "cpe": "cpe:2.3:a:jackson-core:jackson-core:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-core"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.4.0?package-id=bff4c97d06d688ac",
      "cpe": "cpe:2.3:a:jackson-core:jackson-core:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-core"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.4.0?package-id=9f86d858faa9af90",
      "cpe": "cpe:2.3:a:jackson-core:jackson-core:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-core"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.4.0?package-id=7957b8f262d59a71",
      "cpe": "cpe:2.3:a:jackson-core:jackson-core:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-core"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/jackson-core-asl/jackson-core-asl@1.9.13?package-id=5502e919b0cb6023",
      "cpe": "cpe:2.3:a:http\\:\\/\\/www-ietf-org\\/rfc\\/rfc4627-txt:jackson-core-asl:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3c304d70f42f832e0a86d45bd437f692129299a4"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-core-asl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www-ietf-org\\/rfc\\/rfc4627-txt:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www_ietf_org\\/rfc\\/rfc4627_txt:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www_ietf_org\\/rfc\\/rfc4627_txt:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core-asl:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core-asl:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core_asl:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core_asl:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jackson-core-asl-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jackson-core-asl-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-core-asl/jackson-core-asl@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/jackson-core-asl/jackson-core-asl@1.9.13?package-id=0f6421bf5570fae5",
      "cpe": "cpe:2.3:a:http\\:\\/\\/www-ietf-org\\/rfc\\/rfc4627-txt:jackson-core-asl:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3c304d70f42f832e0a86d45bd437f692129299a4"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-core-asl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www-ietf-org\\/rfc\\/rfc4627-txt:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www_ietf_org\\/rfc\\/rfc4627_txt:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www_ietf_org\\/rfc\\/rfc4627_txt:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core-asl:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core-asl:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core_asl:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core_asl:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/jackson-core-asl-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/jackson-core-asl-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-core-asl/jackson-core-asl@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/jackson-core-asl/jackson-core-asl@1.9.13?package-id=5a58bb9cd4b26a71",
      "cpe": "cpe:2.3:a:http\\:\\/\\/www-ietf-org\\/rfc\\/rfc4627-txt:jackson-core-asl:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3c304d70f42f832e0a86d45bd437f692129299a4"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-core-asl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www-ietf-org\\/rfc\\/rfc4627-txt:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www_ietf_org\\/rfc\\/rfc4627_txt:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www_ietf_org\\/rfc\\/rfc4627_txt:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core-asl:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core-asl:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core_asl:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core_asl:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/jackson-core-asl-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/jackson-core-asl-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-core-asl/jackson-core-asl@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/jackson-core-asl/jackson-core-asl@1.9.13?package-id=508cd033b431fda5",
      "cpe": "cpe:2.3:a:http\\:\\/\\/www-ietf-org\\/rfc\\/rfc4627-txt:jackson-core-asl:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3c304d70f42f832e0a86d45bd437f692129299a4"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-core-asl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www-ietf-org\\/rfc\\/rfc4627-txt:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www_ietf_org\\/rfc\\/rfc4627_txt:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www_ietf_org\\/rfc\\/rfc4627_txt:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core-asl:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core-asl:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core_asl:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core_asl:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jackson-core-asl-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jackson-core-asl-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-core-asl/jackson-core-asl@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.5.1?package-id=a289c355748ccdee",
      "cpe": "cpe:2.3:a:jackson-databind:jackson-databind:2.10.5.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7ff756c3af1fe95cb3cddba9158fc3289ca06387"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.core",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-databind",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson_databind:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson-databind:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson_databind:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-databind:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_databind:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-databind:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_databind:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-databind:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_databind:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-databind-2.10.5.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-databind"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-databind-2.10.5.1.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.5.1",
      "type": "library",
      "version": "2.10.5.1"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.2.2?package-id=8d0503afa9cafce2",
      "cpe": "cpe:2.3:a:jackson-databind:jackson-databind:2.13.2.2:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-databind",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson_databind:2.13.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson-databind:2.13.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson_databind:2.13.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-databind:2.13.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_databind:2.13.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson:2.13.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-databind:2.13.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_databind:2.13.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson:2.13.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-databind:2.13.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_databind:2.13.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.13.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.13.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.13.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-jackson-1.12.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-databind"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-jackson-1.12.3.jar:com.fasterxml.jackson.core:jackson-databind"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.2.2",
      "type": "library",
      "version": "2.13.2.2"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3?package-id=135152bc6ed37815",
      "cpe": "cpe:2.3:a:jackson-databind:jackson-databind:2.13.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "56deb9ea2c93a7a556b3afbedd616d342963464e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.core",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-databind",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson_databind:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson-databind:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson_databind:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-databind:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_databind:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-databind:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_databind:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-databind:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_databind:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/jackson-databind-2.13.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-databind"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/jackson-databind-2.13.3.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3",
      "type": "library",
      "version": "2.13.3"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.0?package-id=d2b944c76a0315ea",
      "cpe": "cpe:2.3:a:jackson-databind:jackson-databind:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-databind"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-databind"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.0?package-id=cdcfdde21b83910c",
      "cpe": "cpe:2.3:a:jackson-databind:jackson-databind:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-databind"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-databind"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.0?package-id=50dbb45f0dd7a13a",
      "cpe": "cpe:2.3:a:jackson-databind:jackson-databind:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-databind"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-databind"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.0?package-id=c1bba4bdb702ab7b",
      "cpe": "cpe:2.3:a:jackson-databind:jackson-databind:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-databind"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-databind"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.10.5?package-id=e08d7f36b2d36d87",
      "cpe": "cpe:2.3:a:jackson-dataformat-cbor:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7aff753250d1f7b93fcf3c17090ec575a03aa0ee"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.dataformat",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-dataformat-cbor",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-cbor:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-cbor:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/jackson-dataformat-cbor-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-dataformat-cbor"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.dataformat"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/jackson-dataformat-cbor-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.10.5?package-id=4c7d3c4e88d73458",
      "cpe": "cpe:2.3:a:jackson-dataformat-cbor:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7aff753250d1f7b93fcf3c17090ec575a03aa0ee"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.dataformat",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-dataformat-cbor",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-cbor:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-cbor:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jackson-dataformat-cbor-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-dataformat-cbor"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.dataformat"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jackson-dataformat-cbor-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.10.5?package-id=dff4dc3f96550ff5",
      "cpe": "cpe:2.3:a:jackson-dataformat-cbor:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7aff753250d1f7b93fcf3c17090ec575a03aa0ee"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.dataformat",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-dataformat-cbor",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-cbor:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-cbor:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/jackson-dataformat-cbor-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-dataformat-cbor"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.dataformat"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/jackson-dataformat-cbor-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.10.5?package-id=333c9f99f90ae625",
      "cpe": "cpe:2.3:a:jackson-dataformat-cbor:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7aff753250d1f7b93fcf3c17090ec575a03aa0ee"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.dataformat",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-dataformat-cbor",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-cbor:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-cbor:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-dataformat-cbor-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-dataformat-cbor"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.dataformat"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-dataformat-cbor-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-smile@2.10.5?package-id=d0f3ebf49c60b650",
      "cpe": "cpe:2.3:a:jackson-dataformat-smile:jackson-dataformat-smile:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1b56a4febe8a3d2a2c20f4074ba9385a28d49fb6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.dataformat",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-dataformat-smile",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-smile:jackson_dataformat_smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_smile:jackson-dataformat-smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_smile:jackson_dataformat_smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson-dataformat-smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson_dataformat_smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson-dataformat-smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson_dataformat_smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson-dataformat-smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson_dataformat_smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-dataformat-smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_dataformat_smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-smile:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-dataformat-smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_dataformat_smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_smile:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-dataformat-smile-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-dataformat-smile"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.dataformat"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-dataformat-smile-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-smile@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.10.5?package-id=b68a3f3610b0f04a",
      "cpe": "cpe:2.3:a:jackson-dataformat-xml:jackson-dataformat-xml:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "eb44e5de7ba75ef1b6e2c8caa09b0d5e153cb24f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.dataformat",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-dataformat-xml",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-xml:jackson_dataformat_xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_xml:jackson-dataformat-xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_xml:jackson_dataformat_xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson-dataformat-xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson_dataformat_xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson-dataformat-xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson_dataformat_xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson-dataformat-xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson_dataformat_xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-dataformat-xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_dataformat_xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-xml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-dataformat-xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_dataformat_xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_xml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-dataformat-xml-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-dataformat-xml"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.dataformat"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-dataformat-xml-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.10.5?package-id=92f580616f6069dd",
      "cpe": "cpe:2.3:a:jackson-dataformat-yaml:jackson-dataformat-yaml:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "86b10f913c64fc4927579e709fc8eb99e9a9e9ce"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.dataformat",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-dataformat-yaml",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-yaml:jackson_dataformat_yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_yaml:jackson-dataformat-yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_yaml:jackson_dataformat_yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson-dataformat-yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson_dataformat_yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson-dataformat-yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson_dataformat_yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson-dataformat-yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson_dataformat_yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-dataformat-yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_dataformat_yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-yaml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-dataformat-yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_dataformat_yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_yaml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/jackson-dataformat-yaml-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-dataformat-yaml"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.dataformat"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/jackson-dataformat-yaml-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.10.5?package-id=0be7e927711485cc",
      "cpe": "cpe:2.3:a:jackson-dataformat-yaml:jackson-dataformat-yaml:2.10.5:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-yaml",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-yaml:jackson_dataformat_yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_yaml:jackson-dataformat-yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_yaml:jackson_dataformat_yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson-dataformat-yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson_dataformat_yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson-dataformat-yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson_dataformat_yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson-dataformat-yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson_dataformat_yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-dataformat-yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_dataformat_yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-yaml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-dataformat-yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_dataformat_yaml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_yaml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-dataformat-yaml"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.dataformat"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:com.fasterxml.jackson.dataformat:jackson-dataformat-yaml"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-guava@2.10.5?package-id=6d4ce7b08b76dd68",
      "cpe": "cpe:2.3:a:jackson-datatype-guava:jackson-datatype-guava:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a8b0a978c18ab51006a0ef03ba2b2c156b92b1d8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.datatype",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-datatype-guava",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-datatype-guava:jackson_datatype_guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype_guava:jackson-datatype-guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype_guava:jackson_datatype_guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-datatype:jackson-datatype-guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-datatype:jackson_datatype_guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype:jackson-datatype-guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype:jackson_datatype_guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-datatype-guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_datatype_guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:datatype:jackson-datatype-guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:datatype:jackson_datatype_guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-datatype-guava:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-datatype-guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_datatype_guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype_guava:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-datatype:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:datatype:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-datatype-guava-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-datatype-guava"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.datatype"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-datatype-guava-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-guava@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.10.5?package-id=463abd150dd04ec4",
      "cpe": "cpe:2.3:a:jackson-datatype-joda:jackson-datatype-joda:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b6ad58040fe4987b8abbdb7a22114382c8df5dda"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.datatype",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-datatype-joda",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-datatype-joda:jackson_datatype_joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype_joda:jackson-datatype-joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype_joda:jackson_datatype_joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-datatype:jackson-datatype-joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-datatype:jackson_datatype_joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype:jackson-datatype-joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype:jackson_datatype_joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-datatype-joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_datatype_joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:datatype:jackson-datatype-joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:datatype:jackson_datatype_joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-datatype-joda:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-datatype-joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_datatype_joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype_joda:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-datatype:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:datatype:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-datatype-joda-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-datatype-joda"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.datatype"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-datatype-joda-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/jackson-jaxrs/jackson-jaxrs@1.9.13?package-id=a0b5009570576287",
      "cpe": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-jaxrs:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "534d72d2b9d6199dd531dfb27083dd4844082bba"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-jaxrs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson-jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson_jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson-jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson_jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jackson-jaxrs-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jackson-jaxrs-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-jaxrs/jackson-jaxrs@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.10.5?package-id=6369d0a870c2a52e",
      "cpe": "cpe:2.3:a:jackson-jaxrs-base:jackson-jaxrs-base:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2c0c330f121ca5396560a692113c8339f7aac9b5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.jaxrs",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-jaxrs-base",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-base:jackson_jaxrs_base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_base:jackson-jaxrs-base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_base:jackson_jaxrs_base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson-jaxrs-base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson_jaxrs_base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson-jaxrs-base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson_jaxrs_base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-jaxrs-base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_jaxrs_base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-base:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-jaxrs-base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_jaxrs_base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_base:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxrs:jackson-jaxrs-base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxrs:jackson_jaxrs_base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxrs:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-jaxrs-base-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-jaxrs-base"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.jaxrs"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-jaxrs-base-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.10.5?package-id=57336488185852b0",
      "cpe": "cpe:2.3:a:jackson-jaxrs-json-provider:jackson-jaxrs-json-provider:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e7be01e92f7ef9361118eef78f1974c5f778dd6a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.jaxrs",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-jaxrs-json-provider",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-json-provider:jackson_jaxrs_json_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_json_provider:jackson-jaxrs-json-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_json_provider:jackson_jaxrs_json_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-json:jackson-jaxrs-json-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-json:jackson_jaxrs_json_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_json:jackson-jaxrs-json-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_json:jackson_jaxrs_json_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson-jaxrs-json-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson_jaxrs_json_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson-jaxrs-json-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson_jaxrs_json_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-jaxrs-json-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_jaxrs_json_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-json-provider:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-jaxrs-json-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_jaxrs_json_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_json_provider:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxrs:jackson-jaxrs-json-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxrs:jackson_jaxrs_json_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-json:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_json:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxrs:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-jaxrs-json-provider-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-jaxrs-json-provider"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.jaxrs"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-jaxrs-json-provider-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-smile-provider@2.10.5?package-id=f251f6674a9f89b0",
      "cpe": "cpe:2.3:a:jackson-jaxrs-smile-provider:jackson-jaxrs-smile-provider:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4999ac1c1afaeec678d8ca0b220378a2e0e34d5b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.jaxrs",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-jaxrs-smile-provider",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-smile-provider:jackson_jaxrs_smile_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_smile_provider:jackson-jaxrs-smile-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_smile_provider:jackson_jaxrs_smile_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-smile:jackson-jaxrs-smile-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-smile:jackson_jaxrs_smile_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_smile:jackson-jaxrs-smile-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_smile:jackson_jaxrs_smile_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson-jaxrs-smile-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson_jaxrs_smile_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson-jaxrs-smile-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson_jaxrs_smile_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-jaxrs-smile-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_jaxrs_smile_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-smile-provider:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-jaxrs-smile-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_jaxrs_smile_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_smile_provider:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxrs:jackson-jaxrs-smile-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxrs:jackson_jaxrs_smile_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-smile:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_smile:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxrs:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-jaxrs-smile-provider-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-jaxrs-smile-provider"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.jaxrs"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-jaxrs-smile-provider-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-smile-provider@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/net.thisptr/jackson-jq@0.0.10?package-id=aadbf50a5fb1b728",
      "cpe": "cpe:2.3:a:jackson-jq:jackson-jq:0.0.10:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "46cb8029e744ac128d4ce58c944ab21ab7ef3e25"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.thisptr",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-jq",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jq:jackson_jq:0.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jq:jackson-jq:0.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jq:jackson_jq:0.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-jq:0.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_jq:0.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:thisptr:jackson-jq:0.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:thisptr:jackson_jq:0.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-jq-0.0.10.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-jq"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.thisptr"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-jq-0.0.10.jar"
        }
      ],
      "purl": "pkg:maven/net.thisptr/jackson-jq@0.0.10",
      "type": "library",
      "version": "0.0.10"
    },
    {
      "bom-ref": "pkg:maven/jackson-mapper-asl/jackson-mapper-asl@1.9.13?package-id=50a07768dad83d1c",
      "cpe": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-mapper-asl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper-asl:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper-asl:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper_asl:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper_asl:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jackson-mapper-asl-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jackson-mapper-asl-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-mapper-asl/jackson-mapper-asl@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/jackson-mapper-asl/jackson-mapper-asl@1.9.13?package-id=fcd6d348c5a9eb13",
      "cpe": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-mapper-asl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper-asl:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper-asl:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper_asl:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper_asl:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/jackson-mapper-asl-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/jackson-mapper-asl-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-mapper-asl/jackson-mapper-asl@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/jackson-mapper-asl/jackson-mapper-asl@1.9.13?package-id=e16e1148929ba043",
      "cpe": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-mapper-asl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper-asl:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper-asl:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper_asl:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper_asl:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/jackson-mapper-asl-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/jackson-mapper-asl-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-mapper-asl/jackson-mapper-asl@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/jackson-mapper-asl/jackson-mapper-asl@1.9.13?package-id=7e50ecb02fc00860",
      "cpe": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-mapper-asl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper-asl:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper-asl:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper_asl:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper_asl:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jackson-mapper-asl-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jackson-mapper-asl-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-mapper-asl/jackson-mapper-asl@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-guice@2.10.5?package-id=d6e75aa64e51f8c2",
      "cpe": "cpe:2.3:a:jackson-module-guice:jackson-module-guice:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "164b0b57c10aca54da56db811e965e8b22679af2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.module",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-module-guice",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module-guice:jackson_module_guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module_guice:jackson-module-guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module_guice:jackson_module_guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module:jackson-module-guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module:jackson_module_guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module:jackson-module-guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module:jackson_module_guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-module-guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_module_guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module-guice:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-module-guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_module_guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module_guice:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:module:jackson-module-guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:module:jackson_module_guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:module:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-module-guice-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-module-guice"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.module"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-module-guice-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-guice@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.10.5?package-id=1daa2bc12d8531ad",
      "cpe": "cpe:2.3:a:jackson-module-jaxb-annotations:jackson-module-jaxb-annotations:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f438b5eb66d15cbffca1497408b4cb379af9b068"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.module",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-module-jaxb-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module-jaxb-annotations:jackson_module_jaxb_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module_jaxb_annotations:jackson-module-jaxb-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module_jaxb_annotations:jackson_module_jaxb_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module-jaxb:jackson-module-jaxb-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module-jaxb:jackson_module_jaxb_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module_jaxb:jackson-module-jaxb-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module_jaxb:jackson_module_jaxb_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module:jackson-module-jaxb-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module:jackson_module_jaxb_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module:jackson-module-jaxb-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module:jackson_module_jaxb_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-module-jaxb-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_module_jaxb_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module-jaxb-annotations:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-module-jaxb-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_module_jaxb_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module_jaxb_annotations:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:module:jackson-module-jaxb-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:module:jackson_module_jaxb_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module-jaxb:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module_jaxb:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:module:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-module-jaxb-annotations-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-module-jaxb-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.module"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-module-jaxb-annotations-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/jackson-xc/jackson-xc@1.9.13?package-id=b9f17e70e6a7f1bf",
      "cpe": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-xc:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e3480072bc95c202476ffa1de99ff7ee9149f29c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-xc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_xc:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-xc:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_xc:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-xc:jackson-xc:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-xc:jackson_xc:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_xc:jackson-xc:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_xc:jackson_xc:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-xc:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_xc:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jackson-xc-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jackson-xc-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-xc/jackson-xc@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?package-id=66ef5c6a8a3b4eba",
      "cpe": "cpe:2.3:a:jakarta.activation-api:jakarta.activation-api:1.2.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "562a587face36ec7eff2db7f2fc95425c6602bc1"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "jakarta.activation",
      "licenses": [
        {
          "license": {
            "name": "http://www.eclipse.org/org/documents/edl-v10.php"
          }
        }
      ],
      "name": "jakarta.activation-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.activation-api:jakarta.activation_api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.activation_api:jakarta.activation-api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.activation_api:jakarta.activation_api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-foundation:jakarta.activation-api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-foundation:jakarta.activation_api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_foundation:jakarta.activation-api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_foundation:jakarta.activation_api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.activation:jakarta.activation-api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.activation:jakarta.activation_api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jakarta.activation-api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jakarta.activation_api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jakarta.activation-api-1.2.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jakarta.activation-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "jakarta.activation"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jakarta.activation-api-1.2.1.jar"
        }
      ],
      "purl": "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1",
      "type": "library",
      "version": "1.2.1"
    },
    {
      "bom-ref": "pkg:maven/org.glassfish/jakarta.el@3.0.4?package-id=c15a756141dbdd49",
      "cpe": "cpe:2.3:a:oracle-corporation:jakarta.el:3.0.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f48473482c0e3e714f87186d9305bcae30b7f5cb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.glassfish",
      "licenses": [
        {
          "license": {
            "name": "http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "name": "jakarta.el",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jakarta.el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:javax:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:javax:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.el:jakarta.el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:jakarta.el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.el:javax:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:jakarta.el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:javax:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jakarta.el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:el:jakarta.el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.el:el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:javax:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:javax:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:el:javax:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:el:el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jakarta.el-3.0.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jakarta.el"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.glassfish"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jakarta.el-3.0.4.jar"
        }
      ],
      "purl": "pkg:maven/org.glassfish/jakarta.el@3.0.4",
      "type": "library",
      "version": "3.0.4"
    },
    {
      "bom-ref": "pkg:maven/jakarta.inject/jakarta.inject-api@1.0.3?package-id=284bce6c5d3ba2aa",
      "cpe": "cpe:2.3:a:jakarta.inject-api:jakarta.inject-api:1.0.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "288f60226c596849c3c57926e8421c83b5abbe87"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "jakarta.inject",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jakarta.inject-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.inject-api:jakarta.inject_api:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.inject_api:jakarta.inject-api:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.inject_api:jakarta.inject_api:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.inject:jakarta.inject-api:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.inject:jakarta.inject_api:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jakarta.inject-api-1.0.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jakarta.inject-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "jakarta.inject"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jakarta.inject-api-1.0.3.jar"
        }
      ],
      "purl": "pkg:maven/jakarta.inject/jakarta.inject-api@1.0.3",
      "type": "library",
      "version": "1.0.3"
    },
    {
      "bom-ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.2?package-id=918d7804799dca84",
      "cpe": "cpe:2.3:a:jakarta.xml.bind-api:jakarta.xml.bind-api:2.3.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8d49996a4338670764d7ca4b85a1c4ccf7fe665d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "jakarta.xml.bind",
      "licenses": [
        {
          "license": {
            "name": "http://www.eclipse.org/org/documents/edl-v10.php"
          }
        }
      ],
      "name": "jakarta.xml.bind-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.xml.bind-api:jakarta.xml.bind_api:2.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.xml.bind_api:jakarta.xml.bind-api:2.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.xml.bind_api:jakarta.xml.bind_api:2.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jakarta.xml.bind-api:2.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jakarta.xml.bind_api:2.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jakarta.xml.bind-api:2.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jakarta.xml.bind_api:2.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.xml.bind:jakarta.xml.bind-api:2.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.xml.bind:jakarta.xml.bind_api:2.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jakarta.xml.bind-api-2.3.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jakarta.xml.bind-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "jakarta.xml.bind"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jakarta.xml.bind-api-2.3.2.jar"
        }
      ],
      "purl": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.2",
      "type": "library",
      "version": "2.3.2"
    },
    {
      "bom-ref": "pkg:maven/org.codehaus.janino/janino@3.0.11?package-id=381d15a855d7df5f",
      "cpe": "cpe:2.3:a:codehaus:janino:3.0.11:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e699e368095379ba0402ea1780a87fcaea16e68f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.codehaus.janino",
      "licenses": [
        {
          "license": {
            "name": "https://raw.githubusercontent.com/janino-compiler/janino/master/LICENSE"
          }
        }
      ],
      "name": "janino",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:janino:janino:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/janino-3.0.11.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "janino"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.codehaus.janino"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/janino-3.0.11.jar"
        }
      ],
      "purl": "pkg:maven/org.codehaus.janino/janino@3.0.11",
      "type": "library",
      "version": "3.0.11"
    },
    {
      "bom-ref": "pkg:rpm/rhel/java-11-openjdk-headless@11.0.24.0.8-2.el9?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.24.0.8-2.el9.src.rpm&distro=rhel-9.4&package-id=d2fe5777a83ac70c",
      "cpe": "cpe:2.3:a:java-11-openjdk-headless:java-11-openjdk-headless:1\\:11.0.24.0.8-2.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA"
          }
        }
      ],
      "name": "java-11-openjdk-headless",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java-11-openjdk-headless:java_11_openjdk_headless:1\\:11.0.24.0.8-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11_openjdk_headless:java-11-openjdk-headless:1\\:11.0.24.0.8-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11_openjdk_headless:java_11_openjdk_headless:1\\:11.0.24.0.8-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java-11-openjdk:java-11-openjdk-headless:1\\:11.0.24.0.8-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java-11-openjdk:java_11_openjdk_headless:1\\:11.0.24.0.8-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11_openjdk:java-11-openjdk-headless:1\\:11.0.24.0.8-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11_openjdk:java_11_openjdk_headless:1\\:11.0.24.0.8-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java-11:java-11-openjdk-headless:1\\:11.0.24.0.8-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java-11:java_11_openjdk_headless:1\\:11.0.24.0.8-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11:java-11-openjdk-headless:1\\:11.0.24.0.8-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11:java_11_openjdk_headless:1\\:11.0.24.0.8-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:java-11-openjdk-headless:1\\:11.0.24.0.8-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:java_11_openjdk_headless:1\\:11.0.24.0.8-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:java-11-openjdk-headless:1\\:11.0.24.0.8-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:java_11_openjdk_headless:1\\:11.0.24.0.8-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "1"
        },
        {
          "name": "syft:metadata:release",
          "value": "2.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "184656972"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "java-11-openjdk-11.0.24.0.8-2.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/java-11-openjdk-headless@11.0.24.0.8-2.el9?arch=aarch64&epoch=1&upstream=java-11-openjdk-11.0.24.0.8-2.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1:11.0.24.0.8-2.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/javapackages-filesystem@6.0.0-4.el9?arch=noarch&upstream=javapackages-tools-6.0.0-4.el9.src.rpm&distro=rhel-9.4&package-id=aeae8daae3e63a11",
      "cpe": "cpe:2.3:a:javapackages-filesystem:javapackages-filesystem:6.0.0-4.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "javapackages-filesystem",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javapackages-filesystem:javapackages_filesystem:6.0.0-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javapackages_filesystem:javapackages-filesystem:6.0.0-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javapackages_filesystem:javapackages_filesystem:6.0.0-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javapackages:javapackages-filesystem:6.0.0-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javapackages:javapackages_filesystem:6.0.0-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:javapackages-filesystem:6.0.0-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:javapackages_filesystem:6.0.0-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "4.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "1932"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "javapackages-tools-6.0.0-4.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/javapackages-filesystem@6.0.0-4.el9?arch=noarch&upstream=javapackages-tools-6.0.0-4.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "6.0.0-4.el9"
    },
    {
      "bom-ref": "pkg:maven/com.sun.activation/javax.activation@1.2.0?package-id=d2721b0056775b40",
      "cpe": "cpe:2.3:a:javax.activation:javax.activation:1.2.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bf744c1e2776ed1de3c55c8dac1057ec331ef744"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.activation",
      "licenses": [
        {
          "license": {
            "name": "https://github.com/javaee/activation/blob/master/LICENSE.txt"
          }
        }
      ],
      "name": "javax.activation",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:activation:javax.activation:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.activation:activation:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:javax.activation:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.activation:javax:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:javax.activation:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:activation:activation:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:javax.activation:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:activation:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:activation:javax:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:activation:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:activation:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:javax:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:javax:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:javax:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/javax.activation-1.2.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "javax.activation"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.activation"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/javax.activation-1.2.0.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.activation/javax.activation@1.2.0",
      "type": "library",
      "version": "1.2.0"
    },
    {
      "bom-ref": "pkg:maven/javax.activation/javax.activation-api@1.2.0?package-id=8c2191949e0c7128",
      "cpe": "cpe:2.3:a:javax.activation-api:javax.activation-api:1.2.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "85262acf3ca9816f9537ca47d5adeabaead7cb16"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "javax.activation",
      "licenses": [
        {
          "license": {
            "name": "https://github.com/javaee/activation/blob/master/LICENSE.txt"
          }
        }
      ],
      "name": "javax.activation-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.activation-api:javax.activation_api:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.activation_api:javax.activation-api:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.activation_api:javax.activation_api:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.activation:javax.activation-api:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.activation:javax.activation_api:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:javax.activation-api:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:javax.activation_api:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:javax.activation-api:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:javax.activation_api:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/javax.activation-api-1.2.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "javax.activation-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "javax.activation"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/javax.activation-api-1.2.0.jar"
        }
      ],
      "purl": "pkg:maven/javax.activation/javax.activation-api@1.2.0",
      "type": "library",
      "version": "1.2.0"
    },
    {
      "bom-ref": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?package-id=5298f7a8400155fe",
      "cpe": "cpe:2.3:a:javax.annotation-api:javax.annotation-api:1.3.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "934c04d3cfef185a8008e7bf34331b79730a9d43"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "javax.annotation",
      "licenses": [
        {
          "license": {
            "name": "https://github.com/javaee/javax.annotation/blob/master/LICENSE"
          }
        }
      ],
      "name": "javax.annotation-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation-api:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation_api:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation_api:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish-community:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish-community:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish_community:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish_community:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/javax.annotation-api-1.3.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "javax.annotation-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "javax.annotation"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/javax.annotation-api-1.3.2.jar"
        }
      ],
      "purl": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2",
      "type": "library",
      "version": "1.3.2"
    },
    {
      "bom-ref": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?package-id=276479aff8ef1ab3",
      "cpe": "cpe:2.3:a:javax.annotation-api:javax.annotation-api:1.3.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "934c04d3cfef185a8008e7bf34331b79730a9d43"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "javax.annotation",
      "licenses": [
        {
          "license": {
            "name": "https://github.com/javaee/javax.annotation/blob/master/LICENSE"
          }
        }
      ],
      "name": "javax.annotation-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation-api:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation_api:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation_api:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish-community:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish-community:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish_community:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish_community:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/javax.annotation-api-1.3.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "javax.annotation-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "javax.annotation"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/javax.annotation-api-1.3.2.jar"
        }
      ],
      "purl": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2",
      "type": "library",
      "version": "1.3.2"
    },
    {
      "bom-ref": "pkg:maven/javax.el/javax.el-api@3.0.0?package-id=54209547d7f825c7",
      "cpe": "cpe:2.3:a:oracle-corporation:javax.el-api:3.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "60a59edc89f93d57541da31ee1c83428ab1cdcb3"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "javax.el",
      "licenses": [
        {
          "license": {
            "name": "https://glassfish.dev.java.net/nonav/public/CDDL+GPL.html"
          }
        }
      ],
      "name": "javax.el-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:javax.el_api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:javax.el-api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:javax.el_api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.el-api:javax.el-api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.el-api:javax.el_api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.el_api:javax.el-api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.el_api:javax.el_api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.el:javax.el-api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.el:javax.el_api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/javax.el-api-3.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "javax.el-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "javax.el"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/javax.el-api-3.0.0.jar"
        }
      ],
      "purl": "pkg:maven/javax.el/javax.el-api@3.0.0",
      "type": "library",
      "version": "3.0.0"
    },
    {
      "bom-ref": "pkg:maven/com.sun.mail/javax.mail@1.6.1?package-id=6dfb221ddf9ebdbc",
      "cpe": "cpe:2.3:a:javax.mail:javax.mail:1.6.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "757ba4630692bb2a1ec2d9d57a616b63f15e947e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.mail",
      "licenses": [
        {
          "license": {
            "name": "https://javaee.github.io/javamail/LICENSE"
          }
        }
      ],
      "name": "javax.mail",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:javax.mail:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.mail:javax:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:javax.mail:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.mail:mail:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mail:javax.mail:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:javax.mail:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:javax:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:javax:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:mail:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:mail:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mail:javax:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mail:mail:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:javax:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:mail:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/javax.mail-1.6.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "javax.mail"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.mail"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/javax.mail-1.6.1.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.mail/javax.mail@1.6.1",
      "type": "library",
      "version": "1.6.1"
    },
    {
      "bom-ref": "pkg:maven/javax.servlet/javax.servlet-api@3.1.0?package-id=781d04f4a9364984",
      "cpe": "cpe:2.3:a:glassfish-community:javax.servlet-api:3.1.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3cd63d075497751784b2fa84be59432f4905bf7c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "javax.servlet",
      "licenses": [
        {
          "license": {
            "name": "https://glassfish.dev.java.net/nonav/public/CDDL+GPL.html"
          }
        }
      ],
      "name": "javax.servlet-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish-community:javax.servlet_api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish_community:javax.servlet-api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish_community:javax.servlet_api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:javax.servlet-api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:javax.servlet_api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:javax.servlet-api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:javax.servlet_api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.servlet-api:javax.servlet-api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.servlet-api:javax.servlet_api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.servlet_api:javax.servlet-api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.servlet_api:javax.servlet_api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.servlet:javax.servlet-api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.servlet:javax.servlet_api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:javax.servlet-api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:javax.servlet_api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/javax.servlet-api-3.1.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "javax.servlet-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "javax.servlet"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/javax.servlet-api-3.1.0.jar"
        }
      ],
      "purl": "pkg:maven/javax.servlet/javax.servlet-api@3.1.0",
      "type": "library",
      "version": "3.1.0"
    },
    {
      "bom-ref": "pkg:maven/jaxb-api/jaxb-api@2.2.2?package-id=3321b95a9f43282b",
      "cpe": "cpe:2.3:a:sun-microsystems\\,-inc-:jaxb-api:2.2.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "aeb3021ca93dde265796d82015beecdcff95bf09"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CDDL-1.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        }
      ],
      "name": "jaxb-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun-microsystems\\,-inc-:jaxb_api:2.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun_microsystems\\,_inc_:jaxb-api:2.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun_microsystems\\,_inc_:jaxb_api:2.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb-api:jaxb-api:2.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb-api:jaxb_api:2.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb_api:jaxb-api:2.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb_api:jaxb_api:2.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb:jaxb-api:2.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb:jaxb_api:2.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jaxb-api-2.2.2.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jaxb-api-2.2.2.jar"
        }
      ],
      "purl": "pkg:maven/jaxb-api/jaxb-api@2.2.2",
      "type": "library",
      "version": "2.2.2"
    },
    {
      "bom-ref": "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?package-id=89d433461724d500",
      "cpe": "cpe:2.3:a:oracle-corporation:jaxb-api:2.3.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8531ad5ac454cc2deb9d4d32c40c4d7451939b5d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "javax.xml.bind",
      "licenses": [
        {
          "license": {
            "name": "https://oss.oracle.com/licenses/CDDL+GPL-1.1, https://oss.oracle.com/licenses/CDDL+GPL-1.1"
          }
        }
      ],
      "name": "jaxb-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jaxb_api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jaxb-api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jaxb_api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:jaxb-api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:jaxb_api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb-api:jaxb-api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb-api:jaxb_api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb_api:jaxb-api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb_api:jaxb_api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb:jaxb-api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb:jaxb_api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jaxb-api-2.3.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jaxb-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "javax.xml.bind"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jaxb-api-2.3.1.jar"
        }
      ],
      "purl": "pkg:maven/javax.xml.bind/jaxb-api@2.3.1",
      "type": "library",
      "version": "2.3.1"
    },
    {
      "bom-ref": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.1?package-id=9b42b789378764f9",
      "cpe": "cpe:2.3:a:jaxb-runtime:jaxb-runtime:2.3.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "dd6dda9da676a54c5b36ca2806ff95ee017d8738"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.glassfish.jaxb",
      "name": "jaxb-runtime",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb-runtime:jaxb_runtime:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb_runtime:jaxb-runtime:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb_runtime:jaxb_runtime:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:jaxb-runtime:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:jaxb_runtime:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:jaxb-runtime:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:jaxb_runtime:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb-runtime:jaxb:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb:jaxb-runtime:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb:jaxb_runtime:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb_runtime:jaxb:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:jaxb:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:jaxb:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb:jaxb:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jaxb-runtime-2.3.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jaxb-runtime"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.glassfish.jaxb"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jaxb-runtime-2.3.1.jar"
        }
      ],
      "purl": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.1",
      "type": "library",
      "version": "2.3.1"
    },
    {
      "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.2.1.Final?package-id=a9a531f30a182806",
      "cpe": "cpe:2.3:a:jboss-by-red-hat:jboss-logging:3.2.1.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "fedf11b3d4665a434b554a5891fe7f208f029f45"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.jboss.logging",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jboss-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss-by-red-hat:jboss_logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss_by_red_hat:jboss-logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss_by_red_hat:jboss_logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss-logging:jboss-logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss-logging:jboss_logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss_logging:jboss-logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss_logging:jboss_logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss-by-red-hat:logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss_by_red_hat:logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss-logging:logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss_logging:logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:logging:jboss-logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:logging:jboss_logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss:jboss-logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss:jboss_logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:logging:logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss:logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jboss-logging-3.2.1.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jboss-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.jboss.logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jboss-logging-3.2.1.Final.jar"
        }
      ],
      "purl": "pkg:maven/org.jboss.logging/jboss-logging@3.2.1.Final",
      "type": "library",
      "version": "3.2.1.Final"
    },
    {
      "bom-ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?package-id=b04e5e8d8ad53e42",
      "cpe": "cpe:2.3:a:jcip-annotations:jcip-annotations:1.0-1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ef31541dd28ae2cefdd17c7ebf352d93e9058c63"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.github.stephenc.jcip",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jcip-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip-annotations:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip_annotations:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip_annotations:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stephenc:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stephenc:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip-annotations:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip_annotations:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stephenc:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jcip-annotations-1.0-1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jcip-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.github.stephenc.jcip"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jcip-annotations-1.0-1.jar"
        }
      ],
      "purl": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1",
      "type": "library",
      "version": "1.0-1"
    },
    {
      "bom-ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?package-id=f92c7d556bd83391",
      "cpe": "cpe:2.3:a:jcip-annotations:jcip-annotations:1.0-1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ef31541dd28ae2cefdd17c7ebf352d93e9058c63"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.github.stephenc.jcip",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jcip-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip-annotations:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip_annotations:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip_annotations:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stephenc:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stephenc:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip-annotations:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip_annotations:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stephenc:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/jcip-annotations-1.0-1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jcip-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.github.stephenc.jcip"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/jcip-annotations-1.0-1.jar"
        }
      ],
      "purl": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1",
      "type": "library",
      "version": "1.0-1"
    },
    {
      "bom-ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?package-id=a3a824e407c5d63a",
      "cpe": "cpe:2.3:a:jcip-annotations:jcip-annotations:1.0-1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ef31541dd28ae2cefdd17c7ebf352d93e9058c63"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.github.stephenc.jcip",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jcip-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip-annotations:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip_annotations:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip_annotations:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stephenc:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stephenc:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip-annotations:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip_annotations:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stephenc:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jcip-annotations-1.0-1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jcip-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.github.stephenc.jcip"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jcip-annotations-1.0-1.jar"
        }
      ],
      "purl": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1",
      "type": "library",
      "version": "1.0-1"
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?package-id=b80ee394c816e862",
      "cpe": "cpe:2.3:a:apache:jcl-over-slf4j:1.7.36:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d877e195a05aca4a2f1ad2ff14bfec1393af4b5e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.slf4j",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jcl-over-slf4j",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:jcl_over_slf4j:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jcl-over-slf4j-1.7.36.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jcl-over-slf4j"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jcl-over-slf4j-1.7.36.jar"
        }
      ],
      "purl": "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36",
      "type": "library",
      "version": "1.7.36"
    },
    {
      "bom-ref": "pkg:maven/org.jruby.jcodings/jcodings@1.0.43?package-id=1f07d5279e16b0fe",
      "cpe": "cpe:2.3:a:jcodings:jcodings:1.0.43:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d60d3f8ccefd848d551d25bcb7f3e9251333648b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.jruby.jcodings",
      "licenses": [
        {
          "license": {
            "name": "MIT License",
            "url": "http://www.opensource.org/licenses/mit-license.php"
          }
        }
      ],
      "name": "jcodings",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jruby:jcodings:1.0.43:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jcodings-1.0.43.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jcodings"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.jruby.jcodings"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jcodings-1.0.43.jar"
        }
      ],
      "purl": "pkg:maven/org.jruby.jcodings/jcodings@1.0.43",
      "type": "library",
      "version": "1.0.43"
    },
    {
      "bom-ref": "pkg:maven/org.jctools/jctools-core@4.0.5?package-id=ca7870cd239f3a60",
      "cpe": "cpe:2.3:a:jctools-core:jctools-core:4.0.5:*:*:*:*:*:*:*",
      "group": "org.jctools",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jctools-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jctools-core:jctools_core:4.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jctools_core:jctools-core:4.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jctools_core:jctools_core:4.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jctools:jctools-core:4.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jctools:jctools_core:4.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-common-4.1.111.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jctools-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.jctools"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-common-4.1.111.Final.jar:org.jctools:jctools-core"
        }
      ],
      "purl": "pkg:maven/org.jctools/jctools-core@4.0.5",
      "type": "library",
      "version": "4.0.5"
    },
    {
      "bom-ref": "pkg:maven/org.jdbi/jdbi@2.63.1?package-id=31128b1d4b55a1c3",
      "cpe": "cpe:2.3:a:jdbi:jdbi:2.63.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e9cb36b5954d1af1593bbc4fecadfa5cb170bd44"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.jdbi",
      "licenses": [
        {
          "license": {
            "name": "Apache License 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "name": "jdbi",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jdbi-2.63.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jdbi"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.jdbi"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jdbi-2.63.1.jar"
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi@2.63.1",
      "type": "library",
      "version": "2.63.1"
    },
    {
      "bom-ref": "pkg:maven/com.sun.jersey/jersey-client@1.19.4?package-id=4bcdf49c00d9e5a8",
      "cpe": "cpe:2.3:a:oracle-corporation:jersey-client:1.19.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9b1f3cf3fdd02d313018f1a67c42106e6ce9f60d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.jersey",
      "licenses": [
        {
          "license": {
            "name": "http://glassfish.java.net/public/CDDL+GPL_1_1.html, http://glassfish.java.net/public/CDDL+GPL_1_1.html"
          }
        }
      ],
      "name": "jersey-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey_client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey-client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey_client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-client:jersey-client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-client:jersey_client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_client:jersey-client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_client:jersey_client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:jersey-client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:jersey_client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-client:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey-client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey_client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_client:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey-client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey_client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/jersey-client-1.19.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jersey-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.jersey"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/jersey-client-1.19.4.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.jersey/jersey-client@1.19.4",
      "type": "library",
      "version": "1.19.4"
    },
    {
      "bom-ref": "pkg:maven/com.sun.jersey/jersey-client@1.9?package-id=4e06f89610f61600",
      "cpe": "cpe:2.3:a:oracle-corporation:jersey-client:1.9:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d3c4b2b5f89db32c96ceddcb863684821910a7bb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.jersey",
      "licenses": [
        {
          "license": {
            "name": "http://glassfish.java.net/public/CDDL+GPL_1_1.html, http://glassfish.java.net/public/CDDL+GPL_1_1.html"
          }
        }
      ],
      "name": "jersey-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey_client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey-client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey_client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-client:jersey-client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-client:jersey_client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_client:jersey-client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_client:jersey_client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:jersey-client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:jersey_client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:jersey-client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:jersey_client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-client:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey-client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey_client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_client:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:jersey-client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:jersey_client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey-client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey_client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jersey-client-1.9.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jersey-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.jersey"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jersey-client-1.9.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.jersey/jersey-client@1.9",
      "type": "library",
      "version": "1.9"
    },
    {
      "bom-ref": "pkg:maven/com.sun.jersey/jersey-core@1.19.4?package-id=3250ebc98ff7dc77",
      "cpe": "cpe:2.3:a:oracle-corporation:jersey-core:1.19.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "21c5319c82ca29705715b315553a16f11b16655e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.jersey",
      "licenses": [
        {
          "license": {
            "name": "http://glassfish.java.net/public/CDDL+GPL_1_1.html, http://glassfish.java.net/public/CDDL+GPL_1_1.html"
          }
        }
      ],
      "name": "jersey-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey_core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey-core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey_core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-core:jersey-core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-core:jersey_core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_core:jersey-core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_core:jersey_core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:jersey-core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:jersey_core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-core:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey-core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey_core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_core:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jersey-core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jersey_core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-core:core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_core:core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:jersey-core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:jersey_core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey-core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey_core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jersey-core-1.19.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jersey-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.jersey"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jersey-core-1.19.4.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.jersey/jersey-core@1.19.4",
      "type": "library",
      "version": "1.19.4"
    },
    {
      "bom-ref": "pkg:maven/com.sun.jersey/jersey-core@1.9?package-id=a4048926fa9f3da3",
      "cpe": "cpe:2.3:a:oracle-corporation:jersey-core:1.9:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8341846f18187013bb9e27e46b7ee00a6395daf4"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.jersey",
      "licenses": [
        {
          "license": {
            "name": "http://glassfish.java.net/public/CDDL+GPL_1_1.html, http://glassfish.java.net/public/CDDL+GPL_1_1.html"
          }
        }
      ],
      "name": "jersey-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey_core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey-core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey_core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-core:jersey-core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-core:jersey_core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_core:jersey-core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_core:jersey_core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:jersey-core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:jersey_core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-core:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey-core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey_core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_core:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jersey-core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jersey_core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-core:core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_core:core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:jersey-core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:jersey_core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey-core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey_core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jersey-core-1.9.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jersey-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.jersey"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jersey-core-1.9.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.jersey/jersey-core@1.9",
      "type": "library",
      "version": "1.9"
    },
    {
      "bom-ref": "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.19.4?package-id=f50b2190bc1b3ac5",
      "cpe": "cpe:2.3:a:oracle-corporation:jersey-guice:1.19.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "fc5cdccdeeedb067b8b2a3c7df2907dfb7e8a1b9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.jersey.contribs",
      "licenses": [
        {
          "license": {
            "name": "http://glassfish.java.net/public/CDDL+GPL_1_1.html, http://glassfish.java.net/public/CDDL+GPL_1_1.html"
          }
        }
      ],
      "name": "jersey-guice",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey_guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey-guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey_guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-guice:jersey-guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-guice:jersey_guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_guice:jersey-guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_guice:jersey_guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:contribs:jersey-guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:contribs:jersey_guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-guice:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey-guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey_guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_guice:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey-guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey_guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:contribs:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jersey-guice-1.19.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jersey-guice"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.jersey.contribs"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jersey-guice-1.19.4.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.19.4",
      "type": "library",
      "version": "1.19.4"
    },
    {
      "bom-ref": "pkg:maven/com.sun.jersey/jersey-server@1.19.4?package-id=e6087b102d7360eb",
      "cpe": "cpe:2.3:a:oracle-corporation:jersey-server:1.19.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "44df9a1310c1278b62658509aca3ca53978e8822"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.jersey",
      "licenses": [
        {
          "license": {
            "name": "http://glassfish.java.net/public/CDDL+GPL_1_1.html, http://glassfish.java.net/public/CDDL+GPL_1_1.html"
          }
        }
      ],
      "name": "jersey-server",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey_server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey-server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey_server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-server:jersey-server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-server:jersey_server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_server:jersey-server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_server:jersey_server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-server:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey-server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey_server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_server:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey-server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey_server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jersey-server-1.19.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jersey-server"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.jersey"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jersey-server-1.19.4.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.jersey/jersey-server@1.19.4",
      "type": "library",
      "version": "1.19.4"
    },
    {
      "bom-ref": "pkg:maven/com.sun.jersey/jersey-servlet@1.19.4?package-id=fe4e6e62dc4b01c5",
      "cpe": "cpe:2.3:a:oracle-corporation:jersey-servlet:1.19.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "fbdcb39db6a6976944a621fe11bf1d2ff048d7c2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.jersey",
      "licenses": [
        {
          "license": {
            "name": "http://glassfish.java.net/public/CDDL+GPL_1_1.html, http://glassfish.java.net/public/CDDL+GPL_1_1.html"
          }
        }
      ],
      "name": "jersey-servlet",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey_servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey-servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey_servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-servlet:jersey-servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-servlet:jersey_servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_servlet:jersey-servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_servlet:jersey_servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-servlet:servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_servlet:servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:jersey-servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:jersey_servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-servlet:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey-servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey_servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_servlet:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey-servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey_servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jersey-servlet-1.19.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jersey-servlet"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.jersey"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jersey-servlet-1.19.4.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.jersey/jersey-servlet@1.19.4",
      "type": "library",
      "version": "1.19.4"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.54.v20240208?package-id=875a59ad7650f79d",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-client:9.4.54.v20240208:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "43674b6a6f7aa249f145728002d00f3f220e88be"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_client:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-client:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_client:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-client:jetty-client:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-client:jetty_client:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_client:jetty-client:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_client:jetty_client:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-client:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_client:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:jetty-client:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:jetty_client:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-client:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-client:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_client:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_client:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-client-9.4.54.v20240208.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-client-9.4.54.v20240208.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.54.v20240208",
      "type": "library",
      "version": "9.4.54.v20240208"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.54.v20240208?package-id=3184d9090fc2afcd",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-continuation:9.4.54.v20240208:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "825633efcd0952221bf54b036c069218e9a3b20f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-continuation",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_continuation:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-continuation:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_continuation:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-continuation:jetty-continuation:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-continuation:jetty_continuation:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_continuation:jetty-continuation:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_continuation:jetty_continuation:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:continuation:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:continuation:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:continuation:jetty-continuation:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:continuation:jetty_continuation:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-continuation:continuation:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_continuation:continuation:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-continuation:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_continuation:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:continuation:continuation:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-continuation:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-continuation:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_continuation:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_continuation:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:continuation:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:continuation:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:continuation:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-continuation-9.4.54.v20240208.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-continuation"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-continuation-9.4.54.v20240208.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.54.v20240208",
      "type": "library",
      "version": "9.4.54.v20240208"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-http@9.4.54.v20240208?package-id=defaaca8a1a28480",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-http:9.4.54.v20240208:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a641b8a694eeefdde64404011471710e51352276"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-http",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_http:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-http:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_http:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:http:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:http:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-http:jetty-http:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-http:jetty_http:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_http:jetty-http:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_http:jetty_http:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-http:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_http:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-http:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-http:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_http:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_http:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:jetty-http:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:jetty_http:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-http:http:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_http:http:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:http:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:http:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:http:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-http-9.4.54.v20240208.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-http"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-http-9.4.54.v20240208.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-http@9.4.54.v20240208",
      "type": "library",
      "version": "9.4.54.v20240208"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-io@9.4.54.v20240208?package-id=f12da16c1aa1b4ce",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-io:9.4.54.v20240208:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "389cb96fc6963b0aa13954164ed0b1c54bf87462"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-io",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_io:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-io:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_io:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:io:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:io:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-io:jetty-io:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-io:jetty_io:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_io:jetty-io:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_io:jetty_io:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-io:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_io:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-io:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-io:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_io:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_io:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io:jetty-io:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io:jetty_io:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-io:io:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_io:io:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:io:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:io:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io:io:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-io-9.4.54.v20240208.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-io"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-io-9.4.54.v20240208.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-io@9.4.54.v20240208",
      "type": "library",
      "version": "9.4.54.v20240208"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.54.v20240208?package-id=04e57e4c4a0a4dcd",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-proxy:9.4.54.v20240208:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "19dc8ba4abf3a17af8eb57dcd499d0834a84f29e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-proxy",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_proxy:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-proxy:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_proxy:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:proxy:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:proxy:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-proxy:jetty-proxy:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-proxy:jetty_proxy:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_proxy:jetty-proxy:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_proxy:jetty_proxy:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-proxy:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_proxy:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-proxy:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-proxy:proxy:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-proxy:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_proxy:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_proxy:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_proxy:proxy:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy:jetty-proxy:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy:jetty_proxy:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:proxy:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:proxy:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy:proxy:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-proxy-9.4.54.v20240208.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-proxy"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-proxy-9.4.54.v20240208.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.54.v20240208",
      "type": "library",
      "version": "9.4.54.v20240208"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-rewrite@9.4.54.v20240208?package-id=d8d3f59d03725316",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-rewrite:9.4.54.v20240208:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cfe7152bf15294684dc1c2ec4f0b0ca80798644b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-rewrite",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_rewrite:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-rewrite:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_rewrite:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:rewrite:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:rewrite:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-rewrite:jetty-rewrite:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-rewrite:jetty_rewrite:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_rewrite:jetty-rewrite:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_rewrite:jetty_rewrite:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-rewrite:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_rewrite:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-rewrite:rewrite:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_rewrite:rewrite:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rewrite:jetty-rewrite:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rewrite:jetty_rewrite:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-rewrite:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-rewrite:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_rewrite:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_rewrite:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:rewrite:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rewrite:rewrite:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:rewrite:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rewrite:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-rewrite-9.4.54.v20240208.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-rewrite"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-rewrite-9.4.54.v20240208.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-rewrite@9.4.54.v20240208",
      "type": "library",
      "version": "9.4.54.v20240208"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-security@9.4.54.v20240208?package-id=f10938ee07fa3824",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-security:9.4.54.v20240208:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7bf0247b413feefce4a18f50c68d7b9e41beaf30"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-security",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_security:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-security:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_security:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:security:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:security:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-security:jetty-security:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-security:jetty_security:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_security:jetty-security:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_security:jetty_security:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-security:security:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_security:security:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:jetty-security:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:jetty_security:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-security:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_security:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-security:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-security:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_security:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_security:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:security:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:security:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:security:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-security-9.4.54.v20240208.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-security"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-security-9.4.54.v20240208.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-security@9.4.54.v20240208",
      "type": "library",
      "version": "9.4.54.v20240208"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.54.v20240208?package-id=7cf395aa314aa592",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-server:9.4.54.v20240208:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "13d439d8a5d8b1ec936f9d6f90dbdd46fcb01820"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-server",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_server:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-server:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_server:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:server:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:server:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-server:jetty-server:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-server:jetty_server:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_server:jetty-server:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_server:jetty_server:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-server:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_server:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-server:server:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_server:server:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:server:jetty-server:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:server:jetty_server:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-server:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-server:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_server:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_server:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:server:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:server:server:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:server:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:server:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-server-9.4.54.v20240208.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-server"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-server-9.4.54.v20240208.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.54.v20240208",
      "type": "library",
      "version": "9.4.54.v20240208"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.54.v20240208?package-id=e135ace4a554493a",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-servlet:9.4.54.v20240208:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "265cdb2c48345ff3c661a15873abbf4c7e4c8300"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-servlet",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_servlet:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-servlet:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_servlet:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:servlet:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:servlet:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-servlet:jetty-servlet:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-servlet:jetty_servlet:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_servlet:jetty-servlet:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_servlet:jetty_servlet:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-servlet:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_servlet:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-servlet:servlet:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_servlet:servlet:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:jetty-servlet:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:jetty_servlet:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-servlet:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-servlet:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_servlet:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_servlet:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:servlet:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:servlet:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:servlet:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-servlet-9.4.54.v20240208.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-servlet"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-servlet-9.4.54.v20240208.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.54.v20240208",
      "type": "library",
      "version": "9.4.54.v20240208"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.54.v20240208?package-id=665afd46fbdcd2f9",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-servlets:9.4.54.v20240208:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "27ebb82b6b96ebbaee209ccc83f33ef683cc9913"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-servlets",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_servlets:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-servlets:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_servlets:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:servlets:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:servlets:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-servlets:jetty-servlets:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-servlets:jetty_servlets:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_servlets:jetty-servlets:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_servlets:jetty_servlets:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-servlets:servlets:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_servlets:servlets:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlets:jetty-servlets:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlets:jetty_servlets:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-servlets:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_servlets:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-servlets:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-servlets:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_servlets:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_servlets:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlets:servlets:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:servlets:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:servlets:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlets:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-servlets-9.4.54.v20240208.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-servlets"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-servlets-9.4.54.v20240208.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.54.v20240208",
      "type": "library",
      "version": "9.4.54.v20240208"
    },
    {
      "bom-ref": "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?package-id=e11fc2e705307513",
      "cpe": "cpe:2.3:a:jetty-sslengine:jetty-sslengine:6.1.26:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "60367999cee49a3b09fa86bdcb52310b6c896014"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.mortbay.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "jetty-sslengine",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-sslengine:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_sslengine:jetty-sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_sslengine:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:jetty-sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:jetty-sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-sslengine:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_sslengine:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jetty-sslengine-6.1.26.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-sslengine"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.mortbay.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jetty-sslengine-6.1.26.jar"
        }
      ],
      "purl": "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26",
      "type": "library",
      "version": "6.1.26"
    },
    {
      "bom-ref": "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?package-id=56205b9fd66b61ee",
      "cpe": "cpe:2.3:a:jetty-sslengine:jetty-sslengine:6.1.26:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "60367999cee49a3b09fa86bdcb52310b6c896014"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.mortbay.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "jetty-sslengine",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-sslengine:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_sslengine:jetty-sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_sslengine:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:jetty-sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:jetty-sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-sslengine:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_sslengine:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jetty-sslengine-6.1.26.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-sslengine"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.mortbay.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jetty-sslengine-6.1.26.jar"
        }
      ],
      "purl": "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26",
      "type": "library",
      "version": "6.1.26"
    },
    {
      "bom-ref": "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?package-id=787c8fe2be92a58e",
      "cpe": "cpe:2.3:a:jetty-util:jetty-util:6.1.26:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e5642fe0399814e1687d55a3862aa5a3417226a9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.mortbay.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, http://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-util",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:jetty_util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:jetty-util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:jetty_util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:jetty-util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:jetty_util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:jetty-util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:jetty_util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jetty-util-6.1.26.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-util"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.mortbay.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jetty-util-6.1.26.jar"
        }
      ],
      "purl": "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26",
      "type": "library",
      "version": "6.1.26"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-util@9.4.54.v20240208?package-id=9ad384965ef550b6",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-util:9.4.54.v20240208:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8da375769a8fe4a32ec52cc2c9ac68f1eb843588"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-util",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_util:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-util:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_util:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:util:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:util:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:jetty-util:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:jetty_util:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:jetty-util:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:jetty_util:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-util:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_util:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-util:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_util:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:util:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:util:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:jetty-util:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:jetty_util:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:util:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:util:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:util:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-util-9.4.54.v20240208.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-util"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-util-9.4.54.v20240208.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-util@9.4.54.v20240208",
      "type": "library",
      "version": "9.4.54.v20240208"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.54.v20240208?package-id=c4bb865f135d75fc",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-util-ajax:9.4.54.v20240208:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "973ad9c3e01c2ffae3571a85a3c82c3fb5cab18d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-util-ajax",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_util_ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-util-ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_util_ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util-ajax:jetty-util-ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util-ajax:jetty_util_ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util_ajax:jetty-util-ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util_ajax:jetty_util_ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:jetty-util-ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:jetty_util_ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:jetty-util-ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:jetty_util_ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-util-ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_util_ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util-ajax:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-util-ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_util_ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util_ajax:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajax:jetty-util-ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajax:jetty_util_ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util-ajax:ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util_ajax:ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:jetty-util-ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:jetty_util_ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajax:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:jetty:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajax:ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:ajax:9.4.54.v20240208:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-util-ajax-9.4.54.v20240208.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-util-ajax"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-util-ajax-9.4.54.v20240208.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.54.v20240208",
      "type": "library",
      "version": "9.4.54.v20240208"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/jmespath-java@1.12.754?package-id=3c777590de13b3d7",
      "cpe": "cpe:2.3:a:jmespath-java:jmespath-java:1.12.754:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "579c460a379bc4984f2e60b278a8220892a55800"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "https://aws.amazon.com/apache2.0"
          }
        }
      ],
      "name": "jmespath-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath-java:jmespath_java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath_java:jmespath-java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath_java:jmespath_java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:jmespath-java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:jmespath_java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath:jmespath-java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath:jmespath_java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/jmespath-java-1.12.754.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jmespath-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/jmespath-java-1.12.754.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/jmespath-java@1.12.754",
      "type": "library",
      "version": "1.12.754"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/jmespath-java@1.12.754?package-id=027312f65bbed3e0",
      "cpe": "cpe:2.3:a:jmespath-java:jmespath-java:1.12.754:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "579c460a379bc4984f2e60b278a8220892a55800"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "https://aws.amazon.com/apache2.0"
          }
        }
      ],
      "name": "jmespath-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath-java:jmespath_java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath_java:jmespath-java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath_java:jmespath_java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:jmespath-java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:jmespath_java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath:jmespath-java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath:jmespath_java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jmespath-java-1.12.754.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jmespath-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jmespath-java-1.12.754.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/jmespath-java@1.12.754",
      "type": "library",
      "version": "1.12.754"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/jmespath-java@1.12.754?package-id=c65d4027defa2552",
      "cpe": "cpe:2.3:a:jmespath-java:jmespath-java:1.12.754:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "579c460a379bc4984f2e60b278a8220892a55800"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "https://aws.amazon.com/apache2.0"
          }
        }
      ],
      "name": "jmespath-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath-java:jmespath_java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath_java:jmespath-java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath_java:jmespath_java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:jmespath-java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:jmespath_java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath:jmespath-java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath:jmespath_java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/jmespath-java-1.12.754.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jmespath-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/jmespath-java-1.12.754.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/jmespath-java@1.12.754",
      "type": "library",
      "version": "1.12.754"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/jmespath-java@1.12.754?package-id=21d05fb0b6979116",
      "cpe": "cpe:2.3:a:jmespath-java:jmespath-java:1.12.754:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "579c460a379bc4984f2e60b278a8220892a55800"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "https://aws.amazon.com/apache2.0"
          }
        }
      ],
      "name": "jmespath-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath-java:jmespath_java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath_java:jmespath-java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath_java:jmespath_java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:jmespath-java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:jmespath_java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath:jmespath-java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath:jmespath_java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/jmespath-java-1.12.754.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jmespath-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/jmespath-java-1.12.754.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/jmespath-java@1.12.754",
      "type": "library",
      "version": "1.12.754"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/jmespath-java@1.12.754?package-id=15a0d3d5ed5273b2",
      "cpe": "cpe:2.3:a:jmespath-java:jmespath-java:1.12.754:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "579c460a379bc4984f2e60b278a8220892a55800"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "https://aws.amazon.com/apache2.0"
          }
        }
      ],
      "name": "jmespath-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath-java:jmespath_java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath_java:jmespath-java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath_java:jmespath_java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:jmespath-java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:jmespath_java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath:jmespath-java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath:jmespath_java:1.12.754:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jmespath-java-1.12.754.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jmespath-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jmespath-java-1.12.754.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/jmespath-java@1.12.754",
      "type": "library",
      "version": "1.12.754"
    },
    {
      "bom-ref": "pkg:maven/com.sun.jna/jna@4.5.1?package-id=8aeb8f882802fa1a",
      "cpe": "cpe:2.3:a:jna-development-team:jna:4.5.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "65bd0cacc9c79a21c6ed8e9f588577cd3c2f85b9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "jna",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna_development_team:jna:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna:jna:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jna:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jna-4.5.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jna-4.5.1.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.jna/jna@4.5.1",
      "type": "library",
      "version": "4.5.1"
    },
    {
      "bom-ref": "pkg:maven/org.joda/joda-convert@2.2.1?package-id=82e01de8fe7ecd87",
      "cpe": "cpe:2.3:a:joda-convert:joda-convert:2.2.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f19f779c1f545d8a67f1a0dcfcacc385112370ca"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.joda",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "joda-convert",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-convert:joda_convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_convert:joda-convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_convert:joda_convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda-convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda_convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda-convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda_convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:convert:joda-convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:convert:joda_convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-convert:convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_convert:convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda-convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda_convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:convert:convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/joda-convert-2.2.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "joda-convert"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.joda"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/joda-convert-2.2.1.jar"
        }
      ],
      "purl": "pkg:maven/org.joda/joda-convert@2.2.1",
      "type": "library",
      "version": "2.2.1"
    },
    {
      "bom-ref": "pkg:maven/joda-time/joda-time@2.12.4?package-id=92dbeb50423bcfbf",
      "cpe": "cpe:2.3:a:joda-time:joda-time:2.12.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "41cd821f32bd91b228da19eba162ae75d6404219"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "joda-time",
      "licenses": [
        {
          "license": {
            "name": "Apache 2.0"
          }
        }
      ],
      "name": "joda-time",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/joda-time-2.12.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "joda-time"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "joda-time"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/joda-time-2.12.4.jar"
        }
      ],
      "purl": "pkg:maven/joda-time/joda-time@2.12.4",
      "type": "library",
      "version": "2.12.4"
    },
    {
      "bom-ref": "pkg:maven/joda-time/joda-time@2.12.4?package-id=ceadea352a1b21ca",
      "cpe": "cpe:2.3:a:joda-time:joda-time:2.12.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "41cd821f32bd91b228da19eba162ae75d6404219"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "joda-time",
      "licenses": [
        {
          "license": {
            "name": "Apache 2.0"
          }
        }
      ],
      "name": "joda-time",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/joda-time-2.12.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "joda-time"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "joda-time"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/joda-time-2.12.4.jar"
        }
      ],
      "purl": "pkg:maven/joda-time/joda-time@2.12.4",
      "type": "library",
      "version": "2.12.4"
    },
    {
      "bom-ref": "pkg:maven/joda-time/joda-time@2.12.4?package-id=9d4ce938b1d74174",
      "cpe": "cpe:2.3:a:joda-time:joda-time:2.12.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "41cd821f32bd91b228da19eba162ae75d6404219"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "joda-time",
      "licenses": [
        {
          "license": {
            "name": "Apache 2.0"
          }
        }
      ],
      "name": "joda-time",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/joda-time-2.12.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "joda-time"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "joda-time"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/joda-time-2.12.4.jar"
        }
      ],
      "purl": "pkg:maven/joda-time/joda-time@2.12.4",
      "type": "library",
      "version": "2.12.4"
    },
    {
      "bom-ref": "pkg:maven/joda-time/joda-time@2.12.4?package-id=235ee91d6e0449ef",
      "cpe": "cpe:2.3:a:joda-time:joda-time:2.12.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "41cd821f32bd91b228da19eba162ae75d6404219"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "joda-time",
      "licenses": [
        {
          "license": {
            "name": "Apache 2.0"
          }
        }
      ],
      "name": "joda-time",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/joda-time-2.12.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "joda-time"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "joda-time"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/joda-time-2.12.4.jar"
        }
      ],
      "purl": "pkg:maven/joda-time/joda-time@2.12.4",
      "type": "library",
      "version": "2.12.4"
    },
    {
      "bom-ref": "pkg:maven/joda-time/joda-time@2.12.4?package-id=d5ae9d2a55a135a1",
      "cpe": "cpe:2.3:a:joda-time:joda-time:2.12.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "41cd821f32bd91b228da19eba162ae75d6404219"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "joda-time",
      "licenses": [
        {
          "license": {
            "name": "Apache 2.0"
          }
        }
      ],
      "name": "joda-time",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/joda-time-2.12.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "joda-time"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "joda-time"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/joda-time-2.12.4.jar"
        }
      ],
      "purl": "pkg:maven/joda-time/joda-time@2.12.4",
      "type": "library",
      "version": "2.12.4"
    },
    {
      "bom-ref": "pkg:maven/org.jruby.joni/joni@2.1.27?package-id=f1cb8f76914b0e60",
      "cpe": "cpe:2.3:a:jruby:joni:2.1.27:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a698fd936b13588c6747b182bcfdc13885a8ca43"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.jruby.joni",
      "licenses": [
        {
          "license": {
            "name": "MIT License",
            "url": "http://www.opensource.org/licenses/mit-license.php"
          }
        }
      ],
      "name": "joni",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joni:joni:2.1.27:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/joni-2.1.27.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "joni"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.jruby.joni"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/joni-2.1.27.jar"
        }
      ],
      "purl": "pkg:maven/org.jruby.joni/joni@2.1.27",
      "type": "library",
      "version": "2.1.27"
    },
    {
      "bom-ref": "pkg:maven/org.bitbucket.b_c/jose4j@0.7.3?package-id=40d102d1e56f9f8f",
      "cpe": "cpe:2.3:a:bitbucket:jose4j:0.7.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a42ffebfb2325fd15f87a9afc56bbefd8a3db0bf"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.bitbucket.b_c",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jose4j",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jose4j:jose4j:0.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:b-c:jose4j:0.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:b_c:jose4j:0.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:b:jose4j:0.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/jose4j-0.7.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jose4j"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.bitbucket.b_c"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/jose4j-0.7.3.jar"
        }
      ],
      "purl": "pkg:maven/org.bitbucket.b_c/jose4j@0.7.3",
      "type": "library",
      "version": "0.7.3"
    },
    {
      "bom-ref": "pkg:maven/jrt-fs/jrt-fs@11.0.24?package-id=0f6f454107f9cef2",
      "cpe": "cpe:2.3:a:oracle-corporation:jrt-fs:11.0.24:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1c0aaccbd010318818ce9919ca41694a086c48de"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "jrt-fs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jrt_fs:11.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jrt-fs:11.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jrt_fs:11.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:red-hat\\,-inc-:jrt-fs:11.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:red-hat\\,-inc-:jrt_fs:11.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:red_hat\\,_inc_:jrt-fs:11.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:red_hat\\,_inc_:jrt_fs:11.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jrt-fs:jrt-fs:11.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jrt-fs:jrt_fs:11.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jrt_fs:jrt-fs:11.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jrt_fs:jrt_fs:11.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jrt:jrt-fs:11.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jrt:jrt_fs:11.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/jvm/java-11-openjdk-11.0.24.0.8-2.el9.aarch64/lib/jrt-fs.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/usr/lib/jvm/java-11-openjdk-11.0.24.0.8-2.el9.aarch64/lib/jrt-fs.jar"
        }
      ],
      "purl": "pkg:maven/jrt-fs/jrt-fs@11.0.24",
      "type": "library",
      "version": "11.0.24"
    },
    {
      "bom-ref": "pkg:rpm/rhel/json-c@0.14-11.el9?arch=aarch64&upstream=json-c-0.14-11.el9.src.rpm&distro=rhel-9.4&package-id=fc1ff05e83eefac6",
      "cpe": "cpe:2.3:a:json-c:json-c:0.14-11.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "json-c",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-c:json_c:0.14-11.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_c:json-c:0.14-11.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_c:json_c:0.14-11.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:json-c:0.14-11.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:json_c:0.14-11.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-c:0.14-11.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_c:0.14-11.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "11.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "75002"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "json-c-0.14-11.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/json-c@0.14-11.el9?arch=aarch64&upstream=json-c-0.14-11.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "0.14-11.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/json-glib@1.6.6-1.el9?arch=aarch64&upstream=json-glib-1.6.6-1.el9.src.rpm&distro=rhel-9.4&package-id=244628cd354976c1",
      "cpe": "cpe:2.3:a:json-glib:json-glib:1.6.6-1.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "json-glib",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-glib:json_glib:1.6.6-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_glib:json-glib:1.6.6-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_glib:json_glib:1.6.6-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:json-glib:1.6.6-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:json_glib:1.6.6-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-glib:1.6.6-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_glib:1.6.6-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "576116"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "json-glib-1.6.6-1.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/json-glib@1.6.6-1.el9?arch=aarch64&upstream=json-glib-1.6.6-1.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.6.6-1.el9"
    },
    {
      "bom-ref": "pkg:maven/com.jayway.jsonpath.json-path/json-path@2.3.0?package-id=509c95fb126d9fba",
      "cpe": "cpe:2.3:a:json-path:json-path:2.3.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "032602ed60bc48f2a7dbe8aceacf5882556eab54"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "json-path",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-path:json_path:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_path:json-path:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_path:json_path:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-path:jsonpath:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_path:jsonpath:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsonpath:json-path:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsonpath:json_path:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsonpath:jsonpath:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jayway:json-path:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jayway:json_path:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jayway:jsonpath:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-path:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_path:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:jsonpath:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/json-path-2.3.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/json-path-2.3.0.jar"
        }
      ],
      "purl": "pkg:maven/com.jayway.jsonpath.json-path/json-path@2.3.0",
      "type": "library",
      "version": "2.3.0"
    },
    {
      "bom-ref": "pkg:maven/net.minidev/json-smart@1.3.1?package-id=6ba56a0440273c3c",
      "cpe": "cpe:2.3:a:json-smart:json-smart:1.3.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "69b3835e96d282ec85fc2e1517b8164c45ed639e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.minidev",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "json-smart",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-smart:json_smart:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_smart:json-smart:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_smart:json_smart:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:json-smart:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:json_smart:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-smart:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_smart:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/json-smart-1.3.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "json-smart"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.minidev"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/json-smart-1.3.1.jar"
        }
      ],
      "purl": "pkg:maven/net.minidev/json-smart@1.3.1",
      "type": "library",
      "version": "1.3.1"
    },
    {
      "bom-ref": "pkg:maven/net.minidev/json-smart@2.3?package-id=08affffe97d27bfd",
      "cpe": "cpe:2.3:a:json-smart:json-smart:2.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "007396407491352ce4fa30de92efb158adb76b5b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.minidev",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "json-smart",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-smart:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_smart:json-smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_smart:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:json-smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/json-smart-2.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "json-smart"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.minidev"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/json-smart-2.3.jar"
        }
      ],
      "purl": "pkg:maven/net.minidev/json-smart@2.3",
      "type": "library",
      "version": "2.3"
    },
    {
      "bom-ref": "pkg:maven/net.minidev/json-smart@2.3?package-id=bb5bc73d1dc9e6f0",
      "cpe": "cpe:2.3:a:json-smart:json-smart:2.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "007396407491352ce4fa30de92efb158adb76b5b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.minidev",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "json-smart",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-smart:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_smart:json-smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_smart:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:json-smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/json-smart-2.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "json-smart"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.minidev"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/json-smart-2.3.jar"
        }
      ],
      "purl": "pkg:maven/net.minidev/json-smart@2.3",
      "type": "library",
      "version": "2.3"
    },
    {
      "bom-ref": "pkg:maven/net.minidev/json-smart@2.3?package-id=48108bb4ed176708",
      "cpe": "cpe:2.3:a:json-smart:json-smart:2.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "007396407491352ce4fa30de92efb158adb76b5b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.minidev",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "json-smart",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-smart:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_smart:json-smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_smart:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:json-smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/json-smart-2.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "json-smart"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.minidev"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/json-smart-2.3.jar"
        }
      ],
      "purl": "pkg:maven/net.minidev/json-smart@2.3",
      "type": "library",
      "version": "2.3"
    },
    {
      "bom-ref": "pkg:maven/org.apache/jsp-api@2.1?package-id=6a3bf4d544b9f5c0",
      "cpe": "cpe:2.3:a:apache:jsp-api:2.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63f943103f250ef1f3a4d5e94d145a0f961f5316"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "jsp-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:jsp_api:2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jsp-api-2.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jsp-api-2.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache/jsp-api@2.1",
      "type": "library",
      "version": "2.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache/jsp-api@2.1?package-id=8afe04f67618bcea",
      "cpe": "cpe:2.3:a:apache:jsp-api:2.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63f943103f250ef1f3a4d5e94d145a0f961f5316"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "jsp-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:jsp_api:2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/jsp-api-2.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/jsp-api-2.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache/jsp-api@2.1",
      "type": "library",
      "version": "2.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache/jsp-api@2.1?package-id=6e5da75ccd9a3666",
      "cpe": "cpe:2.3:a:apache:jsp-api:2.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63f943103f250ef1f3a4d5e94d145a0f961f5316"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "jsp-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:jsp_api:2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jsp-api-2.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jsp-api-2.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache/jsp-api@2.1",
      "type": "library",
      "version": "2.1"
    },
    {
      "bom-ref": "pkg:maven/jsr305/jsr305@2.0.1?package-id=d6788758e1144b21",
      "cpe": "cpe:2.3:a:jsr305:jsr305:2.0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "516c03b21d50a644d538de0f0369c620989cd8f0"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "jsr305",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/jsr305-2.0.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/jsr305-2.0.1.jar"
        }
      ],
      "purl": "pkg:maven/jsr305/jsr305@2.0.1",
      "type": "library",
      "version": "2.0.1"
    },
    {
      "bom-ref": "pkg:maven/jsr305/jsr305@2.0.1?package-id=f10d9d6705f71c42",
      "cpe": "cpe:2.3:a:jsr305:jsr305:2.0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "516c03b21d50a644d538de0f0369c620989cd8f0"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "jsr305",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jsr305-2.0.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jsr305-2.0.1.jar"
        }
      ],
      "purl": "pkg:maven/jsr305/jsr305@2.0.1",
      "type": "library",
      "version": "2.0.1"
    },
    {
      "bom-ref": "pkg:maven/jsr305/jsr305@3.0.0?package-id=f046fe016a098632",
      "cpe": "cpe:2.3:a:jsr305:jsr305:3.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5871fb60dc68d67da54a663c3fd636a10a532948"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "jsr305",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jsr305-3.0.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jsr305-3.0.0.jar"
        }
      ],
      "purl": "pkg:maven/jsr305/jsr305@3.0.0",
      "type": "library",
      "version": "3.0.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?package-id=79e10e77af3d683f",
      "cpe": "cpe:2.3:a:findbugs:jsr305:3.0.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.code.findbugs",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jsr305",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr-305:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr_305:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr305:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:code:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/jsr305-3.0.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jsr305"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.code.findbugs"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/jsr305-3.0.2.jar"
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
      "type": "library",
      "version": "3.0.2"
    },
    {
      "bom-ref": "pkg:maven/javax.ws.rs/jsr311-api@1.1.1?package-id=9a7c4a2bce83a298",
      "cpe": "cpe:2.3:a:sun-microsystems\\,-inc-:jsr311-api:1.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "59033da2a1afd56af1ac576750a8d0b1830d59e6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "javax.ws.rs",
      "licenses": [
        {
          "license": {
            "name": "http://www.opensource.org/licenses/cddl1.php"
          }
        }
      ],
      "name": "jsr311-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun-microsystems\\,-inc-:jsr311_api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun_microsystems\\,_inc_:jsr311-api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun_microsystems\\,_inc_:jsr311_api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr311-api:jsr311-api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr311-api:jsr311_api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr311_api:jsr311-api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr311_api:jsr311_api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr311:jsr311-api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr311:jsr311_api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jsr311-api-1.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jsr311-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "javax.ws.rs"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jsr311-api-1.1.1.jar"
        }
      ],
      "purl": "pkg:maven/javax.ws.rs/jsr311-api@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.kafka/kafka-clients@3.4.0?package-id=060a57b82f5d2b2d",
      "cpe": "cpe:2.3:a:apache:kafka-clients:3.4.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "69aebfca9da335f6617f9e5e7a4b45f16e8c86b5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "kafka-clients",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:kafka_clients:3.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:kafka:3.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/kafka-clients-3.4.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/kafka-clients-3.4.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.kafka/kafka-clients@3.4.0",
      "type": "library",
      "version": "3.4.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.kafka/kafka-clients@3.4.0?package-id=64e48de4bd227ed8",
      "cpe": "cpe:2.3:a:apache:kafka-clients:3.4.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "69aebfca9da335f6617f9e5e7a4b45f16e8c86b5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "kafka-clients",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:kafka_clients:3.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:kafka:3.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-indexing-service/kafka-clients-3.4.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-indexing-service/kafka-clients-3.4.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.kafka/kafka-clients@3.4.0",
      "type": "library",
      "version": "3.4.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.kafka/kafka-clients@5.5.15-ccs?package-id=dbb7512e079f2820",
      "cpe": "cpe:2.3:a:apache:kafka-clients:5.5.15-ccs:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "fdae55aea57374095179bcc604f44c19c9eb609d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "EPL-2.0"
          }
        }
      ],
      "name": "kafka-clients",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:kafka_clients:5.5.15-ccs:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:kafka:5.5.15-ccs:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/kafka-clients-5.5.15-ccs.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/kafka-clients-5.5.15-ccs.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.kafka/kafka-clients@5.5.15-ccs",
      "type": "library",
      "version": "5.5.15-ccs"
    },
    {
      "bom-ref": "pkg:maven/io.confluent/kafka-schema-registry-client@5.5.15?package-id=d8b808f5ee777a89",
      "cpe": "cpe:2.3:a:kafka-schema-registry-client:kafka-schema-registry-client:5.5.15:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "775fd8692b6578da4a315c231a85b47f450778a0"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.confluent",
      "licenses": [
        {
          "license": {
            "name": "Apache License 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "name": "kafka-schema-registry-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-schema-registry-client:kafka_schema_registry_client:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema_registry_client:kafka-schema-registry-client:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema_registry_client:kafka_schema_registry_client:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-schema-registry:kafka-schema-registry-client:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-schema-registry:kafka_schema_registry_client:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema_registry:kafka-schema-registry-client:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema_registry:kafka_schema_registry_client:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-schema:kafka-schema-registry-client:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-schema:kafka_schema_registry_client:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema:kafka-schema-registry-client:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema:kafka_schema_registry_client:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:confluent:kafka-schema-registry-client:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:confluent:kafka_schema_registry_client:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka:kafka-schema-registry-client:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka:kafka_schema_registry_client:5.5.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/kafka-schema-registry-client-5.5.15.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "kafka-schema-registry-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.confluent"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/kafka-schema-registry-client-5.5.15.jar"
        }
      ],
      "purl": "pkg:maven/io.confluent/kafka-schema-registry-client@5.5.15",
      "type": "library",
      "version": "5.5.15"
    },
    {
      "bom-ref": "pkg:maven/io.confluent/kafka-schema-registry-client@6.0.15?package-id=651b4dc119e72425",
      "cpe": "cpe:2.3:a:kafka-schema-registry-client:kafka-schema-registry-client:6.0.15:*:*:*:*:*:*:*",
      "group": "io.confluent",
      "licenses": [
        {
          "license": {
            "name": "Apache License 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "name": "kafka-schema-registry-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-schema-registry-client:kafka_schema_registry_client:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema_registry_client:kafka-schema-registry-client:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema_registry_client:kafka_schema_registry_client:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-schema-registry:kafka-schema-registry-client:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-schema-registry:kafka_schema_registry_client:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema_registry:kafka-schema-registry-client:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema_registry:kafka_schema_registry_client:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-schema:kafka-schema-registry-client:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-schema:kafka_schema_registry_client:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema:kafka-schema-registry-client:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema:kafka_schema_registry_client:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:confluent:kafka-schema-registry-client:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:confluent:kafka_schema_registry_client:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka:kafka-schema-registry-client:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka:kafka_schema_registry_client:6.0.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "kafka-schema-registry-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.confluent"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:io.confluent:kafka-schema-registry-client"
        }
      ],
      "purl": "pkg:maven/io.confluent/kafka-schema-registry-client@6.0.15",
      "type": "library",
      "version": "6.0.15"
    },
    {
      "bom-ref": "pkg:rpm/rhel/keyutils-libs@1.6.3-1.el9?arch=aarch64&upstream=keyutils-1.6.3-1.el9.src.rpm&distro=rhel-9.4&package-id=bd92160dbfcd5541",
      "cpe": "cpe:2.3:a:keyutils-libs:keyutils-libs:1.6.3-1.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+ and LGPLv2+"
          }
        }
      ],
      "name": "keyutils-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:keyutils-libs:keyutils_libs:1.6.3-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:keyutils_libs:keyutils-libs:1.6.3-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:keyutils_libs:keyutils_libs:1.6.3-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:keyutils:keyutils-libs:1.6.3-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:keyutils:keyutils_libs:1.6.3-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:keyutils-libs:1.6.3-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:keyutils_libs:1.6.3-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "100107"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "keyutils-1.6.3-1.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/keyutils-libs@1.6.3-1.el9?arch=aarch64&upstream=keyutils-1.6.3-1.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.6.3-1.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/krb5-libs@1.21.1-1.el9?arch=aarch64&upstream=krb5-1.21.1-1.el9.src.rpm&distro=rhel-9.4&package-id=39de0ee5323cd4dd",
      "cpe": "cpe:2.3:a:krb5-libs:krb5-libs:1.21.1-1.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "krb5-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5-libs:krb5_libs:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5_libs:krb5-libs:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5_libs:krb5_libs:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:krb5-libs:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:krb5_libs:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5:krb5-libs:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5:krb5_libs:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "2704404"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "krb5-1.21.1-1.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/krb5-libs@1.21.1-1.el9?arch=aarch64&upstream=krb5-1.21.1-1.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.21.1-1.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/krb5-pkinit@1.21.1-1.el9?arch=aarch64&upstream=krb5-1.21.1-1.el9.src.rpm&distro=rhel-9.4&package-id=f3a01580fd8ba813",
      "cpe": "cpe:2.3:a:krb5-pkinit:krb5-pkinit:1.21.1-1.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "krb5-pkinit",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5-pkinit:krb5_pkinit:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5_pkinit:krb5-pkinit:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5_pkinit:krb5_pkinit:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:krb5-pkinit:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:krb5_pkinit:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5:krb5-pkinit:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5:krb5_pkinit:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "135780"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "krb5-1.21.1-1.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/krb5-pkinit@1.21.1-1.el9?arch=aarch64&upstream=krb5-1.21.1-1.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.21.1-1.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/krb5-workstation@1.21.1-1.el9?arch=aarch64&upstream=krb5-1.21.1-1.el9.src.rpm&distro=rhel-9.4&package-id=ec78fc2f255061fc",
      "cpe": "cpe:2.3:a:krb5-workstation:krb5-workstation:1.21.1-1.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "krb5-workstation",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5-workstation:krb5_workstation:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5_workstation:krb5-workstation:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5_workstation:krb5_workstation:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:krb5-workstation:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:krb5_workstation:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5:krb5-workstation:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5:krb5_workstation:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "3386822"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "krb5-1.21.1-1.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/krb5-workstation@1.21.1-1.el9?arch=aarch64&upstream=krb5-1.21.1-1.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.21.1-1.el9"
    },
    {
      "bom-ref": "pkg:maven/com.nimbusds/lang-tag@1.7?package-id=b991e54e282f40eb",
      "cpe": "cpe:2.3:a:connect2id-ltd-:lang-tag:1.7:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "97c73ecd70bc7e8eefb26c5eea84f251a63f1031"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.nimbusds",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "lang-tag",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id-ltd-:lang_tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:lang-tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:lang_tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lang-tag:lang-tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lang-tag:lang_tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lang_tag:lang-tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lang_tag:lang_tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:lang-tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:lang_tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lang:lang-tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lang:lang_tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/lang-tag-1.7.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "lang-tag"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.nimbusds"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/lang-tag-1.7.jar"
        }
      ],
      "purl": "pkg:maven/com.nimbusds/lang-tag@1.7",
      "type": "library",
      "version": "1.7"
    },
    {
      "bom-ref": "pkg:rpm/rhel/langpacks-core-en@3.0-16.el9?arch=noarch&upstream=langpacks-3.0-16.el9.src.rpm&distro=rhel-9.4&package-id=e5c9121b759c3796",
      "cpe": "cpe:2.3:a:langpacks-core-en:langpacks-core-en:3.0-16.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+"
          }
        }
      ],
      "name": "langpacks-core-en",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks-core-en:langpacks_core_en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks_core_en:langpacks-core-en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks_core_en:langpacks_core_en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks-core:langpacks-core-en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks-core:langpacks_core_en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks_core:langpacks-core-en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks_core:langpacks_core_en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks:langpacks-core-en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks:langpacks_core_en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:langpacks-core-en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:langpacks_core_en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "16.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "398"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "langpacks-3.0-16.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/langpacks-core-en@3.0-16.el9?arch=noarch&upstream=langpacks-3.0-16.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.0-16.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/langpacks-core-font-en@3.0-16.el9?arch=noarch&upstream=langpacks-3.0-16.el9.src.rpm&distro=rhel-9.4&package-id=029edc2f97f3281a",
      "cpe": "cpe:2.3:a:langpacks-core-font-en:langpacks-core-font-en:3.0-16.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+"
          }
        }
      ],
      "name": "langpacks-core-font-en",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks-core-font-en:langpacks_core_font_en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks_core_font_en:langpacks-core-font-en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks_core_font_en:langpacks_core_font_en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks-core-font:langpacks-core-font-en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks-core-font:langpacks_core_font_en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks_core_font:langpacks-core-font-en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks_core_font:langpacks_core_font_en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks-core:langpacks-core-font-en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks-core:langpacks_core_font_en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks_core:langpacks-core-font-en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks_core:langpacks_core_font_en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks:langpacks-core-font-en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks:langpacks_core_font_en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:langpacks-core-font-en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:langpacks_core_font_en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "16.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "351"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "langpacks-3.0-16.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/langpacks-core-font-en@3.0-16.el9?arch=noarch&upstream=langpacks-3.0-16.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.0-16.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/langpacks-en@3.0-16.el9?arch=noarch&upstream=langpacks-3.0-16.el9.src.rpm&distro=rhel-9.4&package-id=30e1206228a1b3c6",
      "cpe": "cpe:2.3:a:langpacks-en:langpacks-en:3.0-16.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+"
          }
        }
      ],
      "name": "langpacks-en",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks-en:langpacks_en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks_en:langpacks-en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks_en:langpacks_en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks:langpacks-en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks:langpacks_en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:langpacks-en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:langpacks_en:3.0-16.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "16.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "400"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "langpacks-3.0-16.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/langpacks-en@3.0-16.el9?arch=noarch&upstream=langpacks-3.0-16.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.0-16.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/less@590-4.el9_4?arch=aarch64&upstream=less-590-4.el9_4.src.rpm&distro=rhel-9.4&package-id=80c46afa3ddb0165",
      "cpe": "cpe:2.3:a:redhat:less:590-4.el9_4:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+ or BSD"
          }
        }
      ],
      "name": "less",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:less:less:590-4.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "4.el9_4"
        },
        {
          "name": "syft:metadata:size",
          "value": "479040"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "less-590-4.el9_4.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/less@590-4.el9_4?arch=aarch64&upstream=less-590-4.el9_4.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "590-4.el9_4"
    },
    {
      "bom-ref": "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?package-id=34372666cba5ee88",
      "cpe": "cpe:2.3:a:leveldbjni-all:leveldbjni-all:1.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "707350a2eeb1fa2ed77a32ddb3893ed308e941db"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.fusesource.leveldbjni",
      "licenses": [
        {
          "license": {
            "name": "http://www.opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "name": "leveldbjni-all",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni-all:leveldbjni_all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni_all:leveldbjni-all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni_all:leveldbjni_all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fusesource:leveldbjni-all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fusesource:leveldbjni_all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni-all:leveldbjni:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni:leveldbjni-all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni:leveldbjni_all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni_all:leveldbjni:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fusesource:leveldbjni:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni:leveldbjni:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/leveldbjni-all-1.8.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "leveldbjni-all"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.fusesource.leveldbjni"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/leveldbjni-all-1.8.jar"
        }
      ],
      "purl": "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8",
      "type": "library",
      "version": "1.8"
    },
    {
      "bom-ref": "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?package-id=f948c898fd208115",
      "cpe": "cpe:2.3:a:leveldbjni-all:leveldbjni-all:1.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "707350a2eeb1fa2ed77a32ddb3893ed308e941db"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.fusesource.leveldbjni",
      "licenses": [
        {
          "license": {
            "name": "http://www.opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "name": "leveldbjni-all",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni-all:leveldbjni_all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni_all:leveldbjni-all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni_all:leveldbjni_all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fusesource:leveldbjni-all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fusesource:leveldbjni_all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni-all:leveldbjni:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni:leveldbjni-all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni:leveldbjni_all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni_all:leveldbjni:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fusesource:leveldbjni:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni:leveldbjni:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/leveldbjni-all-1.8.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "leveldbjni-all"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.fusesource.leveldbjni"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/leveldbjni-all-1.8.jar"
        }
      ],
      "purl": "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8",
      "type": "library",
      "version": "1.8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libacl@2.3.1-4.el9?arch=aarch64&upstream=acl-2.3.1-4.el9.src.rpm&distro=rhel-9.4&package-id=9b7e976141ddde50",
      "cpe": "cpe:2.3:a:libacl:libacl:2.3.1-4.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libacl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libacl:2.3.1-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "4.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "69018"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "acl-2.3.1-4.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libacl@2.3.1-4.el9?arch=aarch64&upstream=acl-2.3.1-4.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.3.1-4.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libarchive@3.5.3-4.el9?arch=aarch64&upstream=libarchive-3.5.3-4.el9.src.rpm&distro=rhel-9.4&package-id=469205dd35dd2148",
      "cpe": "cpe:2.3:a:libarchive:libarchive:3.5.3-4.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "libarchive",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libarchive:3.5.3-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "4.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "930494"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libarchive-3.5.3-4.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libarchive@3.5.3-4.el9?arch=aarch64&upstream=libarchive-3.5.3-4.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.5.3-4.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libassuan@2.5.5-3.el9?arch=aarch64&upstream=libassuan-2.5.5-3.el9.src.rpm&distro=rhel-9.4&package-id=497d46e60fefde58",
      "cpe": "cpe:2.3:a:libassuan:libassuan:2.5.5-3.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+ and GPLv3+"
          }
        }
      ],
      "name": "libassuan",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libassuan:2.5.5-3.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "220101"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libassuan-2.5.5-3.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libassuan@2.5.5-3.el9?arch=aarch64&upstream=libassuan-2.5.5-3.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.5.5-3.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libatomic@11.4.1-3.el9?arch=aarch64&upstream=gcc-11.4.1-3.el9.src.rpm&distro=rhel-9.4&package-id=a66f5493e5abbead",
      "cpe": "cpe:2.3:a:libatomic:libatomic:11.4.1-3.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"
          }
        }
      ],
      "name": "libatomic",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libatomic:11.4.1-3.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "70594"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gcc-11.4.1-3.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libatomic@11.4.1-3.el9?arch=aarch64&upstream=gcc-11.4.1-3.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "11.4.1-3.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libattr@2.5.1-3.el9?arch=aarch64&upstream=attr-2.5.1-3.el9.src.rpm&distro=rhel-9.4&package-id=b87393776b8b2459",
      "cpe": "cpe:2.3:a:libattr:libattr:2.5.1-3.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libattr",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libattr:2.5.1-3.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "70229"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "attr-2.5.1-3.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libattr@2.5.1-3.el9?arch=aarch64&upstream=attr-2.5.1-3.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.5.1-3.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libblkid@2.37.4-18.el9?arch=aarch64&upstream=util-linux-2.37.4-18.el9.src.rpm&distro=rhel-9.4&package-id=6bc45aa614537632",
      "cpe": "cpe:2.3:a:libblkid:libblkid:2.37.4-18.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libblkid",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libblkid:2.37.4-18.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "18.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "270633"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "util-linux-2.37.4-18.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libblkid@2.37.4-18.el9?arch=aarch64&upstream=util-linux-2.37.4-18.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.37.4-18.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libcap@2.48-9.el9_2?arch=aarch64&upstream=libcap-2.48-9.el9_2.src.rpm&distro=rhel-9.4&package-id=6b382f24930e8c35",
      "cpe": "cpe:2.3:a:libcap:libcap:2.48-9.el9_2:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD or GPLv2"
          }
        }
      ],
      "name": "libcap",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libcap:2.48-9.el9_2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "9.el9_2"
        },
        {
          "name": "syft:metadata:size",
          "value": "507663"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libcap-2.48-9.el9_2.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libcap@2.48-9.el9_2?arch=aarch64&upstream=libcap-2.48-9.el9_2.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.48-9.el9_2"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libcap-ng@0.8.2-7.el9?arch=aarch64&upstream=libcap-ng-0.8.2-7.el9.src.rpm&distro=rhel-9.4&package-id=67cd3f4eb5b0305b",
      "cpe": "cpe:2.3:a:libcap-ng:libcap-ng:0.8.2-7.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libcap-ng",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcap-ng:libcap_ng:0.8.2-7.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcap_ng:libcap-ng:0.8.2-7.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcap_ng:libcap_ng:0.8.2-7.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcap:libcap-ng:0.8.2-7.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcap:libcap_ng:0.8.2-7.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libcap-ng:0.8.2-7.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libcap_ng:0.8.2-7.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "164940"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libcap-ng-0.8.2-7.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libcap-ng@0.8.2-7.el9?arch=aarch64&upstream=libcap-ng-0.8.2-7.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "0.8.2-7.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libcom_err@1.46.5-5.el9?arch=aarch64&upstream=e2fsprogs-1.46.5-5.el9.src.rpm&distro=rhel-9.4&package-id=482dfe88c640387e",
      "cpe": "cpe:2.3:a:libcom-err:libcom-err:1.46.5-5.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libcom_err",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcom-err:libcom_err:1.46.5-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcom_err:libcom-err:1.46.5-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcom_err:libcom_err:1.46.5-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcom:libcom-err:1.46.5-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcom:libcom_err:1.46.5-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libcom-err:1.46.5-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libcom_err:1.46.5-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "5.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "113361"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "e2fsprogs-1.46.5-5.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libcom_err@1.46.5-5.el9?arch=aarch64&upstream=e2fsprogs-1.46.5-5.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.46.5-5.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libcurl-minimal@7.76.1-29.el9_4?arch=aarch64&upstream=curl-7.76.1-29.el9_4.src.rpm&distro=rhel-9.4&package-id=f219dae0ffd96249",
      "cpe": "cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-29.el9_4:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libcurl-minimal",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-29.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-29.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-29.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-29.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-29.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libcurl-minimal:7.76.1-29.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libcurl_minimal:7.76.1-29.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "29.el9_4"
        },
        {
          "name": "syft:metadata:size",
          "value": "477022"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "curl-7.76.1-29.el9_4.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libcurl-minimal@7.76.1-29.el9_4?arch=aarch64&upstream=curl-7.76.1-29.el9_4.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "7.76.1-29.el9_4"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libdb@5.3.28-53.el9?arch=aarch64&upstream=libdb-5.3.28-53.el9.src.rpm&distro=rhel-9.4&package-id=64da4a637ac07713",
      "cpe": "cpe:2.3:a:redhat:libdb:5.3.28-53.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD and LGPLv2 and Sleepycat"
          }
        }
      ],
      "name": "libdb",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libdb:libdb:5.3.28-53.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "53.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "1758454"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libdb-5.3.28-53.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libdb@5.3.28-53.el9?arch=aarch64&upstream=libdb-5.3.28-53.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "5.3.28-53.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libdnf@0.69.0-8.el9?arch=aarch64&upstream=libdnf-0.69.0-8.el9.src.rpm&distro=rhel-9.4&package-id=14d8f23cbc6c9b2e",
      "cpe": "cpe:2.3:a:libdnf:libdnf:0.69.0-8.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libdnf",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libdnf:0.69.0-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "8.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "2002605"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libdnf-0.69.0-8.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libdnf@0.69.0-8.el9?arch=aarch64&upstream=libdnf-0.69.0-8.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "0.69.0-8.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libeconf@0.4.1-3.el9_2?arch=aarch64&upstream=libeconf-0.4.1-3.el9_2.src.rpm&distro=rhel-9.4&package-id=7ad645958520e73b",
      "cpe": "cpe:2.3:a:libeconf:libeconf:0.4.1-3.el9_2:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libeconf",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libeconf:0.4.1-3.el9_2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el9_2"
        },
        {
          "name": "syft:metadata:size",
          "value": "74171"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libeconf-0.4.1-3.el9_2.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libeconf@0.4.1-3.el9_2?arch=aarch64&upstream=libeconf-0.4.1-3.el9_2.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "0.4.1-3.el9_2"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libevent@2.1.12-6.el9?arch=aarch64&upstream=libevent-2.1.12-6.el9.src.rpm&distro=rhel-9.4&package-id=b8c4bda65da69321",
      "cpe": "cpe:2.3:a:libevent:libevent:2.1.12-6.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD and ISC"
          }
        }
      ],
      "name": "libevent",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libevent:2.1.12-6.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "1135690"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libevent-2.1.12-6.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libevent@2.1.12-6.el9?arch=aarch64&upstream=libevent-2.1.12-6.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.1.12-6.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libffi@3.4.2-8.el9?arch=aarch64&upstream=libffi-3.4.2-8.el9.src.rpm&distro=rhel-9.4&package-id=367c6517d14fbe70",
      "cpe": "cpe:2.3:a:libffi:libffi:3.4.2-8.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libffi",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libffi:3.4.2-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "8.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "90073"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libffi-3.4.2-8.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libffi@3.4.2-8.el9?arch=aarch64&upstream=libffi-3.4.2-8.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.4.2-8.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libgcc@11.4.1-3.el9?arch=aarch64&upstream=gcc-11.4.1-3.el9.src.rpm&distro=rhel-9.4&package-id=212a1282e46c65e0",
      "cpe": "cpe:2.3:a:libgcc:libgcc:11.4.1-3.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"
          }
        }
      ],
      "name": "libgcc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libgcc:11.4.1-3.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "226740"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gcc-11.4.1-3.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libgcc@11.4.1-3.el9?arch=aarch64&upstream=gcc-11.4.1-3.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "11.4.1-3.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libgcrypt@1.10.0-10.el9_2?arch=aarch64&upstream=libgcrypt-1.10.0-10.el9_2.src.rpm&distro=rhel-9.4&package-id=b8d80baa9a9133cc",
      "cpe": "cpe:2.3:a:libgcrypt:libgcrypt:1.10.0-10.el9_2:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libgcrypt",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libgcrypt:1.10.0-10.el9_2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "10.el9_2"
        },
        {
          "name": "syft:metadata:size",
          "value": "1040050"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libgcrypt-1.10.0-10.el9_2.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libgcrypt@1.10.0-10.el9_2?arch=aarch64&upstream=libgcrypt-1.10.0-10.el9_2.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.10.0-10.el9_2"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libgpg-error@1.42-5.el9?arch=aarch64&upstream=libgpg-error-1.42-5.el9.src.rpm&distro=rhel-9.4&package-id=80d8e54c037cf9b3",
      "cpe": "cpe:2.3:a:libgpg-error:libgpg-error:1.42-5.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libgpg-error",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgpg-error:libgpg_error:1.42-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgpg_error:libgpg-error:1.42-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgpg_error:libgpg_error:1.42-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgpg:libgpg-error:1.42-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgpg:libgpg_error:1.42-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libgpg-error:1.42-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libgpg_error:1.42-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "5.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "918496"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libgpg-error-1.42-5.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libgpg-error@1.42-5.el9?arch=aarch64&upstream=libgpg-error-1.42-5.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.42-5.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libidn2@2.3.0-7.el9?arch=aarch64&upstream=libidn2-2.3.0-7.el9.src.rpm&distro=rhel-9.4&package-id=bb1c0d24d852a0d5",
      "cpe": "cpe:2.3:a:libidn2:libidn2:2.3.0-7.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "(GPLv2+ or LGPLv3+) and GPLv3+"
          }
        }
      ],
      "name": "libidn2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libidn2:2.3.0-7.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "257380"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libidn2-2.3.0-7.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libidn2@2.3.0-7.el9?arch=aarch64&upstream=libidn2-2.3.0-7.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.3.0-7.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libkadm5@1.21.1-1.el9?arch=aarch64&upstream=krb5-1.21.1-1.el9.src.rpm&distro=rhel-9.4&package-id=44172325db893823",
      "cpe": "cpe:2.3:a:libkadm5:libkadm5:1.21.1-1.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libkadm5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libkadm5:1.21.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "271414"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "krb5-1.21.1-1.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libkadm5@1.21.1-1.el9?arch=aarch64&upstream=krb5-1.21.1-1.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.21.1-1.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libksba@1.5.1-6.el9_1?arch=aarch64&upstream=libksba-1.5.1-6.el9_1.src.rpm&distro=rhel-9.4&package-id=b7728b94b92657bd",
      "cpe": "cpe:2.3:a:libksba:libksba:1.5.1-6.el9_1:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "(LGPLv3+ or GPLv2+) and GPLv3+"
          }
        }
      ],
      "name": "libksba",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libksba:1.5.1-6.el9_1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el9_1"
        },
        {
          "name": "syft:metadata:size",
          "value": "394246"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libksba-1.5.1-6.el9_1.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libksba@1.5.1-6.el9_1?arch=aarch64&upstream=libksba-1.5.1-6.el9_1.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.5.1-6.el9_1"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libmodulemd@2.13.0-2.el9?arch=aarch64&upstream=libmodulemd-2.13.0-2.el9.src.rpm&distro=rhel-9.4&package-id=291dce79bc73b5e3",
      "cpe": "cpe:2.3:a:libmodulemd:libmodulemd:2.13.0-2.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libmodulemd",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libmodulemd:2.13.0-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "2.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "735975"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libmodulemd-2.13.0-2.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libmodulemd@2.13.0-2.el9?arch=aarch64&upstream=libmodulemd-2.13.0-2.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.13.0-2.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libmount@2.37.4-18.el9?arch=aarch64&upstream=util-linux-2.37.4-18.el9.src.rpm&distro=rhel-9.4&package-id=8ccbf7a54764f1de",
      "cpe": "cpe:2.3:a:libmount:libmount:2.37.4-18.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libmount",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libmount:2.37.4-18.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "18.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "363317"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "util-linux-2.37.4-18.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libmount@2.37.4-18.el9?arch=aarch64&upstream=util-linux-2.37.4-18.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.37.4-18.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libnghttp2@1.43.0-5.el9_4.3?arch=aarch64&upstream=nghttp2-1.43.0-5.el9_4.3.src.rpm&distro=rhel-9.4&package-id=042e23e598c43183",
      "cpe": "cpe:2.3:a:libnghttp2:libnghttp2:1.43.0-5.el9_4.3:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libnghttp2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libnghttp2:1.43.0-5.el9_4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "5.el9_4.3"
        },
        {
          "name": "syft:metadata:size",
          "value": "202412"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "nghttp2-1.43.0-5.el9_4.3.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libnghttp2@1.43.0-5.el9_4.3?arch=aarch64&upstream=nghttp2-1.43.0-5.el9_4.3.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.43.0-5.el9_4.3"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libpeas@1.30.0-4.el9?arch=aarch64&upstream=libpeas-1.30.0-4.el9.src.rpm&distro=rhel-9.4&package-id=f7dba76bd9075e5d",
      "cpe": "cpe:2.3:a:libpeas:libpeas:1.30.0-4.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libpeas",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libpeas:1.30.0-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "4.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "407150"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libpeas-1.30.0-4.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libpeas@1.30.0-4.el9?arch=aarch64&upstream=libpeas-1.30.0-4.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.30.0-4.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libpwquality@1.4.4-8.el9?arch=aarch64&upstream=libpwquality-1.4.4-8.el9.src.rpm&distro=rhel-9.4&package-id=05ba0d765ec1d923",
      "cpe": "cpe:2.3:a:libpwquality:libpwquality:1.4.4-8.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD or GPLv2+"
          }
        }
      ],
      "name": "libpwquality",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libpwquality:1.4.4-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "8.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "612072"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libpwquality-1.4.4-8.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libpwquality@1.4.4-8.el9?arch=aarch64&upstream=libpwquality-1.4.4-8.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.4.4-8.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/librepo@1.14.5-2.el9?arch=aarch64&upstream=librepo-1.14.5-2.el9.src.rpm&distro=rhel-9.4&package-id=e839963e9874f443",
      "cpe": "cpe:2.3:a:librepo:librepo:1.14.5-2.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "librepo",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:librepo:1.14.5-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "2.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "232380"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "librepo-1.14.5-2.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/librepo@1.14.5-2.el9?arch=aarch64&upstream=librepo-1.14.5-2.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.14.5-2.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libreport-filesystem@2.15.2-6.el9?arch=noarch&upstream=libreport-2.15.2-6.el9.src.rpm&distro=rhel-9.4&package-id=5fb58e47d0037baf",
      "cpe": "cpe:2.3:a:libreport-filesystem:libreport-filesystem:2.15.2-6.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+"
          }
        }
      ],
      "name": "libreport-filesystem",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libreport-filesystem:libreport_filesystem:2.15.2-6.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libreport_filesystem:libreport-filesystem:2.15.2-6.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libreport_filesystem:libreport_filesystem:2.15.2-6.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libreport:libreport-filesystem:2.15.2-6.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libreport:libreport_filesystem:2.15.2-6.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libreport-filesystem:2.15.2-6.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libreport_filesystem:2.15.2-6.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "0"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libreport-2.15.2-6.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libreport-filesystem@2.15.2-6.el9?arch=noarch&upstream=libreport-2.15.2-6.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.15.2-6.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/librhsm@0.0.3-7.el9_3.1?arch=aarch64&upstream=librhsm-0.0.3-7.el9_3.1.src.rpm&distro=rhel-9.4&package-id=9f7bccd83cd75357",
      "cpe": "cpe:2.3:a:librhsm:librhsm:0.0.3-7.el9_3.1:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "librhsm",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:librhsm:0.0.3-7.el9_3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el9_3.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "95498"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "librhsm-0.0.3-7.el9_3.1.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/librhsm@0.0.3-7.el9_3.1?arch=aarch64&upstream=librhsm-0.0.3-7.el9_3.1.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "0.0.3-7.el9_3.1"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libselinux@3.6-1.el9?arch=aarch64&upstream=libselinux-3.6-1.el9.src.rpm&distro=rhel-9.4&package-id=d8f2c142fb5a988c",
      "cpe": "cpe:2.3:a:libselinux:libselinux:3.6-1.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "libselinux",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libselinux:3.6-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "205261"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libselinux-3.6-1.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libselinux@3.6-1.el9?arch=aarch64&upstream=libselinux-3.6-1.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.6-1.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libsemanage@3.6-1.el9?arch=aarch64&upstream=libsemanage-3.6-1.el9.src.rpm&distro=rhel-9.4&package-id=1376c91d67381c21",
      "cpe": "cpe:2.3:a:libsemanage:libsemanage:3.6-1.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libsemanage",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libsemanage:3.6-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "306942"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libsemanage-3.6-1.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libsemanage@3.6-1.el9?arch=aarch64&upstream=libsemanage-3.6-1.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.6-1.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libsepol@3.6-1.el9?arch=aarch64&upstream=libsepol-3.6-1.el9.src.rpm&distro=rhel-9.4&package-id=b5e77e2bbf4c8e1b",
      "cpe": "cpe:2.3:a:libsepol:libsepol:3.6-1.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libsepol",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libsepol:3.6-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "829147"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libsepol-3.6-1.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libsepol@3.6-1.el9?arch=aarch64&upstream=libsepol-3.6-1.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.6-1.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libsigsegv@2.13-4.el9?arch=aarch64&upstream=libsigsegv-2.13-4.el9.src.rpm&distro=rhel-9.4&package-id=561d37199903c023",
      "cpe": "cpe:2.3:a:libsigsegv:libsigsegv:2.13-4.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+"
          }
        }
      ],
      "name": "libsigsegv",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libsigsegv:2.13-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "4.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "99314"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libsigsegv-2.13-4.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libsigsegv@2.13-4.el9?arch=aarch64&upstream=libsigsegv-2.13-4.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.13-4.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libsmartcols@2.37.4-18.el9?arch=aarch64&upstream=util-linux-2.37.4-18.el9.src.rpm&distro=rhel-9.4&package-id=ccb29dd660554711",
      "cpe": "cpe:2.3:a:libsmartcols:libsmartcols:2.37.4-18.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libsmartcols",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libsmartcols:2.37.4-18.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "18.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "163363"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "util-linux-2.37.4-18.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libsmartcols@2.37.4-18.el9?arch=aarch64&upstream=util-linux-2.37.4-18.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.37.4-18.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libsolv@0.7.24-2.el9?arch=aarch64&upstream=libsolv-0.7.24-2.el9.src.rpm&distro=rhel-9.4&package-id=249bc94f073d6f76",
      "cpe": "cpe:2.3:a:libsolv:libsolv:0.7.24-2.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "libsolv",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libsolv:0.7.24-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "2.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "879330"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libsolv-0.7.24-2.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libsolv@0.7.24-2.el9?arch=aarch64&upstream=libsolv-0.7.24-2.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "0.7.24-2.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libss@1.46.5-5.el9?arch=aarch64&upstream=e2fsprogs-1.46.5-5.el9.src.rpm&distro=rhel-9.4&package-id=c14e2822785a4246",
      "cpe": "cpe:2.3:a:redhat:libss:1.46.5-5.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libss",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libss:libss:1.46.5-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "5.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "113423"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "e2fsprogs-1.46.5-5.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libss@1.46.5-5.el9?arch=aarch64&upstream=e2fsprogs-1.46.5-5.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.46.5-5.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libstdc%2B%2B@11.4.1-3.el9?arch=aarch64&upstream=gcc-11.4.1-3.el9.src.rpm&distro=rhel-9.4&package-id=54b280899b125683",
      "cpe": "cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:11.4.1-3.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"
          }
        }
      ],
      "name": "libstdc++",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libstdc\\+\\+:11.4.1-3.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "2518078"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gcc-11.4.1-3.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libstdc%2B%2B@11.4.1-3.el9?arch=aarch64&upstream=gcc-11.4.1-3.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "11.4.1-3.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libtasn1@4.16.0-8.el9_1?arch=aarch64&upstream=libtasn1-4.16.0-8.el9_1.src.rpm&distro=rhel-9.4&package-id=42c595179f2245d1",
      "cpe": "cpe:2.3:a:libtasn1:libtasn1:4.16.0-8.el9_1:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+ and LGPLv2+"
          }
        }
      ],
      "name": "libtasn1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libtasn1:4.16.0-8.el9_1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "8.el9_1"
        },
        {
          "name": "syft:metadata:size",
          "value": "224068"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libtasn1-4.16.0-8.el9_1.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libtasn1@4.16.0-8.el9_1?arch=aarch64&upstream=libtasn1-4.16.0-8.el9_1.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "4.16.0-8.el9_1"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libunistring@0.9.10-15.el9?arch=aarch64&upstream=libunistring-0.9.10-15.el9.src.rpm&distro=rhel-9.4&package-id=eeea885221ae9524",
      "cpe": "cpe:2.3:a:libunistring:libunistring:0.9.10-15.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+ or LGPLv3+"
          }
        }
      ],
      "name": "libunistring",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libunistring:0.9.10-15.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "15.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "1630283"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libunistring-0.9.10-15.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libunistring@0.9.10-15.el9?arch=aarch64&upstream=libunistring-0.9.10-15.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "0.9.10-15.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libusbx@1.0.26-1.el9?arch=aarch64&upstream=libusbx-1.0.26-1.el9.src.rpm&distro=rhel-9.4&package-id=264512d5b37e66fd",
      "cpe": "cpe:2.3:a:libusbx:libusbx:1.0.26-1.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libusbx",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libusbx:1.0.26-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "181910"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libusbx-1.0.26-1.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libusbx@1.0.26-1.el9?arch=aarch64&upstream=libusbx-1.0.26-1.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.0.26-1.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libuuid@2.37.4-18.el9?arch=aarch64&upstream=util-linux-2.37.4-18.el9.src.rpm&distro=rhel-9.4&package-id=0807d1045968217a",
      "cpe": "cpe:2.3:a:libuuid:libuuid:2.37.4-18.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "libuuid",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libuuid:2.37.4-18.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "18.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "70669"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "util-linux-2.37.4-18.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libuuid@2.37.4-18.el9?arch=aarch64&upstream=util-linux-2.37.4-18.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.37.4-18.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libverto@0.3.2-3.el9?arch=aarch64&upstream=libverto-0.3.2-3.el9.src.rpm&distro=rhel-9.4&package-id=1fee48e3877b2f76",
      "cpe": "cpe:2.3:a:libverto:libverto:0.3.2-3.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libverto",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libverto:0.3.2-3.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "71149"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libverto-0.3.2-3.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libverto@0.3.2-3.el9?arch=aarch64&upstream=libverto-0.3.2-3.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "0.3.2-3.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libxcrypt@4.4.18-3.el9?arch=aarch64&upstream=libxcrypt-4.4.18-3.el9.src.rpm&distro=rhel-9.4&package-id=cade77be6997220f",
      "cpe": "cpe:2.3:a:libxcrypt:libxcrypt:4.4.18-3.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+ and BSD and Public Domain"
          }
        }
      ],
      "name": "libxcrypt",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libxcrypt:4.4.18-3.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "270516"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libxcrypt-4.4.18-3.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libxcrypt@4.4.18-3.el9?arch=aarch64&upstream=libxcrypt-4.4.18-3.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "4.4.18-3.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libxml2@2.9.13-6.el9_4?arch=aarch64&upstream=libxml2-2.9.13-6.el9_4.src.rpm&distro=rhel-9.4&package-id=24ff133ba99e864b",
      "cpe": "cpe:2.3:a:libxml2:libxml2:2.9.13-6.el9_4:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libxml2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libxml2:2.9.13-6.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el9_4"
        },
        {
          "name": "syft:metadata:size",
          "value": "2093932"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libxml2-2.9.13-6.el9_4.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libxml2@2.9.13-6.el9_4?arch=aarch64&upstream=libxml2-2.9.13-6.el9_4.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.9.13-6.el9_4"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libyaml@0.2.5-7.el9?arch=aarch64&upstream=libyaml-0.2.5-7.el9.src.rpm&distro=rhel-9.4&package-id=8903df265ae934c5",
      "cpe": "cpe:2.3:a:libyaml:libyaml:0.2.5-7.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libyaml",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libyaml:0.2.5-7.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "137779"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libyaml-0.2.5-7.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libyaml@0.2.5-7.el9?arch=aarch64&upstream=libyaml-0.2.5-7.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "0.2.5-7.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libzstd@1.5.1-2.el9?arch=aarch64&upstream=zstd-1.5.1-2.el9.src.rpm&distro=rhel-9.4&package-id=acac598f29e27b7e",
      "cpe": "cpe:2.3:a:libzstd:libzstd:1.5.1-2.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD and GPLv2"
          }
        }
      ],
      "name": "libzstd",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libzstd:1.5.1-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "2.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "750403"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "zstd-1.5.1-2.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libzstd@1.5.1-2.el9?arch=aarch64&upstream=zstd-1.5.1-2.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.5.1-2.el9"
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/listenablefuture@1.0?package-id=f62d6666b657f514",
      "cpe": "cpe:2.3:a:listenablefuture:listenablefuture:1.0:*:*:*:*:*:*:*",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:listenablefuture:1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:listenablefuture:1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-client-5.4.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "listenablefuture"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-client-5.4.0.jar:com.google.guava:listenablefuture"
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@1.0",
      "type": "library",
      "version": "1.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?package-id=125c0c6fb55bd7e8",
      "cpe": "cpe:2.3:a:listenablefuture:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b421526c5f297295adef1c886e5246c39d4ac629"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.guava",
      "name": "listenablefuture",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "listenablefuture"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar"
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava",
      "type": "library",
      "version": "9999.0-empty-to-avoid-conflict-with-guava"
    },
    {
      "bom-ref": "pkg:rpm/rhel/lksctp-tools@1.0.19-3.el9_4?arch=aarch64&upstream=lksctp-tools-1.0.19-3.el9_4.src.rpm&distro=rhel-9.4&package-id=9450ee314e76e391",
      "cpe": "cpe:2.3:a:lksctp-tools:lksctp-tools:1.0.19-3.el9_4:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2 and GPLv2+ and LGPLv2 and MIT"
          }
        }
      ],
      "name": "lksctp-tools",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lksctp-tools:lksctp_tools:1.0.19-3.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lksctp_tools:lksctp-tools:1.0.19-3.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lksctp_tools:lksctp_tools:1.0.19-3.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lksctp:lksctp-tools:1.0.19-3.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lksctp:lksctp_tools:1.0.19-3.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:lksctp-tools:1.0.19-3.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:lksctp_tools:1.0.19-3.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el9_4"
        },
        {
          "name": "syft:metadata:size",
          "value": "524127"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "lksctp-tools-1.0.19-3.el9_4.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/lksctp-tools@1.0.19-3.el9_4?arch=aarch64&upstream=lksctp-tools-1.0.19-3.el9_4.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.0.19-3.el9_4"
    },
    {
      "bom-ref": "pkg:maven/log4j/log4j@1.2.17?package-id=7df4cabc7663005b",
      "cpe": "cpe:2.3:a:apache:log4j:1.2.17:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5af35056b4d257e4b64b9e8069c0746e8b08629f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "log4j",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "log4j",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/log4j-1.2.17.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "log4j"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "log4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/log4j-1.2.17.jar"
        }
      ],
      "purl": "pkg:maven/log4j/log4j@1.2.17",
      "type": "library",
      "version": "1.2.17"
    },
    {
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.18.0?package-id=be6e08aadfb5dcc2",
      "cpe": "cpe:2.3:a:apache:log4j-1.2-api:2.18.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "09b1039c025e0d9a792daf1af0eac564e7181210"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.logging.log4j",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "log4j-1.2-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j_1.2_api:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:logging:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:2-api:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:2_api:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:1:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/log4j-1.2-api-2.18.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "log4j-1.2-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.logging.log4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/log4j-1.2-api-2.18.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.18.0",
      "type": "library",
      "version": "2.18.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?package-id=87d7a1b18a703753",
      "cpe": "cpe:2.3:a:apache:log4j-api:2.18.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c72ad9b1d8d42e4ea7befd8248bf05877af4c63d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.logging.log4j",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "log4j-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j_api:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/log4j-api-2.18.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "log4j-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.logging.log4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/log4j-api-2.18.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0",
      "type": "library",
      "version": "2.18.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?package-id=1230d61785c53032",
      "cpe": "cpe:2.3:a:apache:log4j-core:2.18.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "07c1882ede137548925eadb750615edab2f6e13c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.logging.log4j",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "log4j-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j_core:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:core:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/log4j-core-2.18.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "log4j-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.logging.log4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/log4j-core-2.18.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0",
      "type": "library",
      "version": "2.18.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-jul@2.18.0?package-id=b3acf0929197393b",
      "cpe": "cpe:2.3:a:apache:log4j-jul:2.18.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8921d9510b9215695dec14bda5f146811632b4c7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.logging.log4j",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "log4j-jul",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j_jul:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:jul:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/log4j-jul-2.18.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "log4j-jul"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.logging.log4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/log4j-jul-2.18.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-jul@2.18.0",
      "type": "library",
      "version": "2.18.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.18.0?package-id=bf47dec5e5f1691a",
      "cpe": "cpe:2.3:a:apache:log4j-slf4j-impl:2.18.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e0ea6ef49f1349bb30e8c6e8a7052d0f3ee7a719"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.logging.log4j",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "log4j-slf4j-impl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j_slf4j_impl:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:slf4j-impl:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:slf4j_impl:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/log4j-slf4j-impl-2.18.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "log4j-slf4j-impl"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.logging.log4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/log4j-slf4j-impl-2.18.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.18.0",
      "type": "library",
      "version": "2.18.0"
    },
    {
      "bom-ref": "pkg:maven/com.squareup.okhttp3/logging-interceptor@3.14.9?package-id=c8aa4d8fd9fbe281",
      "cpe": "cpe:2.3:a:logging-interceptor:logging-interceptor:3.14.9:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7358b6fa1d6c1c8b8c01cb05acd74dbe6d680fb1"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.squareup.okhttp3",
      "name": "logging-interceptor",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:logging-interceptor:logging_interceptor:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:logging_interceptor:logging-interceptor:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:logging_interceptor:logging_interceptor:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:squareup:logging-interceptor:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:squareup:logging_interceptor:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:logging:logging-interceptor:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:logging:logging_interceptor:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:okhttp3:logging-interceptor:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:okhttp3:logging_interceptor:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/logging-interceptor-3.14.9.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "logging-interceptor"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.squareup.okhttp3"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/logging-interceptor-3.14.9.jar"
        }
      ],
      "purl": "pkg:maven/com.squareup.okhttp3/logging-interceptor@3.14.9",
      "type": "library",
      "version": "3.14.9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/lua@5.4.4-4.el9?arch=aarch64&upstream=lua-5.4.4-4.el9.src.rpm&distro=rhel-9.4&package-id=debe38d10d752b18",
      "cpe": "cpe:2.3:a:redhat:lua:5.4.4-4.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "lua",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lua:lua:5.4.4-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "4.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "693181"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "lua-5.4.4-4.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/lua@5.4.4-4.el9?arch=aarch64&upstream=lua-5.4.4-4.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "5.4.4-4.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/lua-libs@5.4.4-4.el9?arch=aarch64&upstream=lua-5.4.4-4.el9.src.rpm&distro=rhel-9.4&package-id=dea63a0ac37b4d3b",
      "cpe": "cpe:2.3:a:lua-libs:lua-libs:5.4.4-4.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "lua-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lua-libs:lua_libs:5.4.4-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lua_libs:lua-libs:5.4.4-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lua_libs:lua_libs:5.4.4-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:lua-libs:5.4.4-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:lua_libs:5.4.4-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lua:lua-libs:5.4.4-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lua:lua_libs:5.4.4-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "4.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "336179"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "lua-5.4.4-4.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/lua-libs@5.4.4-4.el9?arch=aarch64&upstream=lua-5.4.4-4.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "5.4.4-4.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/lua-posix@35.0-8.el9?arch=aarch64&upstream=lua-posix-35.0-8.el9.src.rpm&distro=rhel-9.4&package-id=d3936a7e8c2d4115",
      "cpe": "cpe:2.3:a:lua-posix:lua-posix:35.0-8.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "lua-posix",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lua-posix:lua_posix:35.0-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lua_posix:lua-posix:35.0-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lua_posix:lua_posix:35.0-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:lua-posix:35.0-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:lua_posix:35.0-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lua:lua-posix:35.0-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lua:lua_posix:35.0-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "8.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "2034234"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "lua-posix-35.0-8.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/lua-posix@35.0-8.el9?arch=aarch64&upstream=lua-posix-35.0-8.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "35.0-8.el9"
    },
    {
      "bom-ref": "pkg:maven/org.lz4.java/lz4-java@1.8.0?package-id=4d2dfa5c546b1923",
      "cpe": "cpe:2.3:a:lz4-java:lz4-java:1.8.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "lz4-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4-java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4-java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/lz4-java-1.8.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/lz4-java-1.8.0.jar"
        }
      ],
      "purl": "pkg:maven/org.lz4.java/lz4-java@1.8.0",
      "type": "library",
      "version": "1.8.0"
    },
    {
      "bom-ref": "pkg:maven/org.lz4.java/lz4-java@1.8.0?package-id=f2f7879303dc948d",
      "cpe": "cpe:2.3:a:lz4-java:lz4-java:1.8.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "lz4-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4-java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4-java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/lz4-java-1.8.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/lz4-java-1.8.0.jar"
        }
      ],
      "purl": "pkg:maven/org.lz4.java/lz4-java@1.8.0",
      "type": "library",
      "version": "1.8.0"
    },
    {
      "bom-ref": "pkg:maven/org.lz4.java/lz4-java@1.8.0?package-id=4e84a4deedbecefd",
      "cpe": "cpe:2.3:a:lz4-java:lz4-java:1.8.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "lz4-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4-java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4-java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-indexing-service/lz4-java-1.8.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-indexing-service/lz4-java-1.8.0.jar"
        }
      ],
      "purl": "pkg:maven/org.lz4.java/lz4-java@1.8.0",
      "type": "library",
      "version": "1.8.0"
    },
    {
      "bom-ref": "pkg:maven/org.lz4.java/lz4-java@1.8.0?package-id=12911af9a852104f",
      "cpe": "cpe:2.3:a:lz4-java:lz4-java:1.8.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "lz4-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4-java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4-java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/lz4-java-1.8.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/lz4-java-1.8.0.jar"
        }
      ],
      "purl": "pkg:maven/org.lz4.java/lz4-java@1.8.0",
      "type": "library",
      "version": "1.8.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/lz4-libs@1.9.3-5.el9?arch=aarch64&upstream=lz4-1.9.3-5.el9.src.rpm&distro=rhel-9.4&package-id=41bd3b917f21f3c9",
      "cpe": "cpe:2.3:a:lz4-libs:lz4-libs:1.9.3-5.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+ and BSD"
          }
        }
      ],
      "name": "lz4-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4-libs:lz4_libs:1.9.3-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_libs:lz4-libs:1.9.3-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_libs:lz4_libs:1.9.3-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:lz4-libs:1.9.3-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:lz4_libs:1.9.3-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:lz4-libs:1.9.3-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:lz4_libs:1.9.3-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "5.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "137115"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "lz4-1.9.3-5.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/lz4-libs@1.9.3-5.el9?arch=aarch64&upstream=lz4-1.9.3-5.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.9.3-5.el9"
    },
    {
      "bom-ref": "pkg:maven/org.mapdb/mapdb@1.0.8?package-id=44b1ae3f11197de3",
      "cpe": "cpe:2.3:a:mapdb:mapdb:1.0.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "64485a221d9095fc7ab9b50cc34c6b4b58467e2e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.mapdb",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "mapdb",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/mapdb-1.0.8.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "mapdb"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.mapdb"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/mapdb-1.0.8.jar"
        }
      ],
      "purl": "pkg:maven/org.mapdb/mapdb@1.0.8",
      "type": "library",
      "version": "1.0.8"
    },
    {
      "bom-ref": "pkg:maven/org.mapdb/mapdb@1.0.8?package-id=b371b031b33666cd",
      "cpe": "cpe:2.3:a:mapdb:mapdb:1.0.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "64485a221d9095fc7ab9b50cc34c6b4b58467e2e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.mapdb",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "mapdb",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-global/mapdb-1.0.8.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "mapdb"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.mapdb"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-global/mapdb-1.0.8.jar"
        }
      ],
      "purl": "pkg:maven/org.mapdb/mapdb@1.0.8",
      "type": "library",
      "version": "1.0.8"
    },
    {
      "bom-ref": "pkg:maven/org.mapdb/mapdb@1.0.8?package-id=ff869627f49feb7a",
      "cpe": "cpe:2.3:a:mapdb:mapdb:1.0.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "64485a221d9095fc7ab9b50cc34c6b4b58467e2e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.mapdb",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "mapdb",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-single/mapdb-1.0.8.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "mapdb"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.mapdb"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-single/mapdb-1.0.8.jar"
        }
      ],
      "purl": "pkg:maven/org.mapdb/mapdb@1.0.8",
      "type": "library",
      "version": "1.0.8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.maven/maven-aether-provider@3.1.1?package-id=9390754ab16cf48d",
      "cpe": "cpe:2.3:a:apache:maven-aether-provider:3.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7fd8a65d950d0e77dd39cc4ce2776ff9673ae470"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.maven",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "maven-aether-provider",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:maven_aether_provider:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:maven:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-aether-provider-3.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "maven-aether-provider"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.maven"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-aether-provider-3.1.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-aether-provider@3.1.1",
      "type": "library",
      "version": "3.1.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.maven/maven-artifact@3.6.0?package-id=92a5cf62125bce7b",
      "cpe": "cpe:2.3:a:apache:maven-artifact:3.6.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d4c0da647de59c9ccc304a112fe1f1474d49e8eb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.maven",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "maven-artifact",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:maven_artifact:3.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:maven:3.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-artifact-3.6.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "maven-artifact"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.maven"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-artifact-3.6.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-artifact@3.6.0",
      "type": "library",
      "version": "3.6.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.maven/maven-model@3.1.1?package-id=a37f765df866e3e9",
      "cpe": "cpe:2.3:a:apache:maven-model:3.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ccf79a1a63ef35de038a4226a952175c4e9f4f59"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.maven",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "maven-model",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:maven_model:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-model-3.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "maven-model"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.maven"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-model-3.1.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-model@3.1.1",
      "type": "library",
      "version": "3.1.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.maven/maven-model-builder@3.1.1?package-id=afa644f884e358b5",
      "cpe": "cpe:2.3:a:apache:maven-model-builder:3.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5fb53c92da84ebeff403414b667611d6bcd477cf"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.maven",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "maven-model-builder",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:maven_model_builder:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:maven:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-model-builder-3.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "maven-model-builder"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.maven"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-model-builder-3.1.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-model-builder@3.1.1",
      "type": "library",
      "version": "3.1.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.maven/maven-repository-metadata@3.1.1?package-id=5ca6df781835f3fa",
      "cpe": "cpe:2.3:a:apache:maven-repository-metadata:3.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ef5bccf2a7a22a326c8fe94e1d56f6f15419bedd"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.maven",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "maven-repository-metadata",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:maven_repository_metadata:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-repository-metadata-3.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "maven-repository-metadata"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.maven"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-repository-metadata-3.1.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-repository-metadata@3.1.1",
      "type": "library",
      "version": "3.1.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.maven/maven-settings@3.1.1?package-id=c6e4ae577cbe6321",
      "cpe": "cpe:2.3:a:apache:maven-settings:3.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "311d38cf15ec7f5c713985862632db91b7a827af"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.maven",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "maven-settings",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:maven_settings:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-settings-3.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "maven-settings"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.maven"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-settings-3.1.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-settings@3.1.1",
      "type": "library",
      "version": "3.1.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.maven/maven-settings-builder@3.1.1?package-id=0da98a8d8f4ffa7f",
      "cpe": "cpe:2.3:a:apache:maven-settings-builder:3.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e2d5e96ea4bbd4fc463dbb76d07dd8aefac05e3c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.maven",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "maven-settings-builder",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:maven_settings_builder:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-settings-builder-3.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "maven-settings-builder"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.maven"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-settings-builder-3.1.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-settings-builder@3.1.1",
      "type": "library",
      "version": "3.1.1"
    },
    {
      "bom-ref": "pkg:maven/io.dropwizard.metrics/metrics-core@4.0.7?package-id=b2ac5fd55efe07fb",
      "cpe": "cpe:2.3:a:metrics-core:metrics-core:4.0.7:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "673899f605f52ca35836673ccfee97154a496a61"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.dropwizard.metrics",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "name": "metrics-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics-core:metrics_core:4.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics_core:metrics-core:4.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics_core:metrics_core:4.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dropwizard:metrics-core:4.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dropwizard:metrics_core:4.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics-core:metrics:4.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics:metrics-core:4.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics:metrics_core:4.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics_core:metrics:4.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dropwizard:metrics:4.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:metrics-core:4.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:metrics_core:4.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics-core:core:4.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics_core:core:4.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dropwizard:core:4.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics:metrics:4.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:metrics:4.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics:core:4.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:4.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/metrics-core-4.0.7.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "metrics-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.dropwizard.metrics"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/metrics-core-4.0.7.jar"
        }
      ],
      "purl": "pkg:maven/io.dropwizard.metrics/metrics-core@4.0.7",
      "type": "library",
      "version": "4.0.7"
    },
    {
      "bom-ref": "pkg:rpm/rhel/microdnf@3.9.1-3.el9?arch=aarch64&upstream=microdnf-3.9.1-3.el9.src.rpm&distro=rhel-9.4&package-id=1f98506fc1a4733f",
      "cpe": "cpe:2.3:a:microdnf:microdnf:3.9.1-3.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+"
          }
        }
      ],
      "name": "microdnf",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:microdnf:3.9.1-3.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "158990"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "microdnf-3.9.1-3.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/microdnf@3.9.1-3.el9?arch=aarch64&upstream=microdnf-3.9.1-3.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.9.1-3.el9"
    },
    {
      "bom-ref": "pkg:maven/org.mockito.mockito-core/mockito-core@4.3.1?package-id=32d5793e1506aa4d",
      "cpe": "cpe:2.3:a:mockito-core:mockito-core:4.3.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b35c904ac218ca833935e5fccc0aaaaf38225de3"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "mockito-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mockito-core:mockito_core:4.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mockito_core:mockito-core:4.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mockito_core:mockito_core:4.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mockito:mockito-core:4.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mockito:mockito_core:4.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/mockito-core-4.3.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/mockito-core-4.3.1.jar"
        }
      ],
      "purl": "pkg:maven/org.mockito.mockito-core/mockito-core@4.3.1",
      "type": "library",
      "version": "4.3.1"
    },
    {
      "bom-ref": "pkg:rpm/rhel/mpfr@4.1.0-7.el9?arch=aarch64&upstream=mpfr-4.1.0-7.el9.src.rpm&distro=rhel-9.4&package-id=982d0a885ba171fa",
      "cpe": "cpe:2.3:a:redhat:mpfr:4.1.0-7.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv3+"
          }
        }
      ],
      "name": "mpfr",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mpfr:mpfr:4.1.0-7.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "608467"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "mpfr-4.1.0-7.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/mpfr@4.1.0-7.el9?arch=aarch64&upstream=mpfr-4.1.0-7.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "4.1.0-7.el9"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/mysql-metadata-storage@26.0.0?package-id=0c080ff77aabd1cf",
      "cpe": "cpe:2.3:a:apache:mysql-metadata-storage:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e9f6c2193eedef2c52abb460a0a2749f9fdeb9d0"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "mysql-metadata-storage",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:mysql_metadata_storage:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/mysql-metadata-storage/mysql-metadata-storage-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "mysql-metadata-storage"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/mysql-metadata-storage/mysql-metadata-storage-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/mysql-metadata-storage@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/nano@5.6.1-5.el9?arch=aarch64&upstream=nano-5.6.1-5.el9.src.rpm&distro=rhel-9.4&package-id=537fef2185fbf0c7",
      "cpe": "cpe:2.3:a:redhat:nano:5.6.1-5.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+"
          }
        }
      ],
      "name": "nano",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nano:nano:5.6.1-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "5.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "2884056"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "nano-5.6.1-5.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/nano@5.6.1-5.el9?arch=aarch64&upstream=nano-5.6.1-5.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "5.6.1-5.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/ncurses-base@6.2-10.20210508.el9?arch=noarch&upstream=ncurses-6.2-10.20210508.el9.src.rpm&distro=rhel-9.4&package-id=a0d19211c8c4589b",
      "cpe": "cpe:2.3:a:ncurses-base:ncurses-base:6.2-10.20210508.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "ncurses-base",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses-base:ncurses_base:6.2-10.20210508.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses_base:ncurses-base:6.2-10.20210508.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses_base:ncurses_base:6.2-10.20210508.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses:ncurses-base:6.2-10.20210508.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses:ncurses_base:6.2-10.20210508.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:ncurses-base:6.2-10.20210508.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:ncurses_base:6.2-10.20210508.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "10.20210508.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "307293"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "ncurses-6.2-10.20210508.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/ncurses-base@6.2-10.20210508.el9?arch=noarch&upstream=ncurses-6.2-10.20210508.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "6.2-10.20210508.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/ncurses-libs@6.2-10.20210508.el9?arch=aarch64&upstream=ncurses-6.2-10.20210508.el9.src.rpm&distro=rhel-9.4&package-id=e8ddd21c369fc759",
      "cpe": "cpe:2.3:a:ncurses-libs:ncurses-libs:6.2-10.20210508.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "ncurses-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses-libs:ncurses_libs:6.2-10.20210508.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses_libs:ncurses-libs:6.2-10.20210508.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses_libs:ncurses_libs:6.2-10.20210508.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses:ncurses-libs:6.2-10.20210508.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses:ncurses_libs:6.2-10.20210508.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:ncurses-libs:6.2-10.20210508.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:ncurses_libs:6.2-10.20210508.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "10.20210508.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "1229839"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "ncurses-6.2-10.20210508.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/ncurses-libs@6.2-10.20210508.el9?arch=aarch64&upstream=ncurses-6.2-10.20210508.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "6.2-10.20210508.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/nettle@3.9.1-1.el9?arch=aarch64&upstream=nettle-3.9.1-1.el9.src.rpm&distro=rhel-9.4&package-id=5f2a9e6879cf9fb0",
      "cpe": "cpe:2.3:a:nettle:nettle:3.9.1-1.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv3+ or GPLv2+"
          }
        }
      ],
      "name": "nettle",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:nettle:3.9.1-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "977663"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "nettle-3.9.1-1.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/nettle@3.9.1-1.el9?arch=aarch64&upstream=nettle-3.9.1-1.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.9.1-1.el9"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty@3.10.6.Final?package-id=a1997d3229db9ed1",
      "cpe": "cpe:2.3:a:NettyBundleActivator:netty:3.10.6.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "18ed04a0e502896552854926e908509db2987a00"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:container:netty:3.10.6.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss:netty:3.10.6.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty:3.10.6.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:netty:3.10.6.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-3.10.6.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-3.10.6.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty@3.10.6.Final",
      "type": "library",
      "version": "3.10.6.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.111.Final?package-id=63e2c901e5cf1757",
      "cpe": "cpe:2.3:a:netty-project:netty-buffer:4.1.111.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b54863f578939e135d3b3aea610284ae57c188cf"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-buffer",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_buffer:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-buffer:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_buffer:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-buffer:netty-buffer:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-buffer:netty_buffer:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_buffer:netty-buffer:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_buffer:netty_buffer:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:buffer:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:buffer:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffer:netty-buffer:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffer:netty_buffer:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-buffer:buffer:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_buffer:buffer:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-buffer:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_buffer:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffer:buffer:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:buffer:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-buffer-4.1.111.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-buffer"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-buffer-4.1.111.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-buffer@4.1.111.Final",
      "type": "library",
      "version": "4.1.111.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.111.Final?package-id=8a2b1237e5cfc8d1",
      "cpe": "cpe:2.3:a:netty-project:netty-codec:4.1.111.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a6762ec00a6d268f9980741f5b755838bcd658bf"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_codec:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-codec:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_codec:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:netty-codec:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:netty_codec:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:netty-codec:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:netty_codec:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:codec:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:codec:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:netty-codec:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:netty_codec:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:codec:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-codec:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_codec:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:codec:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:codec:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:codec:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-codec-4.1.111.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-codec"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-codec-4.1.111.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-codec@4.1.111.Final",
      "type": "library",
      "version": "4.1.111.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-dns@4.1.111.Final?package-id=336b718d9f727388",
      "cpe": "cpe:2.3:a:netty-codec-dns:netty-codec-dns:4.1.111.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f988dbb527efb0e7cf7d444cc50b0fc3f5f380ec"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-codec-dns",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec-dns:netty_codec_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_dns:netty-codec-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_dns:netty_codec_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-codec-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_codec_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-codec-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_codec_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:netty-codec-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:netty_codec_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:netty-codec-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:netty_codec_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-dns:netty-codec-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-dns:netty_codec_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_dns:netty-codec-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_dns:netty_codec_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec-dns:codec-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec-dns:codec_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_dns:codec-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_dns:codec_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:codec-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:codec_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:codec-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:codec_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:netty-codec-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:netty_codec_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:codec-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:codec_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-codec-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_codec_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:codec-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:codec_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-dns:codec-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-dns:codec_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_dns:codec-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_dns:codec_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:codec-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:codec_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:codec-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:codec_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-codec-dns-4.1.111.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-codec-dns"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-codec-dns-4.1.111.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-codec-dns@4.1.111.Final",
      "type": "library",
      "version": "4.1.111.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.111.Final?package-id=7bfeb7bb5b12be65",
      "cpe": "cpe:2.3:a:netty-codec-http:netty-codec-http:4.1.111.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c6ecbc452321e632bf3cea0f9758839b650455c7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-codec-http",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec-http:netty_codec_http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_http:netty-codec-http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_http:netty_codec_http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-codec-http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_codec_http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-codec-http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_codec_http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:netty-codec-http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:netty_codec_http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:netty-codec-http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:netty_codec_http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-http:netty-codec-http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-http:netty_codec_http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_http:netty-codec-http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_http:netty_codec_http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec-http:codec-http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec-http:codec_http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_http:codec-http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_http:codec_http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:codec-http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:codec_http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:codec-http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:codec_http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:netty-codec-http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:netty_codec_http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:codec-http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:codec_http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-codec-http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_codec_http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:codec-http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:codec_http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-http:codec-http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-http:codec_http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_http:codec-http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_http:codec_http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:codec-http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:codec_http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:codec-http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:codec_http:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-codec-http-4.1.111.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-codec-http"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-codec-http-4.1.111.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-codec-http@4.1.111.Final",
      "type": "library",
      "version": "4.1.111.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-socks@4.1.111.Final?package-id=bbec5e37d71d43a2",
      "cpe": "cpe:2.3:a:netty-codec-socks:netty-codec-socks:4.1.111.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ea52ef6617a9b69b0baaebb7f0b80373527f9607"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-codec-socks",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec-socks:netty_codec_socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_socks:netty-codec-socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_socks:netty_codec_socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-codec-socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_codec_socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-codec-socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_codec_socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-socks:netty-codec-socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-socks:netty_codec_socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_socks:netty-codec-socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_socks:netty_codec_socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec-socks:codec-socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec-socks:codec_socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:netty-codec-socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:netty_codec_socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:netty-codec-socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:netty_codec_socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_socks:codec-socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_socks:codec_socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:codec-socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:codec_socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:codec-socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:codec_socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-socks:codec-socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-socks:codec_socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:netty-codec-socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:netty_codec_socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_socks:codec-socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_socks:codec_socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:codec-socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:codec_socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-codec-socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_codec_socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:codec-socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:codec_socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:codec-socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:codec_socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:codec-socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:codec_socks:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-codec-socks-4.1.111.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-codec-socks"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-codec-socks-4.1.111.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-codec-socks@4.1.111.Final",
      "type": "library",
      "version": "4.1.111.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-common@4.1.111.Final?package-id=1dd01f6d8ca33c61",
      "cpe": "cpe:2.3:a:netty-project:netty-common:4.1.111.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "58210befcb31adbcadd5724966a061444db91863"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-common:netty-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-common:netty_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_common:netty-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_common:netty_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:netty-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:netty_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-common:common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_common:common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-common-4.1.111.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-common-4.1.111.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-common@4.1.111.Final",
      "type": "library",
      "version": "4.1.111.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-handler@4.1.111.Final?package-id=a2a4f21645a7fdbe",
      "cpe": "cpe:2.3:a:netty-handler:netty-handler:4.1.111.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2bc6a58ad2e9e279634b6e55022e8dcd3c175cc4"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-handler",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-handler:netty_handler:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-handler:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_handler:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler:netty-handler:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler:netty_handler:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-handler:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_handler:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler:netty-handler:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler:netty_handler:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-handler:handler:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:handler:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler:handler:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:handler:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-handler:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_handler:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler:handler:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:handler:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-handler-4.1.111.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-handler"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-handler-4.1.111.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-handler@4.1.111.Final",
      "type": "library",
      "version": "4.1.111.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.111.Final?package-id=9fa19737951ce38f",
      "cpe": "cpe:2.3:a:netty-handler-proxy:netty-handler-proxy:4.1.111.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1e459c8630bb7c942b79a97e62dd728798de6a8c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-handler-proxy",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-handler-proxy:netty_handler_proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler_proxy:netty-handler-proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler_proxy:netty_handler_proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler-proxy:netty-handler-proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler-proxy:netty_handler_proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler_proxy:netty-handler-proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler_proxy:netty_handler_proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-handler-proxy:handler-proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-handler-proxy:handler_proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-handler:netty-handler-proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-handler:netty_handler_proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-handler-proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_handler_proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler:netty-handler-proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler:netty_handler_proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler_proxy:handler-proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler_proxy:handler_proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-handler-proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_handler_proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler-proxy:handler-proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler-proxy:handler_proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler:netty-handler-proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler:netty_handler_proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler_proxy:handler-proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler_proxy:handler_proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-handler:handler-proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-handler:handler_proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:handler-proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:handler_proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler:handler-proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler:handler_proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:handler-proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:handler_proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-handler-proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_handler_proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler:handler-proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler:handler_proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:handler-proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:handler_proxy:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-handler-proxy-4.1.111.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-handler-proxy"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-handler-proxy-4.1.111.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.111.Final",
      "type": "library",
      "version": "4.1.111.Final"
    },
    {
      "bom-ref": "pkg:maven/com.typesafe.netty/netty-reactive-streams@2.0.0?package-id=d7988a902e738969",
      "cpe": "cpe:2.3:a:netty-reactive-streams:netty-reactive-streams:2.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "84ede759015e7480ca8e6ec2af6e2f596aa92dec"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.typesafe.netty",
      "name": "netty-reactive-streams",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-reactive-streams:netty_reactive_streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_reactive_streams:netty-reactive-streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_reactive_streams:netty_reactive_streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-reactive:netty-reactive-streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-reactive:netty_reactive_streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_reactive:netty-reactive-streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_reactive:netty_reactive_streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:typesafe:netty-reactive-streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:typesafe:netty_reactive_streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-reactive-streams:netty:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-reactive-streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_reactive_streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_reactive_streams:netty:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-reactive:netty:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_reactive:netty:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:typesafe:netty:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-reactive-streams-2.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-reactive-streams"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.typesafe.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-reactive-streams-2.0.0.jar"
        }
      ],
      "purl": "pkg:maven/com.typesafe.netty/netty-reactive-streams@2.0.0",
      "type": "library",
      "version": "2.0.0"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-resolver@4.1.111.Final?package-id=bad643e2f5f36ec2",
      "cpe": "cpe:2.3:a:netty-resolver:netty-resolver:4.1.111.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3493179999f211dc49714319f81da2be86523a3b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-resolver",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-resolver:netty_resolver:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver:netty-resolver:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver:netty_resolver:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-resolver:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_resolver:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-resolver:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_resolver:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-resolver:resolver:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver:resolver:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver:netty-resolver:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver:netty_resolver:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:resolver:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:resolver:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-resolver:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_resolver:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver:resolver:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:resolver:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-resolver-4.1.111.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-resolver"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-resolver-4.1.111.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-resolver@4.1.111.Final",
      "type": "library",
      "version": "4.1.111.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.111.Final?package-id=eec45c26c49ab7df",
      "cpe": "cpe:2.3:a:netty-resolver-dns:netty-resolver-dns:4.1.111.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5ac6a3d96935129ba45ea768ad30e31cad0d8c4d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-resolver-dns",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-resolver-dns:netty_resolver_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver_dns:netty-resolver-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver_dns:netty_resolver_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-resolver:netty-resolver-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-resolver:netty_resolver_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver:netty-resolver-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver:netty_resolver_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-resolver-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_resolver_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-resolver-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_resolver_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-resolver-dns:resolver-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-resolver-dns:resolver_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver_dns:resolver-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver_dns:resolver_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver-dns:netty-resolver-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver-dns:netty_resolver_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver_dns:netty-resolver-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver_dns:netty_resolver_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-resolver:resolver-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-resolver:resolver_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver:resolver-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver:resolver_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver:netty-resolver-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver:netty_resolver_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:resolver-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:resolver_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:resolver-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:resolver_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver-dns:resolver-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver-dns:resolver_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver_dns:resolver-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver_dns:resolver_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-resolver-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_resolver_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver:resolver-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver:resolver_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:resolver-dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:resolver_dns:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-resolver-dns-4.1.111.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-resolver-dns"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-resolver-dns-4.1.111.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-resolver-dns@4.1.111.Final",
      "type": "library",
      "version": "4.1.111.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.111.Final?package-id=5880dae697854688",
      "cpe": "cpe:2.3:a:netty-transport:netty-transport:4.1.111.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "24e97cf14ea9d80afe4c5ab69066b587fccc154a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-transport",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:netty_transport:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:netty-transport:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:netty_transport:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-transport:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_transport:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-transport:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_transport:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:transport:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:transport:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:netty-transport:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:netty_transport:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:transport:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:transport:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-transport:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_transport:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:transport:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:transport:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-transport-4.1.111.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-transport"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-transport-4.1.111.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-transport@4.1.111.Final",
      "type": "library",
      "version": "4.1.111.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.111.Final?package-id=458180b149e59e37",
      "cpe": "cpe:2.3:a:netty-transport-classes-epoll:netty-transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8b97d32eb1489043e478deea99bd93ce487b82f6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-transport-classes-epoll",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-classes-epoll:netty_transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_classes_epoll:netty-transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_classes_epoll:netty_transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-classes-epoll:transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-classes-epoll:transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-classes:netty-transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-classes:netty_transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_classes:netty-transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_classes:netty_transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_classes_epoll:transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_classes_epoll:transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-classes-epoll:netty-transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-classes-epoll:netty_transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_classes_epoll:netty-transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_classes_epoll:netty_transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-classes:transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-classes:transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_classes:transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_classes:transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-classes-epoll:transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-classes-epoll:transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-classes:netty-transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-classes:netty_transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_classes:netty-transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_classes:netty_transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_classes_epoll:transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_classes_epoll:transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:netty-transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:netty_transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:netty-transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:netty_transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-classes:transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-classes:transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_classes:transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_classes:transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:netty-transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:netty_transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:transport-classes-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:transport_classes_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-transport-classes-epoll-4.1.111.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-transport-classes-epoll"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-transport-classes-epoll-4.1.111.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.111.Final",
      "type": "library",
      "version": "4.1.111.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.111.Final?package-id=8b74e7a573330dd8",
      "cpe": "cpe:2.3:a:netty-transport-native-epoll:netty-transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e102a0568f4f2cd7d4049c4154f94528cadf646b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-transport-native-epoll",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native-epoll:netty_transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_epoll:netty-transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_epoll:netty_transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native-epoll:transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native-epoll:transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native:netty-transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native:netty_transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native:netty-transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native:netty_transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_epoll:transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_epoll:transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-epoll:netty-transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-epoll:netty_transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_epoll:netty-transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_epoll:netty_transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native:transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native:transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native:transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native:transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-epoll:transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-epoll:transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native:netty-transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native:netty_transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native:netty-transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native:netty_transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_epoll:transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_epoll:transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:netty-transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:netty_transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:netty-transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:netty_transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native:transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native:transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native:transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native:transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:netty-transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:netty_transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:transport-native-epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:transport_native_epoll:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-transport-native-epoll-4.1.111.Final-linux-x86_64.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-transport-native-epoll"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-transport-native-epoll-4.1.111.Final-linux-x86_64.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.111.Final",
      "type": "library",
      "version": "4.1.111.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.111.Final?package-id=34fa98cc00783deb",
      "cpe": "cpe:2.3:a:netty-transport-native-unix-common:netty-transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "acafc128cddafa021bc0b48b0788eb0e118add5e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-transport-native-unix-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native-unix-common:netty_transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_unix_common:netty-transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_unix_common:netty_transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native-unix-common:transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native-unix-common:transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_unix_common:transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_unix_common:transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-unix-common:netty-transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-unix-common:netty_transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_unix_common:netty-transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_unix_common:netty_transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native-unix:netty-transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native-unix:netty_transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_unix:netty-transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_unix:netty_transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native:netty-transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native:netty_transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native:netty-transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native:netty_transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-unix-common:transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-unix-common:transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_unix_common:transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_unix_common:transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native-unix:transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native-unix:transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_unix:transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_unix:transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-unix:netty-transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-unix:netty_transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_unix:netty-transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_unix:netty_transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native:transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native:transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native:transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native:transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native:netty-transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native:netty_transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native:netty-transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native:netty_transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:netty-transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:netty_transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:netty-transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:netty_transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-unix:transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-unix:transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_unix:transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_unix:transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native:transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native:transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native:transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native:transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:netty-transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:netty_transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:transport-native-unix-common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:transport_native_unix_common:4.1.111.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-transport-native-unix-common-4.1.111.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-transport-native-unix-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-transport-native-unix-common-4.1.111.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.111.Final",
      "type": "library",
      "version": "4.1.111.Final"
    },
    {
      "bom-ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@4.41.1?package-id=f235fe45530a4dc8",
      "cpe": "cpe:2.3:a:connect2id-ltd-:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0290f3ff0035bb2f839c77ad8ec39466f31091a8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.nimbusds",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "nimbus-jose-jwt",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id-ltd-:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose-jwt:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose-jwt:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose_jwt:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose_jwt:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/nimbus-jose-jwt-4.41.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "nimbus-jose-jwt"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.nimbusds"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/nimbus-jose-jwt-4.41.1.jar"
        }
      ],
      "purl": "pkg:maven/com.nimbusds/nimbus-jose-jwt@4.41.1",
      "type": "library",
      "version": "4.41.1"
    },
    {
      "bom-ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@4.41.1?package-id=f1de79ed178bbc0a",
      "cpe": "cpe:2.3:a:connect2id-ltd-:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0290f3ff0035bb2f839c77ad8ec39466f31091a8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.nimbusds",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "nimbus-jose-jwt",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id-ltd-:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose-jwt:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose-jwt:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose_jwt:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose_jwt:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/nimbus-jose-jwt-4.41.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "nimbus-jose-jwt"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.nimbusds"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/nimbus-jose-jwt-4.41.1.jar"
        }
      ],
      "purl": "pkg:maven/com.nimbusds/nimbus-jose-jwt@4.41.1",
      "type": "library",
      "version": "4.41.1"
    },
    {
      "bom-ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@7.9?package-id=d89f4f62341b6a9d",
      "cpe": "cpe:2.3:a:connect2id-ltd-:nimbus-jose-jwt:7.9:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b608cd5e306d67bb58fe5bd687387aa0671687a6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.nimbusds",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "nimbus-jose-jwt",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id-ltd-:nimbus_jose_jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:nimbus-jose-jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:nimbus_jose_jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose-jwt:nimbus-jose-jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose-jwt:nimbus_jose_jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose_jwt:nimbus-jose-jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose_jwt:nimbus_jose_jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose:nimbus-jose-jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose:nimbus_jose_jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose:nimbus-jose-jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose:nimbus_jose_jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:nimbus-jose-jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:nimbus_jose_jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus:nimbus-jose-jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus:nimbus_jose_jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/nimbus-jose-jwt-7.9.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "nimbus-jose-jwt"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.nimbusds"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/nimbus-jose-jwt-7.9.jar"
        }
      ],
      "purl": "pkg:maven/com.nimbusds/nimbus-jose-jwt@7.9",
      "type": "library",
      "version": "7.9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/npth@1.6-8.el9?arch=aarch64&upstream=npth-1.6-8.el9.src.rpm&distro=rhel-9.4&package-id=43dde3685d8352e0",
      "cpe": "cpe:2.3:a:redhat:npth:1.6-8.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "npth",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npth:npth:1.6-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "8.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "95499"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "npth-1.6-8.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/npth@1.6-8.el9?arch=aarch64&upstream=npth-1.6-8.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.6-8.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/nspr@4.35.0-7.el9_4?arch=aarch64&upstream=nss-3.90.0-7.el9_4.src.rpm&distro=rhel-9.4&package-id=8da33c9dec50777b",
      "cpe": "cpe:2.3:a:redhat:nspr:4.35.0-7.el9_4:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "MPLv2.0"
          }
        }
      ],
      "name": "nspr",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nspr:nspr:4.35.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el9_4"
        },
        {
          "name": "syft:metadata:size",
          "value": "427248"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "nss-3.90.0-7.el9_4.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/nspr@4.35.0-7.el9_4?arch=aarch64&upstream=nss-3.90.0-7.el9_4.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "4.35.0-7.el9_4"
    },
    {
      "bom-ref": "pkg:rpm/rhel/nss@3.90.0-7.el9_4?arch=aarch64&upstream=nss-3.90.0-7.el9_4.src.rpm&distro=rhel-9.4&package-id=5f78d9247e2fbf2c",
      "cpe": "cpe:2.3:a:redhat:nss:3.90.0-7.el9_4:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "MPLv2.0"
          }
        }
      ],
      "name": "nss",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss:nss:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el9_4"
        },
        {
          "name": "syft:metadata:size",
          "value": "1791756"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "nss-3.90.0-7.el9_4.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/nss@3.90.0-7.el9_4?arch=aarch64&upstream=nss-3.90.0-7.el9_4.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.90.0-7.el9_4"
    },
    {
      "bom-ref": "pkg:rpm/rhel/nss-softokn@3.90.0-7.el9_4?arch=aarch64&upstream=nss-3.90.0-7.el9_4.src.rpm&distro=rhel-9.4&package-id=9f30d0bbecca0f29",
      "cpe": "cpe:2.3:a:nss-softokn:nss-softokn:3.90.0-7.el9_4:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "MPLv2.0"
          }
        }
      ],
      "name": "nss-softokn",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss-softokn:nss_softokn:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss_softokn:nss-softokn:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss_softokn:nss_softokn:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:nss-softokn:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:nss_softokn:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss:nss-softokn:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss:nss_softokn:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el9_4"
        },
        {
          "name": "syft:metadata:size",
          "value": "1445115"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "nss-3.90.0-7.el9_4.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/nss-softokn@3.90.0-7.el9_4?arch=aarch64&upstream=nss-3.90.0-7.el9_4.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.90.0-7.el9_4"
    },
    {
      "bom-ref": "pkg:rpm/rhel/nss-softokn-freebl@3.90.0-7.el9_4?arch=aarch64&upstream=nss-3.90.0-7.el9_4.src.rpm&distro=rhel-9.4&package-id=9ae1621fdc15510b",
      "cpe": "cpe:2.3:a:nss-softokn-freebl:nss-softokn-freebl:3.90.0-7.el9_4:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "MPLv2.0"
          }
        }
      ],
      "name": "nss-softokn-freebl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss-softokn-freebl:nss_softokn_freebl:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss_softokn_freebl:nss-softokn-freebl:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss_softokn_freebl:nss_softokn_freebl:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss-softokn:nss-softokn-freebl:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss-softokn:nss_softokn_freebl:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss_softokn:nss-softokn-freebl:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss_softokn:nss_softokn_freebl:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:nss-softokn-freebl:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:nss_softokn_freebl:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss:nss-softokn-freebl:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss:nss_softokn_freebl:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el9_4"
        },
        {
          "name": "syft:metadata:size",
          "value": "753014"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "nss-3.90.0-7.el9_4.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/nss-softokn-freebl@3.90.0-7.el9_4?arch=aarch64&upstream=nss-3.90.0-7.el9_4.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.90.0-7.el9_4"
    },
    {
      "bom-ref": "pkg:rpm/rhel/nss-sysinit@3.90.0-7.el9_4?arch=aarch64&upstream=nss-3.90.0-7.el9_4.src.rpm&distro=rhel-9.4&package-id=551b007ec96781f2",
      "cpe": "cpe:2.3:a:nss-sysinit:nss-sysinit:3.90.0-7.el9_4:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "MPLv2.0"
          }
        }
      ],
      "name": "nss-sysinit",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss-sysinit:nss_sysinit:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss_sysinit:nss-sysinit:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss_sysinit:nss_sysinit:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:nss-sysinit:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:nss_sysinit:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss:nss-sysinit:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss:nss_sysinit:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el9_4"
        },
        {
          "name": "syft:metadata:size",
          "value": "71335"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "nss-3.90.0-7.el9_4.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/nss-sysinit@3.90.0-7.el9_4?arch=aarch64&upstream=nss-3.90.0-7.el9_4.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.90.0-7.el9_4"
    },
    {
      "bom-ref": "pkg:rpm/rhel/nss-util@3.90.0-7.el9_4?arch=aarch64&upstream=nss-3.90.0-7.el9_4.src.rpm&distro=rhel-9.4&package-id=fb094d5790f5d0c5",
      "cpe": "cpe:2.3:a:nss-util:nss-util:3.90.0-7.el9_4:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "MPLv2.0"
          }
        }
      ],
      "name": "nss-util",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss-util:nss_util:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss_util:nss-util:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss_util:nss_util:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:nss-util:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:nss_util:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss:nss-util:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss:nss_util:3.90.0-7.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el9_4"
        },
        {
          "name": "syft:metadata:size",
          "value": "221480"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "nss-3.90.0-7.el9_4.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/nss-util@3.90.0-7.el9_4?arch=aarch64&upstream=nss-3.90.0-7.el9_4.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.90.0-7.el9_4"
    },
    {
      "bom-ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@6.5?package-id=c3cfebb084dba563",
      "cpe": "cpe:2.3:a:connect2id-ltd-:oauth2-oidc-sdk:6.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "422759fc195f65345e8da3265c69dea3c6cf56a5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.nimbusds",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.html‎"
          }
        }
      ],
      "name": "oauth2-oidc-sdk",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id-ltd-:oauth2_oidc_sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:oauth2-oidc-sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:oauth2_oidc_sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth2-oidc-sdk:oauth2-oidc-sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth2-oidc-sdk:oauth2_oidc_sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth2_oidc_sdk:oauth2-oidc-sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth2_oidc_sdk:oauth2_oidc_sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth2-oidc:oauth2-oidc-sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth2-oidc:oauth2_oidc_sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth2_oidc:oauth2-oidc-sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth2_oidc:oauth2_oidc_sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:oauth2-oidc-sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:oauth2_oidc_sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth2:oauth2-oidc-sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth2:oauth2_oidc_sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/oauth2-oidc-sdk-6.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "oauth2-oidc-sdk"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.nimbusds"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/oauth2-oidc-sdk-6.5.jar"
        }
      ],
      "purl": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@6.5",
      "type": "library",
      "version": "6.5"
    },
    {
      "bom-ref": "pkg:maven/org.objenesis/objenesis@3.2?package-id=1980a671e80c384a",
      "cpe": "cpe:2.3:a:joe-walnes\\,-henri-tremblay\\,-leonardo-mesquita:objenesis:3.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7fadf57620c8b8abdf7519533e5527367cb51f09"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "objenesis",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joe_walnes\\,_henri_tremblay\\,_leonardo_mesquita:objenesis:3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objenesis:objenesis:3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/objenesis-3.2.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/objenesis-3.2.jar"
        }
      ],
      "purl": "pkg:maven/org.objenesis/objenesis@3.2",
      "type": "library",
      "version": "3.2"
    },
    {
      "bom-ref": "pkg:maven/com.squareup.okhttp/okhttp@1.0.2?package-id=68c333ec86bb5fc0",
      "cpe": "cpe:2.3:a:squareup:okhttp:1.0.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "14f50cd1c2f5d29d9b070746c1fcae59b68ca26b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.squareup.okhttp",
      "name": "okhttp",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:okhttp3:okhttp:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:okhttp:okhttp:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/okhttp-1.0.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "okhttp"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.squareup.okhttp"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/okhttp-1.0.2.jar"
        }
      ],
      "purl": "pkg:maven/com.squareup.okhttp/okhttp@1.0.2",
      "type": "library",
      "version": "1.0.2"
    },
    {
      "bom-ref": "pkg:maven/com.squareup.okhttp3/okhttp@3.14.9?package-id=c0811ce1fca187e2",
      "cpe": "cpe:2.3:a:squareup:okhttp:3.14.9:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3e6d101343c7ea687cd593e4990f73b25c878383"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.squareup.okhttp3",
      "name": "okhttp",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:okhttp3:okhttp:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:okhttp:okhttp:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/okhttp-3.14.9.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "okhttp"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.squareup.okhttp3"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/okhttp-3.14.9.jar"
        }
      ],
      "purl": "pkg:maven/com.squareup.okhttp3/okhttp@3.14.9",
      "type": "library",
      "version": "3.14.9"
    },
    {
      "bom-ref": "pkg:maven/com.squareup.okio/okio@1.17.2?package-id=579b1a8958d11063",
      "cpe": "cpe:2.3:a:squareup:okio:1.17.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "78c7820b205002da4d2d137f6f312bd64b3d6049"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.squareup.okio",
      "name": "okio",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:okio:okio:1.17.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/okio-1.17.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "okio"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.squareup.okio"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/okio-1.17.2.jar"
        }
      ],
      "purl": "pkg:maven/com.squareup.okio/okio@1.17.2",
      "type": "library",
      "version": "1.17.2"
    },
    {
      "bom-ref": "pkg:maven/com.opencsv/opencsv@4.6?package-id=e7b00d299bd051d6",
      "cpe": "cpe:2.3:a:opencsv:opencsv:4.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b7ce164e9e75be4b5eb42fd89c9c53ebecea6729"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.opencsv",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "opencsv",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/opencsv-4.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "opencsv"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.opencsv"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/opencsv-4.6.jar"
        }
      ],
      "purl": "pkg:maven/com.opencsv/opencsv@4.6",
      "type": "library",
      "version": "4.6"
    },
    {
      "bom-ref": "pkg:rpm/rhel/openldap@2.6.6-3.el9?arch=aarch64&upstream=openldap-2.6.6-3.el9.src.rpm&distro=rhel-9.4&package-id=2efa5526ed57d0f8",
      "cpe": "cpe:2.3:a:openldap:openldap:2.6.6-3.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "OLDAP-2.8"
          }
        }
      ],
      "name": "openldap",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:openldap:2.6.6-3.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "1050748"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "openldap-2.6.6-3.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/openldap@2.6.6-3.el9?arch=aarch64&upstream=openldap-2.6.6-3.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.6.6-3.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/openssl@3.0.7-27.el9?arch=aarch64&epoch=1&upstream=openssl-3.0.7-27.el9.src.rpm&distro=rhel-9.4&package-id=7954cce8d23cac00",
      "cpe": "cpe:2.3:a:openssl:openssl:1\\:3.0.7-27.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "ASL 2.0"
          }
        }
      ],
      "name": "openssl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:openssl:1\\:3.0.7-27.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "1"
        },
        {
          "name": "syft:metadata:release",
          "value": "27.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "1853733"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "openssl-3.0.7-27.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/openssl@3.0.7-27.el9?arch=aarch64&epoch=1&upstream=openssl-3.0.7-27.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1:3.0.7-27.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/openssl-fips-provider@3.0.7-2.el9?arch=aarch64&upstream=openssl-fips-provider-3.0.7-2.el9.src.rpm&distro=rhel-9.4&package-id=0da3e2540f70bc4f",
      "cpe": "cpe:2.3:a:openssl-fips-provider:openssl-fips-provider:3.0.7-2.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "ASL 2.0"
          }
        }
      ],
      "name": "openssl-fips-provider",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl-fips-provider:openssl_fips_provider:3.0.7-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl_fips_provider:openssl-fips-provider:3.0.7-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl_fips_provider:openssl_fips_provider:3.0.7-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl-fips:openssl-fips-provider:3.0.7-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl-fips:openssl_fips_provider:3.0.7-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl_fips:openssl-fips-provider:3.0.7-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl_fips:openssl_fips_provider:3.0.7-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl:openssl-fips-provider:3.0.7-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl:openssl_fips_provider:3.0.7-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:openssl-fips-provider:3.0.7-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:openssl_fips_provider:3.0.7-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "2.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "1134522"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "openssl-fips-provider-3.0.7-2.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/openssl-fips-provider@3.0.7-2.el9?arch=aarch64&upstream=openssl-fips-provider-3.0.7-2.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.0.7-2.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/openssl-libs@3.0.7-27.el9?arch=aarch64&epoch=1&upstream=openssl-3.0.7-27.el9.src.rpm&distro=rhel-9.4&package-id=5c7462167c3d4a96",
      "cpe": "cpe:2.3:a:openssl-libs:openssl-libs:1\\:3.0.7-27.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "ASL 2.0"
          }
        }
      ],
      "name": "openssl-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl-libs:openssl_libs:1\\:3.0.7-27.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl_libs:openssl-libs:1\\:3.0.7-27.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl_libs:openssl_libs:1\\:3.0.7-27.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl:openssl-libs:1\\:3.0.7-27.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl:openssl_libs:1\\:3.0.7-27.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:openssl-libs:1\\:3.0.7-27.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:openssl_libs:1\\:3.0.7-27.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "1"
        },
        {
          "name": "syft:metadata:release",
          "value": "27.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "5290780"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "openssl-3.0.7-27.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/openssl-libs@3.0.7-27.el9?arch=aarch64&epoch=1&upstream=openssl-3.0.7-27.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1:3.0.7-27.el9"
    },
    {
      "bom-ref": "pkg:maven/org.apache.orc/orc-core@1.7.10?package-id=396e0a725fa58640",
      "cpe": "cpe:2.3:a:apache:orc-core:1.7.10:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "71b922618be76ed251a047b03d6989cf0bed8925"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.orc",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "orc-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:orc_core:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:orc:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/orc-core-1.7.10.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "orc-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.orc"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/orc-core-1.7.10.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.orc/orc-core@1.7.10",
      "type": "library",
      "version": "1.7.10"
    },
    {
      "bom-ref": "pkg:maven/org.apache.orc/orc-mapreduce@1.7.10?package-id=a270d9420e9fa08a",
      "cpe": "cpe:2.3:a:apache:orc-mapreduce:1.7.10:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cfe80b0179d1f394c6a6a7013b883d855050747c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.orc",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "orc-mapreduce",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:orc_mapreduce:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:orc:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/orc-mapreduce-1.7.10.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "orc-mapreduce"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.orc"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/orc-mapreduce-1.7.10.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.orc/orc-mapreduce@1.7.10",
      "type": "library",
      "version": "1.7.10"
    },
    {
      "bom-ref": "pkg:maven/org.apache.orc/orc-shims@1.7.10?package-id=bbf7a5b76b0790f9",
      "cpe": "cpe:2.3:a:apache:orc-shims:1.7.10:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2fabee8f620ba70b95a3fdefff72ba178729105b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.orc",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "orc-shims",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:orc_shims:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:orc:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/orc-shims-1.7.10.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "orc-shims"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.orc"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/orc-shims-1.7.10.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.orc/orc-shims@1.7.10",
      "type": "library",
      "version": "1.7.10"
    },
    {
      "bom-ref": "pkg:rpm/rhel/p11-kit@0.25.3-2.el9?arch=aarch64&upstream=p11-kit-0.25.3-2.el9.src.rpm&distro=rhel-9.4&package-id=130b8da7847f5adb",
      "cpe": "cpe:2.3:a:p11-kit:p11-kit:0.25.3-2.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "p11-kit",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11-kit:p11_kit:0.25.3-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11_kit:p11-kit:0.25.3-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11_kit:p11_kit:0.25.3-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:p11-kit:0.25.3-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:p11_kit:0.25.3-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11:p11-kit:0.25.3-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11:p11_kit:0.25.3-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "2.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "2624860"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "p11-kit-0.25.3-2.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/p11-kit@0.25.3-2.el9?arch=aarch64&upstream=p11-kit-0.25.3-2.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "0.25.3-2.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/p11-kit-trust@0.25.3-2.el9?arch=aarch64&upstream=p11-kit-0.25.3-2.el9.src.rpm&distro=rhel-9.4&package-id=a86589dc7aabf1fd",
      "cpe": "cpe:2.3:a:p11-kit-trust:p11-kit-trust:0.25.3-2.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "p11-kit-trust",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11-kit-trust:p11_kit_trust:0.25.3-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11_kit_trust:p11-kit-trust:0.25.3-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11_kit_trust:p11_kit_trust:0.25.3-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11-kit:p11-kit-trust:0.25.3-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11-kit:p11_kit_trust:0.25.3-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11_kit:p11-kit-trust:0.25.3-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11_kit:p11_kit_trust:0.25.3-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:p11-kit-trust:0.25.3-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:p11_kit_trust:0.25.3-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11:p11-kit-trust:0.25.3-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11:p11_kit_trust:0.25.3-2.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "2.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "539212"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "p11-kit-0.25.3-2.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/p11-kit-trust@0.25.3-2.el9?arch=aarch64&upstream=p11-kit-0.25.3-2.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "0.25.3-2.el9"
    },
    {
      "bom-ref": "pkg:maven/org.pac4j/pac4j-core@3.8.3?package-id=ef556a0fe9bda2b2",
      "cpe": "cpe:2.3:a:pac4j-core:pac4j-core:3.8.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ce2d5c63d9f034f5631d3b3ebec46f916b7064f2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.pac4j",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "pac4j-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j-core:pac4j_core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j_core:pac4j-core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j_core:pac4j_core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j:pac4j-core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j:pac4j_core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:pac4j-core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:pac4j_core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j-core:core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j_core:core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j:core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/pac4j-core-3.8.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "pac4j-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.pac4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/pac4j-core-3.8.3.jar"
        }
      ],
      "purl": "pkg:maven/org.pac4j/pac4j-core@3.8.3",
      "type": "library",
      "version": "3.8.3"
    },
    {
      "bom-ref": "pkg:maven/org.pac4j/pac4j-oidc@3.8.3?package-id=1c49117260fe5c57",
      "cpe": "cpe:2.3:a:pac4j-oidc:pac4j-oidc:3.8.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d01dd86864d673d5b5f9930533b1bfdcc4b57546"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.pac4j",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "pac4j-oidc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j-oidc:pac4j_oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j_oidc:pac4j-oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j_oidc:pac4j_oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j:pac4j-oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j:pac4j_oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oidc:pac4j-oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oidc:pac4j_oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j-oidc:oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j_oidc:oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j:oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oidc:oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/pac4j-oidc-3.8.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "pac4j-oidc"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.pac4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/pac4j-oidc-3.8.3.jar"
        }
      ],
      "purl": "pkg:maven/org.pac4j/pac4j-oidc@3.8.3",
      "type": "library",
      "version": "3.8.3"
    },
    {
      "bom-ref": "pkg:rpm/rhel/pam@1.5.1-19.el9?arch=aarch64&upstream=pam-1.5.1-19.el9.src.rpm&distro=rhel-9.4&package-id=5e94234a620c9342",
      "cpe": "cpe:2.3:a:redhat:pam:1.5.1-19.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD and GPLv2+"
          }
        }
      ],
      "name": "pam",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pam:pam:1.5.1-19.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "19.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "4641770"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "pam-1.5.1-19.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/pam@1.5.1-19.el9?arch=aarch64&upstream=pam-1.5.1-19.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.5.1-19.el9"
    },
    {
      "bom-ref": "pkg:maven/com.thoughtworks.paranamer/paranamer@2.3?package-id=2420f976295f3138",
      "cpe": "cpe:2.3:a:thoughtworks:paranamer:2.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4a85963a752c0a2f715c3924bfc686865e7e1bc6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.thoughtworks.paranamer",
      "name": "paranamer",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:paranamer:paranamer:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/paranamer-2.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "paranamer"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.thoughtworks.paranamer"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/paranamer-2.3.jar"
        }
      ],
      "purl": "pkg:maven/com.thoughtworks.paranamer/paranamer@2.3",
      "type": "library",
      "version": "2.3"
    },
    {
      "bom-ref": "pkg:maven/org.apache.parquet/parquet-avro@1.12.3?package-id=b899dc1807252e3d",
      "cpe": "cpe:2.3:a:apache:parquet-avro:1.12.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0227256ca59e5ad95333c6374d39cd101dafba4c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.parquet",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "parquet-avro",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet_avro:1.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet:1.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-avro-1.12.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "parquet-avro"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.parquet"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-avro-1.12.3.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.parquet/parquet-avro@1.12.3",
      "type": "library",
      "version": "1.12.3"
    },
    {
      "bom-ref": "pkg:maven/org.apache.parquet/parquet-column@1.12.3?package-id=13d6988f32fa93d1",
      "cpe": "cpe:2.3:a:apache:parquet-column:1.12.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5506a7066998a2be47b86e28d061863a475a7ca8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.parquet",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "parquet-column",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet_column:1.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet:1.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-column-1.12.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "parquet-column"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.parquet"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-column-1.12.3.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.parquet/parquet-column@1.12.3",
      "type": "library",
      "version": "1.12.3"
    },
    {
      "bom-ref": "pkg:maven/org.apache.parquet/parquet-common@1.12.3?package-id=2e7a619bec00495c",
      "cpe": "cpe:2.3:a:apache:parquet-common:1.12.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "da50b1b4177cbadb977d52aa70011713f37a2156"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.parquet",
      "name": "parquet-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet_common:1.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet:1.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-common-1.12.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "parquet-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.parquet"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-common-1.12.3.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.parquet/parquet-common@1.12.3",
      "type": "library",
      "version": "1.12.3"
    },
    {
      "bom-ref": "pkg:maven/org.apache.parquet/parquet-encoding@1.12.3?package-id=0dcc2ae8eeefce21",
      "cpe": "cpe:2.3:a:apache:parquet-encoding:1.12.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0ce981aa4a840f84b670bbb3dfd77cd3be87ca84"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.parquet",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "parquet-encoding",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet_encoding:1.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet:1.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-encoding-1.12.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "parquet-encoding"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.parquet"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-encoding-1.12.3.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.parquet/parquet-encoding@1.12.3",
      "type": "library",
      "version": "1.12.3"
    },
    {
      "bom-ref": "pkg:maven/org.apache.parquet/parquet-format-structures@1.12.3?package-id=dce8c6c8f2affaf0",
      "cpe": "cpe:2.3:a:apache:parquet-format-structures:1.12.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9074f509fbc3df3ad104eca5427d03eece453246"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.parquet",
      "name": "parquet-format-structures",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet_format_structures:1.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet:1.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-format-structures-1.12.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "parquet-format-structures"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.parquet"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-format-structures-1.12.3.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.parquet/parquet-format-structures@1.12.3",
      "type": "library",
      "version": "1.12.3"
    },
    {
      "bom-ref": "pkg:maven/org.apache.parquet/parquet-hadoop@1.12.3?package-id=43d876e979058c68",
      "cpe": "cpe:2.3:a:apache:parquet-hadoop:1.12.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "57001fa0b6622767e63c1b9cd2e6db666d180caa"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.parquet",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "parquet-hadoop",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet_hadoop:1.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet:1.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-hadoop-1.12.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "parquet-hadoop"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.parquet"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-hadoop-1.12.3.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.parquet/parquet-hadoop@1.12.3",
      "type": "library",
      "version": "1.12.3"
    },
    {
      "bom-ref": "pkg:maven/org.apache.parquet/parquet-jackson@1.12.3?package-id=7ac721c98b85c271",
      "cpe": "cpe:2.3:a:apache:parquet-jackson:1.12.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2c3fe5d2e5941e50947ff59c50d201d3968fac02"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.parquet",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "parquet-jackson",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet_jackson:1.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet:1.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-jackson-1.12.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "parquet-jackson"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.parquet"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-jackson-1.12.3.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.parquet/parquet-jackson@1.12.3",
      "type": "library",
      "version": "1.12.3"
    },
    {
      "bom-ref": "pkg:rpm/rhel/pcre@8.44-3.el9.3?arch=aarch64&upstream=pcre-8.44-3.el9.3.src.rpm&distro=rhel-9.4&package-id=8b4c6b7c9ea33f2b",
      "cpe": "cpe:2.3:a:redhat:pcre:8.44-3.el9.3:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "pcre",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pcre:pcre:8.44-3.el9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el9.3"
        },
        {
          "name": "syft:metadata:size",
          "value": "567328"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "pcre-8.44-3.el9.3.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/pcre@8.44-3.el9.3?arch=aarch64&upstream=pcre-8.44-3.el9.3.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "8.44-3.el9.3"
    },
    {
      "bom-ref": "pkg:rpm/rhel/pcre2@10.40-5.el9?arch=aarch64&upstream=pcre2-10.40-5.el9.src.rpm&distro=rhel-9.4&package-id=de30ae3f4dfcd3a5",
      "cpe": "cpe:2.3:a:redhat:pcre2:10.40-5.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "pcre2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pcre2:pcre2:10.40-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "5.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "664154"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "pcre2-10.40-5.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/pcre2@10.40-5.el9?arch=aarch64&upstream=pcre2-10.40-5.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "10.40-5.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/pcre2-syntax@10.40-5.el9?arch=noarch&upstream=pcre2-10.40-5.el9.src.rpm&distro=rhel-9.4&package-id=a209df8eaf0523c8",
      "cpe": "cpe:2.3:a:pcre2-syntax:pcre2-syntax:10.40-5.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "pcre2-syntax",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pcre2-syntax:pcre2_syntax:10.40-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pcre2_syntax:pcre2-syntax:10.40-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pcre2_syntax:pcre2_syntax:10.40-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:pcre2-syntax:10.40-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:pcre2_syntax:10.40-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pcre2:pcre2-syntax:10.40-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pcre2:pcre2_syntax:10.40-5.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "5.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "234324"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "pcre2-10.40-5.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/pcre2-syntax@10.40-5.el9?arch=noarch&upstream=pcre2-10.40-5.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "10.40-5.el9"
    },
    {
      "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.19?package-id=d15dee4b6258ffbe",
      "cpe": "cpe:2.3:a:plexus-interpolation:plexus-interpolation:1.19:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b260ca7a23bb0d209771db7aae35049899433fe3"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.codehaus.plexus",
      "name": "plexus-interpolation",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus-interpolation:plexus_interpolation:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus_interpolation:plexus-interpolation:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus_interpolation:plexus_interpolation:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:plexus-interpolation:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:plexus_interpolation:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus-interpolation:plexus:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus:plexus-interpolation:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus:plexus_interpolation:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus_interpolation:plexus:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:plexus:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus:plexus:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/plexus-interpolation-1.19.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "plexus-interpolation"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.codehaus.plexus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/plexus-interpolation-1.19.jar"
        }
      ],
      "purl": "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.19",
      "type": "library",
      "version": "1.19"
    },
    {
      "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.0.24?package-id=246c258647f5c138",
      "cpe": "cpe:2.3:a:plexus-utils:plexus-utils:3.0.24:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b4ac9780b37cb1b736eae9fbcef27609b7c911ef"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.codehaus.plexus",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "plexus-utils",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus-utils:plexus_utils:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus_utils:plexus-utils:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus_utils:plexus_utils:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:plexus-utils:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:plexus_utils:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus-utils:plexus:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus:plexus-utils:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus:plexus_utils:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus_utils:plexus:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:plexus:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus:plexus:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/plexus-utils-3.0.24.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "plexus-utils"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.codehaus.plexus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/plexus-utils-3.0.24.jar"
        }
      ],
      "purl": "pkg:maven/org.codehaus.plexus/plexus-utils@3.0.24",
      "type": "library",
      "version": "3.0.24"
    },
    {
      "bom-ref": "pkg:rpm/rhel/popt@1.18-8.el9?arch=aarch64&upstream=popt-1.18-8.el9.src.rpm&distro=rhel-9.4&package-id=77cc10f06a0e5d81",
      "cpe": "cpe:2.3:a:redhat:popt:1.18-8.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "popt",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:popt:popt:1.18-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "8.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "142448"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "popt-1.18-8.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/popt@1.18-8.el9?arch=aarch64&upstream=popt-1.18-8.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.18-8.el9"
    },
    {
      "bom-ref": "pkg:maven/org.postgresql/postgresql@42.4.5?package-id=1118eba822dd6f00",
      "cpe": "cpe:2.3:a:postgresql-global-development-group:PGBundleActivator:42.4.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "622a3dd54cfb3142736eb188b8b2ca3071eecc13"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "name": "postgresql",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql_global_development_group:PGBundleActivator:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql-global-development-group:postgresql:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql_global_development_group:postgresql:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql-global-development-group:jdbc:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql-global-development-group:osgi:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql_global_development_group:jdbc:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql_global_development_group:osgi:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:PGBundleActivator:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:PGBundleActivator:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:PGBundleActivator:PGBundleActivator:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:postgresql:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:postgresql:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:PGBundleActivator:postgresql:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql:PGBundleActivator:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jdbc:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:osgi:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jdbc:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:osgi:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:PGBundleActivator:jdbc:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:PGBundleActivator:osgi:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jdbc:PGBundleActivator:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:PGBundleActivator:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql:postgresql:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jdbc:postgresql:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:postgresql:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql:jdbc:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql:osgi:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jdbc:jdbc:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jdbc:osgi:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:jdbc:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:osgi:42.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/postgresql-metadata-storage/postgresql-42.4.5.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/postgresql-metadata-storage/postgresql-42.4.5.jar"
        }
      ],
      "purl": "pkg:maven/org.postgresql/postgresql@42.4.5",
      "type": "library",
      "version": "42.4.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/postgresql-metadata-storage@26.0.0?package-id=b1d609a7e6bf5015",
      "cpe": "cpe:2.3:a:apache:postgresql-metadata-storage:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c5803f5507826eff974ca44db94183ac0e885309"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "postgresql-metadata-storage",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:postgresql_metadata_storage:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/postgresql-metadata-storage/postgresql-metadata-storage-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "postgresql-metadata-storage"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/postgresql-metadata-storage/postgresql-metadata-storage-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/postgresql-metadata-storage@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions.contrib/prometheus-emitter@26.0.0?package-id=4a67f3387041e5b2",
      "cpe": "cpe:2.3:a:apache:prometheus-emitter:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4ef8c8e2e9002ef9d96b9d7ee36f68c4bfb39631"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions.contrib",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "prometheus-emitter",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:prometheus_emitter:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/prometheus-emitter-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "prometheus-emitter"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions.contrib"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/prometheus-emitter-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions.contrib/prometheus-emitter@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/com.github.os72/protobuf-dynamic@0.9.3?package-id=ea7e3f225f881550",
      "cpe": "cpe:2.3:a:protobuf-dynamic:protobuf-dynamic:0.9.3:*:*:*:*:*:*:*",
      "group": "com.github.os72",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "protobuf-dynamic",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-dynamic:protobuf_dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_dynamic:protobuf-dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_dynamic:protobuf_dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf-dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf_dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sonatype:protobuf-dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sonatype:protobuf_dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:protobuf-dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:protobuf_dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:os72:protobuf-dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:os72:protobuf_dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oss:protobuf-dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oss:protobuf_dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "protobuf-dynamic"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.github.os72"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:com.github.os72:protobuf-dynamic"
        }
      ],
      "purl": "pkg:maven/com.github.os72/protobuf-dynamic@0.9.3",
      "type": "library",
      "version": "0.9.3"
    },
    {
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?package-id=205a574010b6404d",
      "cpe": "cpe:2.3:a:protobuf-java:protobuf-java:2.5.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a10732c76bfacdbd633a7eb0f7968b1059a65dfa"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.protobuf",
      "licenses": [
        {
          "license": {
            "name": "http://www.opensource.org/licenses/bsd-license.php"
          }
        }
      ],
      "name": "protobuf-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf_java:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf-java:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf_java:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf-java:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf_java:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf-java:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf_java:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/protobuf-java-2.5.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "protobuf-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.protobuf"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/protobuf-java-2.5.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@2.5.0",
      "type": "library",
      "version": "2.5.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@3.21.12?package-id=4b255ac4d666d9dd",
      "cpe": "cpe:2.3:a:protobuf-java:protobuf-java:3.21.12:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5589e79a33cb6509f7e681d7cf4fc59d47c51c71"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.protobuf",
      "licenses": [
        {
          "license": {
            "name": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "name": "protobuf-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf_java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf-java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf_java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf-java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf_java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf-java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf_java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/protobuf-java-3.21.12.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "protobuf-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.protobuf"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/protobuf-java-3.21.12.jar"
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@3.21.12",
      "type": "library",
      "version": "3.21.12"
    },
    {
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@3.21.12?package-id=ead7dea51a3390e1",
      "cpe": "cpe:2.3:a:protobuf-java:protobuf-java:3.21.12:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5589e79a33cb6509f7e681d7cf4fc59d47c51c71"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.protobuf",
      "licenses": [
        {
          "license": {
            "name": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "name": "protobuf-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf_java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf-java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf_java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf-java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf_java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf-java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf_java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/protobuf-java-3.21.12.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "protobuf-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.protobuf"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/protobuf-java-3.21.12.jar"
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@3.21.12",
      "type": "library",
      "version": "3.21.12"
    },
    {
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@3.21.12?package-id=bb4806793b812fc6",
      "cpe": "cpe:2.3:a:protobuf-java:protobuf-java:3.21.12:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5589e79a33cb6509f7e681d7cf4fc59d47c51c71"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.protobuf",
      "licenses": [
        {
          "license": {
            "name": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "name": "protobuf-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf_java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf-java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf_java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf-java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf_java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf-java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf_java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/protobuf-java-3.21.12.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "protobuf-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.protobuf"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/protobuf-java-3.21.12.jar"
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@3.21.12",
      "type": "library",
      "version": "3.21.12"
    },
    {
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@3.21.12?package-id=d1095e8a18f7c3b1",
      "cpe": "cpe:2.3:a:protobuf-java:protobuf-java:3.21.12:*:*:*:*:*:*:*",
      "group": "com.google.protobuf",
      "name": "protobuf-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf_java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf-java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf_java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf-java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf_java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf-java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf_java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "protobuf-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.protobuf"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:com.google.protobuf:protobuf-java"
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@3.21.12",
      "type": "library",
      "version": "3.21.12"
    },
    {
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@3.21.12?package-id=98055b3dc0888ae5",
      "cpe": "cpe:2.3:a:protobuf-java:protobuf-java:3.21.12:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5589e79a33cb6509f7e681d7cf4fc59d47c51c71"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.protobuf",
      "licenses": [
        {
          "license": {
            "name": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "name": "protobuf-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf_java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf-java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf_java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf-java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf_java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf-java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf_java:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/protobuf-java-3.21.12.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "protobuf-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.protobuf"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/protobuf-java-3.21.12.jar"
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@3.21.12",
      "type": "library",
      "version": "3.21.12"
    },
    {
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java-util@3.21.12?package-id=145f6a5584062967",
      "cpe": "cpe:2.3:a:protobuf-java-util:protobuf-java-util:3.21.12:*:*:*:*:*:*:*",
      "group": "com.google.protobuf",
      "name": "protobuf-java-util",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java-util:protobuf_java_util:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java_util:protobuf-java-util:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java_util:protobuf_java_util:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf-java-util:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf_java_util:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf-java-util:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf_java_util:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java-util:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf-java-util:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf_java_util:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java_util:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf-java-util:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf_java_util:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf:3.21.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "protobuf-java-util"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.protobuf"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:com.google.protobuf:protobuf-java-util"
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java-util@3.21.12",
      "type": "library",
      "version": "3.21.12"
    },
    {
      "bom-ref": "pkg:rpm/rhel/python3@3.9.18-3.el9_4.3?arch=aarch64&upstream=python3.9-3.9.18-3.el9_4.3.src.rpm&distro=rhel-9.4&package-id=fa2132769d688d74",
      "cpe": "cpe:2.3:a:python3:python3:3.9.18-3.el9_4.3:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Python"
          }
        }
      ],
      "name": "python3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:python3:3.9.18-3.el9_4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el9_4.3"
        },
        {
          "name": "syft:metadata:size",
          "value": "86053"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "python3.9-3.9.18-3.el9_4.3.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/python3@3.9.18-3.el9_4.3?arch=aarch64&upstream=python3.9-3.9.18-3.el9_4.3.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.9.18-3.el9_4.3"
    },
    {
      "bom-ref": "pkg:rpm/rhel/python3-libs@3.9.18-3.el9_4.3?arch=aarch64&upstream=python3.9-3.9.18-3.el9_4.3.src.rpm&distro=rhel-9.4&package-id=dc527c62a1ec37e4",
      "cpe": "cpe:2.3:a:python3-libs:python3-libs:3.9.18-3.el9_4.3:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Python"
          }
        }
      ],
      "name": "python3-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3-libs:python3_libs:3.9.18-3.el9_4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3_libs:python3-libs:3.9.18-3.el9_4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3_libs:python3_libs:3.9.18-3.el9_4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3:python3-libs:3.9.18-3.el9_4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3:python3_libs:3.9.18-3.el9_4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:python3-libs:3.9.18-3.el9_4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:python3_libs:3.9.18-3.el9_4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el9_4.3"
        },
        {
          "name": "syft:metadata:size",
          "value": "34512932"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "python3.9-3.9.18-3.el9_4.3.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/python3-libs@3.9.18-3.el9_4.3?arch=aarch64&upstream=python3.9-3.9.18-3.el9_4.3.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.9.18-3.el9_4.3"
    },
    {
      "bom-ref": "pkg:rpm/rhel/python3-pip-wheel@21.2.3-8.el9?arch=noarch&upstream=python-pip-21.2.3-8.el9.src.rpm&distro=rhel-9.4&package-id=88670d8b6b89252d",
      "cpe": "cpe:2.3:a:python3-pip-wheel:python3-pip-wheel:21.2.3-8.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)"
          }
        }
      ],
      "name": "python3-pip-wheel",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3-pip-wheel:python3_pip_wheel:21.2.3-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3_pip_wheel:python3-pip-wheel:21.2.3-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3_pip_wheel:python3_pip_wheel:21.2.3-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3-pip:python3-pip-wheel:21.2.3-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3-pip:python3_pip_wheel:21.2.3-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3_pip:python3-pip-wheel:21.2.3-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3_pip:python3_pip_wheel:21.2.3-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3:python3-pip-wheel:21.2.3-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3:python3_pip_wheel:21.2.3-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:python3-pip-wheel:21.2.3-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:python3_pip_wheel:21.2.3-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "8.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "1220838"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "python-pip-21.2.3-8.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/python3-pip-wheel@21.2.3-8.el9?arch=noarch&upstream=python-pip-21.2.3-8.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "21.2.3-8.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/python3-setuptools-wheel@53.0.0-12.el9?arch=noarch&upstream=python-setuptools-53.0.0-12.el9.src.rpm&distro=rhel-9.4&package-id=cb456e0fda1a5e90",
      "cpe": "cpe:2.3:a:python3-setuptools-wheel:python3-setuptools-wheel:53.0.0-12.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "MIT and (BSD or ASL 2.0)"
          }
        }
      ],
      "name": "python3-setuptools-wheel",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3-setuptools-wheel:python3_setuptools_wheel:53.0.0-12.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3_setuptools_wheel:python3-setuptools-wheel:53.0.0-12.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3_setuptools_wheel:python3_setuptools_wheel:53.0.0-12.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3-setuptools:python3-setuptools-wheel:53.0.0-12.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3-setuptools:python3_setuptools_wheel:53.0.0-12.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3_setuptools:python3-setuptools-wheel:53.0.0-12.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3_setuptools:python3_setuptools_wheel:53.0.0-12.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3:python3-setuptools-wheel:53.0.0-12.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3:python3_setuptools_wheel:53.0.0-12.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:python3-setuptools-wheel:53.0.0-12.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:python3_setuptools_wheel:53.0.0-12.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "12.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "562584"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "python-setuptools-53.0.0-12.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/python3-setuptools-wheel@53.0.0-12.el9?arch=noarch&upstream=python-setuptools-53.0.0-12.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "53.0.0-12.el9"
    },
    {
      "bom-ref": "pkg:maven/org.reactivestreams.reactive-streams/reactive-streams@1.0.2?package-id=5a28a093ac50c92b",
      "cpe": "cpe:2.3:a:reactive-streams:reactive-streams:1.0.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "323964c36556eb0e6209f65c1cef72b53b461ab8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "reactive-streams",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactive-streams:reactive_streams:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactive_streams:reactive-streams:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactive_streams:reactive_streams:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactivestreams:reactive-streams:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactivestreams:reactive_streams:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactive:reactive-streams:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactive:reactive_streams:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/reactive-streams-1.0.2.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/reactive-streams-1.0.2.jar"
        }
      ],
      "purl": "pkg:maven/org.reactivestreams.reactive-streams/reactive-streams@1.0.2",
      "type": "library",
      "version": "1.0.2"
    },
    {
      "bom-ref": "pkg:rpm/rhel/readline@8.1-4.el9?arch=aarch64&upstream=readline-8.1-4.el9.src.rpm&distro=rhel-9.4&package-id=d961e8af5aefb735",
      "cpe": "cpe:2.3:a:readline:readline:8.1-4.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+"
          }
        }
      ],
      "name": "readline",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:readline:8.1-4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "4.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "508788"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "readline-8.1-4.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/readline@8.1-4.el9?arch=aarch64&upstream=readline-8.1-4.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "8.1-4.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/redhat-release@9.4-0.4.el9?arch=aarch64&upstream=redhat-release-9.4-0.4.el9.src.rpm&distro=rhel-9.4&package-id=b9e9c54189548998",
      "cpe": "cpe:2.3:a:redhat-release:redhat-release:9.4-0.4.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2"
          }
        }
      ],
      "name": "redhat-release",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat-release:redhat_release:9.4-0.4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat_release:redhat-release:9.4-0.4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat_release:redhat_release:9.4-0.4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:redhat-release:9.4-0.4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:redhat_release:9.4-0.4.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "0.4.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "58825"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "redhat-release-9.4-0.4.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/redhat-release@9.4-0.4.el9?arch=aarch64&upstream=redhat-release-9.4-0.4.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "9.4-0.4.el9"
    },
    {
      "bom-ref": "pkg:maven/io.github.resilience4j.bulkhead/resilience4j-bulkhead@1.3.1?package-id=9804d48d78d5e932",
      "cpe": "cpe:2.3:a:resilience4j-bulkhead:resilience4j-bulkhead:1.3.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "df7dc4df69114c694956a0ac537119527ecf1b9c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "resilience4j-bulkhead",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j-bulkhead:resilience4j_bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j_bulkhead:resilience4j-bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j_bulkhead:resilience4j_bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j-bulkhead:resilience4j:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j:resilience4j-bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j:resilience4j_bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j_bulkhead:resilience4j:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bulkhead:resilience4j-bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bulkhead:resilience4j_bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j-bulkhead:bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j_bulkhead:bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:resilience4j-bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:resilience4j_bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j:resilience4j:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bulkhead:resilience4j:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j:bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:resilience4j:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bulkhead:bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/resilience4j-bulkhead-1.3.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/resilience4j-bulkhead-1.3.1.jar"
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j.bulkhead/resilience4j-bulkhead@1.3.1",
      "type": "library",
      "version": "1.3.1"
    },
    {
      "bom-ref": "pkg:maven/io.github.resilience4j.core/resilience4j-core@1.3.1?package-id=f7d36392a406fd8d",
      "cpe": "cpe:2.3:a:resilience4j-core:resilience4j-core:1.3.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "35e36c0cafbdc3395fd4600a05c613d3073c895e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "resilience4j-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j-core:resilience4j_core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j_core:resilience4j-core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j_core:resilience4j_core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j-core:resilience4j:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j:resilience4j-core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j:resilience4j_core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j_core:resilience4j:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j:resilience4j:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:resilience4j-core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:resilience4j_core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:resilience4j-core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:resilience4j_core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j-core:core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j_core:core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:resilience4j:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:resilience4j:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j:core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/resilience4j-core-1.3.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/resilience4j-core-1.3.1.jar"
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j.core/resilience4j-core@1.3.1",
      "type": "library",
      "version": "1.3.1"
    },
    {
      "bom-ref": "pkg:maven/org.mozilla.rhino/rhino@1.7.11?package-id=4c44f1755a549e24",
      "cpe": "cpe:2.3:a:mozilla-foundation:rhino:1.7.11:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cf04bfb7dcf7bacbf93ab7727d842f3ab5a66f0d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MPL-2.0"
          }
        }
      ],
      "name": "rhino",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mozilla_foundation:rhino:1.7.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mozilla:rhino:1.7.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rhino:rhino:1.7.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/rhino-1.7.11.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/rhino-1.7.11.jar"
        }
      ],
      "purl": "pkg:maven/org.mozilla.rhino/rhino@1.7.11",
      "type": "library",
      "version": "1.7.11"
    },
    {
      "bom-ref": "pkg:rpm/rhel/rootfiles@8.1-31.el9?arch=noarch&upstream=rootfiles-8.1-31.el9.src.rpm&distro=rhel-9.4&package-id=c676161f43c98d9b",
      "cpe": "cpe:2.3:a:rootfiles:rootfiles:8.1-31.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "rootfiles",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:rootfiles:8.1-31.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "31.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "817"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "rootfiles-8.1-31.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/rootfiles@8.1-31.el9?arch=noarch&upstream=rootfiles-8.1-31.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "8.1-31.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/rpm@4.16.1.3-29.el9?arch=aarch64&upstream=rpm-4.16.1.3-29.el9.src.rpm&distro=rhel-9.4&package-id=e14f00643510fb2a",
      "cpe": "cpe:2.3:a:redhat:rpm:4.16.1.3-29.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+"
          }
        }
      ],
      "name": "rpm",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpm:rpm:4.16.1.3-29.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "29.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "3900355"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "rpm-4.16.1.3-29.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/rpm@4.16.1.3-29.el9?arch=aarch64&upstream=rpm-4.16.1.3-29.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "4.16.1.3-29.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/rpm-libs@4.16.1.3-29.el9?arch=aarch64&upstream=rpm-4.16.1.3-29.el9.src.rpm&distro=rhel-9.4&package-id=863a8941d43a7e6c",
      "cpe": "cpe:2.3:a:rpm-libs:rpm-libs:4.16.1.3-29.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+ and LGPLv2+ with exceptions"
          }
        }
      ],
      "name": "rpm-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpm-libs:rpm_libs:4.16.1.3-29.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpm_libs:rpm-libs:4.16.1.3-29.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpm_libs:rpm_libs:4.16.1.3-29.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:rpm-libs:4.16.1.3-29.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:rpm_libs:4.16.1.3-29.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpm:rpm-libs:4.16.1.3-29.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpm:rpm_libs:4.16.1.3-29.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "29.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "817876"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "rpm-4.16.1.3-29.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/rpm-libs@4.16.1.3-29.el9?arch=aarch64&upstream=rpm-4.16.1.3-29.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "4.16.1.3-29.el9"
    },
    {
      "bom-ref": "pkg:maven/org.schemarepo/schema-repo-api@0.1.3?package-id=f6e99201631ddf4a",
      "cpe": "cpe:2.3:a:schema-repo-api:schema-repo-api:0.1.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6a93ee522c52f5bd54140b6fa0be6a503e00dc96"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.schemarepo",
      "name": "schema-repo-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo-api:schema_repo_api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo_api:schema-repo-api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo_api:schema_repo_api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo:schema-repo-api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo:schema_repo_api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo:schema-repo-api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo:schema_repo_api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schemarepo:schema-repo-api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schemarepo:schema_repo_api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema:schema-repo-api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema:schema_repo_api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/schema-repo-api-0.1.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "schema-repo-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.schemarepo"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/schema-repo-api-0.1.3.jar"
        }
      ],
      "purl": "pkg:maven/org.schemarepo/schema-repo-api@0.1.3",
      "type": "library",
      "version": "0.1.3"
    },
    {
      "bom-ref": "pkg:maven/org.schemarepo/schema-repo-avro@0.1.3?package-id=6321c5b63d5dbc7f",
      "cpe": "cpe:2.3:a:schema-repo-avro:schema-repo-avro:0.1.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "657d341c197d036dc27d7f8f5b61c6ff6a678df4"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.schemarepo",
      "name": "schema-repo-avro",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo-avro:schema_repo_avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo_avro:schema-repo-avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo_avro:schema_repo_avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo:schema-repo-avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo:schema_repo_avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo:schema-repo-avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo:schema_repo_avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schemarepo:schema-repo-avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schemarepo:schema_repo_avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema:schema-repo-avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema:schema_repo_avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/schema-repo-avro-0.1.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "schema-repo-avro"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.schemarepo"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/schema-repo-avro-0.1.3.jar"
        }
      ],
      "purl": "pkg:maven/org.schemarepo/schema-repo-avro@0.1.3",
      "type": "library",
      "version": "0.1.3"
    },
    {
      "bom-ref": "pkg:maven/org.schemarepo/schema-repo-client@0.1.3?package-id=66a886f283ac3ad8",
      "cpe": "cpe:2.3:a:schema-repo-client:schema-repo-client:0.1.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cddd306a5010eba20a133b6473d9e8d967884f57"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.schemarepo",
      "name": "schema-repo-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo-client:schema_repo_client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo_client:schema-repo-client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo_client:schema_repo_client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo:schema-repo-client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo:schema_repo_client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo:schema-repo-client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo:schema_repo_client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schemarepo:schema-repo-client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schemarepo:schema_repo_client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema:schema-repo-client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema:schema_repo_client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/schema-repo-client-0.1.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "schema-repo-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.schemarepo"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/schema-repo-client-0.1.3.jar"
        }
      ],
      "purl": "pkg:maven/org.schemarepo/schema-repo-client@0.1.3",
      "type": "library",
      "version": "0.1.3"
    },
    {
      "bom-ref": "pkg:maven/org.schemarepo/schema-repo-common@0.1.3?package-id=c81d6c078e26d441",
      "cpe": "cpe:2.3:a:schema-repo-common:schema-repo-common:0.1.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0d825fd2e9e4dd42ac14d5ae6c7f92cbe63de009"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.schemarepo",
      "name": "schema-repo-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo-common:schema_repo_common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo_common:schema-repo-common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo_common:schema_repo_common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo:schema-repo-common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo:schema_repo_common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo:schema-repo-common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo:schema_repo_common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schemarepo:schema-repo-common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schemarepo:schema_repo_common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema:schema-repo-common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema:schema_repo_common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/schema-repo-common-0.1.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "schema-repo-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.schemarepo"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/schema-repo-common-0.1.3.jar"
        }
      ],
      "purl": "pkg:maven/org.schemarepo/schema-repo-common@0.1.3",
      "type": "library",
      "version": "0.1.3"
    },
    {
      "bom-ref": "pkg:rpm/rhel/sed@4.8-9.el9?arch=aarch64&upstream=sed-4.8-9.el9.src.rpm&distro=rhel-9.4&package-id=fffbb5a27db54623",
      "cpe": "cpe:2.3:a:redhat:sed:4.8-9.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+"
          }
        }
      ],
      "name": "sed",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sed:sed:4.8-9.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "9.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "833775"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "sed-4.8-9.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/sed@4.8-9.el9?arch=aarch64&upstream=sed-4.8-9.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "4.8-9.el9"
    },
    {
      "bom-ref": "pkg:maven/servlet-api/servlet-api@2.5?package-id=c313d76aafcb9778",
      "cpe": "cpe:2.3:a:sun-microsystems-inc:servlet-api:2.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5959582d97d8b61f4d154ca9e495aafd16726e34"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "servlet-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun-microsystems-inc:servlet_api:2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun_microsystems_inc:servlet-api:2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun_microsystems_inc:servlet_api:2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet-api:servlet-api:2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet-api:servlet_api:2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet_api:servlet-api:2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet_api:servlet_api:2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:servlet-api:2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:servlet_api:2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/servlet-api-2.5.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/servlet-api-2.5.jar"
        }
      ],
      "purl": "pkg:maven/servlet-api/servlet-api@2.5",
      "type": "library",
      "version": "2.5"
    },
    {
      "bom-ref": "pkg:rpm/rhel/setup@2.13.7-10.el9?arch=noarch&upstream=setup-2.13.7-10.el9.src.rpm&distro=rhel-9.4&package-id=051ce4f7ce0a35f7",
      "cpe": "cpe:2.3:a:redhat:setup:2.13.7-10.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "setup",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:setup:setup:2.13.7-10.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "10.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "725932"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "setup-2.13.7-10.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/setup@2.13.7-10.el9?arch=noarch&upstream=setup-2.13.7-10.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2.13.7-10.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/shadow-utils@4.9-8.el9?arch=aarch64&epoch=2&upstream=shadow-utils-4.9-8.el9.src.rpm&distro=rhel-9.4&package-id=930965460d176921",
      "cpe": "cpe:2.3:a:shadow-utils:shadow-utils:2\\:4.9-8.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD and GPLv2+"
          }
        }
      ],
      "name": "shadow-utils",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shadow-utils:shadow_utils:2\\:4.9-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shadow_utils:shadow-utils:2\\:4.9-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shadow_utils:shadow_utils:2\\:4.9-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:shadow-utils:2\\:4.9-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:shadow_utils:2\\:4.9-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shadow:shadow-utils:2\\:4.9-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shadow:shadow_utils:2\\:4.9-8.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "2"
        },
        {
          "name": "syft:metadata:release",
          "value": "8.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "4258917"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "shadow-utils-4.9-8.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/shadow-utils@4.9-8.el9?arch=aarch64&epoch=2&upstream=shadow-utils-4.9-8.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2:4.9-8.el9"
    },
    {
      "bom-ref": "pkg:maven/shims/shims@0.9.0?package-id=2b8eee7e6506b0ab",
      "cpe": "cpe:2.3:a:shims:shims:0.9.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9e20f3ceaea96781b72eac8be9153e9829dc3da7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "shims",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/shims-0.9.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/shims-0.9.0.jar"
        }
      ],
      "purl": "pkg:maven/shims/shims@0.9.0",
      "type": "library",
      "version": "0.9.0"
    },
    {
      "bom-ref": "pkg:maven/org.hyperic.sigar.cmd.Runner/sigar@1.6.5.132?package-id=126b2c1e3a5d02dc",
      "cpe": "cpe:2.3:a:hyperic:Runner:1.6.5.132:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e349501d4275363646a099e1d3baed064aa2eca5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "sigar",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Runner:Runner:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hyperic:sigar:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Runner:sigar:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigar:Runner:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hyperic:cmd:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigar:sigar:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Runner:cmd:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cmd:Runner:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cmd:sigar:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigar:cmd:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cmd:cmd:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/sigar-1.6.5.132.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/sigar-1.6.5.132.jar"
        }
      ],
      "purl": "pkg:maven/org.hyperic.sigar.cmd.Runner/sigar@1.6.5.132",
      "type": "library",
      "version": "1.6.5.132"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/simple-client-sslcontext@26.0.0?package-id=b82f650fcc105908",
      "cpe": "cpe:2.3:a:apache:simple-client-sslcontext:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8d1bae24317ec19735f0b4510c3737695ed05fec"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "simple-client-sslcontext",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:simple_client_sslcontext:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/simple-client-sslcontext/simple-client-sslcontext-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simple-client-sslcontext"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/simple-client-sslcontext/simple-client-sslcontext-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/simple-client-sslcontext@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/io.prometheus/simpleclient@0.16.0?package-id=a54ff48afa61672d",
      "cpe": "cpe:2.3:a:simpleclient:simpleclient:0.16.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "28b0eaf7c500c506976da8d0fc9cad6c278e8d87"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.prometheus",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "simpleclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient-0.16.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simpleclient"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.prometheus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient-0.16.0.jar"
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient@0.16.0",
      "type": "library",
      "version": "0.16.0"
    },
    {
      "bom-ref": "pkg:maven/io.prometheus/simpleclient@0.9.0?package-id=135264a074eaf8e8",
      "cpe": "cpe:2.3:a:simpleclient:simpleclient:0.9.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5c3e6d58bead98e74f738e89b0383f66f005897c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.prometheus",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "simpleclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/simpleclient-0.9.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simpleclient"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.prometheus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/simpleclient-0.9.0.jar"
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient@0.9.0",
      "type": "library",
      "version": "0.9.0"
    },
    {
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_common@0.16.0?package-id=4ecd6b6d0091e7fb",
      "cpe": "cpe:2.3:a:simpleclient-common:simpleclient-common:0.16.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a09a8c790a20309b942a9fdbfe77da22407096e6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.prometheus",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "simpleclient_common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-common:simpleclient_common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_common:simpleclient-common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_common:simpleclient_common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient-common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient_common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient-common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient_common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_common-0.16.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simpleclient_common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.prometheus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_common-0.16.0.jar"
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_common@0.16.0",
      "type": "library",
      "version": "0.16.0"
    },
    {
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_common@0.9.0?package-id=843a4cabb4b7ac5a",
      "cpe": "cpe:2.3:a:simpleclient-common:simpleclient-common:0.9.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c6341fbd22d8ff701f281620ff83233358675c24"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.prometheus",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "simpleclient_common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-common:simpleclient_common:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_common:simpleclient-common:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_common:simpleclient_common:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient-common:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient_common:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient-common:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient_common:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/simpleclient_common-0.9.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simpleclient_common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.prometheus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/simpleclient_common-0.9.0.jar"
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_common@0.9.0",
      "type": "library",
      "version": "0.9.0"
    },
    {
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_httpserver@0.16.0?package-id=2b52310785ccbf46",
      "cpe": "cpe:2.3:a:simpleclient-httpserver:simpleclient-httpserver:0.16.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2c23f53ca22d7d8885fc4522ddcadcfe7f01a783"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.prometheus",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "simpleclient_httpserver",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-httpserver:simpleclient_httpserver:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_httpserver:simpleclient-httpserver:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_httpserver:simpleclient_httpserver:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient-httpserver:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient_httpserver:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient-httpserver:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient_httpserver:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_httpserver-0.16.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simpleclient_httpserver"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.prometheus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_httpserver-0.16.0.jar"
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_httpserver@0.16.0",
      "type": "library",
      "version": "0.16.0"
    },
    {
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_httpserver@0.9.0?package-id=9878749ef332e31f",
      "cpe": "cpe:2.3:a:simpleclient-httpserver:simpleclient-httpserver:0.9.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "510838d9fb246736d7ffd1a3fbf5593bee49b3f2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.prometheus",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "simpleclient_httpserver",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-httpserver:simpleclient_httpserver:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_httpserver:simpleclient-httpserver:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_httpserver:simpleclient_httpserver:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient-httpserver:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient_httpserver:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient-httpserver:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient_httpserver:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/simpleclient_httpserver-0.9.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simpleclient_httpserver"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.prometheus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/simpleclient_httpserver-0.9.0.jar"
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_httpserver@0.9.0",
      "type": "library",
      "version": "0.9.0"
    },
    {
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_pushgateway@0.16.0?package-id=0c9da27e654c63f3",
      "cpe": "cpe:2.3:a:simpleclient-pushgateway:simpleclient-pushgateway:0.16.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "65935d9855ece6f85c21ad38634703d0917bf88c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.prometheus",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "simpleclient_pushgateway",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-pushgateway:simpleclient_pushgateway:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_pushgateway:simpleclient-pushgateway:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_pushgateway:simpleclient_pushgateway:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient-pushgateway:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient_pushgateway:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient-pushgateway:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient_pushgateway:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_pushgateway-0.16.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simpleclient_pushgateway"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.prometheus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_pushgateway-0.16.0.jar"
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_pushgateway@0.16.0",
      "type": "library",
      "version": "0.16.0"
    },
    {
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?package-id=005dedc9efeeec1e",
      "cpe": "cpe:2.3:a:simpleclient-tracer-common:simpleclient-tracer-common:0.16.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "dec00ef7c6155c4ca1109ec8248f7ff58d8f6cd3"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.prometheus",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "simpleclient_tracer_common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer-common:simpleclient_tracer_common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer_common:simpleclient-tracer-common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer_common:simpleclient_tracer_common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer:simpleclient-tracer-common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer:simpleclient_tracer_common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer:simpleclient-tracer-common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer:simpleclient_tracer_common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient-tracer-common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient_tracer_common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient-tracer-common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient_tracer_common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_tracer_common-0.16.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simpleclient_tracer_common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.prometheus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_tracer_common-0.16.0.jar"
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0",
      "type": "library",
      "version": "0.16.0"
    },
    {
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0?package-id=722baa7fe7dc3b74",
      "cpe": "cpe:2.3:a:simpleclient-tracer-otel:simpleclient-tracer-otel:0.16.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cc3d2b7b7cb6f077e3b1ee1d3e99eb54fddfa151"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.prometheus",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "simpleclient_tracer_otel",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer-otel:simpleclient_tracer_otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer_otel:simpleclient-tracer-otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer_otel:simpleclient_tracer_otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer:simpleclient-tracer-otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer:simpleclient_tracer_otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer:simpleclient-tracer-otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer:simpleclient_tracer_otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient-tracer-otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient_tracer_otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient-tracer-otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient_tracer_otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_tracer_otel-0.16.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simpleclient_tracer_otel"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.prometheus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_tracer_otel-0.16.0.jar"
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0",
      "type": "library",
      "version": "0.16.0"
    },
    {
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0?package-id=cb6e62642b1e7e5a",
      "cpe": "cpe:2.3:a:simpleclient-tracer-otel-agent:simpleclient-tracer-otel-agent:0.16.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "009d724771e339ff7ec6cd7c0cc170d3470904c5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.prometheus",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "simpleclient_tracer_otel_agent",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer-otel-agent:simpleclient_tracer_otel_agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer_otel_agent:simpleclient-tracer-otel-agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer_otel_agent:simpleclient_tracer_otel_agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer-otel:simpleclient-tracer-otel-agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer-otel:simpleclient_tracer_otel_agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer_otel:simpleclient-tracer-otel-agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer_otel:simpleclient_tracer_otel_agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer:simpleclient-tracer-otel-agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer:simpleclient_tracer_otel_agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer:simpleclient-tracer-otel-agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer:simpleclient_tracer_otel_agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient-tracer-otel-agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient_tracer_otel_agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient-tracer-otel-agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient_tracer_otel_agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_tracer_otel_agent-0.16.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simpleclient_tracer_otel_agent"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.prometheus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_tracer_otel_agent-0.16.0.jar"
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0",
      "type": "library",
      "version": "0.16.0"
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.10?package-id=1e41b3d2bbccec21",
      "cpe": "cpe:2.3:a:slf4j-api:slf4j-api:1.7.10:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5b338f206827d88acd890739f400a9b7664e5984"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.slf4j",
      "name": "slf4j-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-api:slf4j_api:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j-api:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j_api:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j-api:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j_api:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/slf4j-api-1.7.10.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "slf4j-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/slf4j-api-1.7.10.jar"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.10",
      "type": "library",
      "version": "1.7.10"
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36?package-id=fc19fee0f88684b4",
      "cpe": "cpe:2.3:a:slf4j-api:slf4j-api:1.7.36:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6c62681a2f655b49963a5983b8b0950a6120ae14"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.slf4j",
      "name": "slf4j-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/slf4j-api-1.7.36.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "slf4j-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/slf4j-api-1.7.36.jar"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "type": "library",
      "version": "1.7.36"
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36?package-id=37fae546ffcfb1c7",
      "cpe": "cpe:2.3:a:slf4j-api:slf4j-api:1.7.36:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6c62681a2f655b49963a5983b8b0950a6120ae14"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.slf4j",
      "name": "slf4j-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/slf4j-api-1.7.36.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "slf4j-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/slf4j-api-1.7.36.jar"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "type": "library",
      "version": "1.7.36"
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36?package-id=ff58b95e95e54063",
      "cpe": "cpe:2.3:a:slf4j-api:slf4j-api:1.7.36:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6c62681a2f655b49963a5983b8b0950a6120ae14"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.slf4j",
      "name": "slf4j-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/slf4j-api-1.7.36.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "slf4j-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/slf4j-api-1.7.36.jar"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "type": "library",
      "version": "1.7.36"
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36?package-id=0f3e153cbf2de598",
      "cpe": "cpe:2.3:a:slf4j-api:slf4j-api:1.7.36:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6c62681a2f655b49963a5983b8b0950a6120ae14"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.slf4j",
      "name": "slf4j-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/slf4j-api-1.7.36.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "slf4j-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/slf4j-api-1.7.36.jar"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "type": "library",
      "version": "1.7.36"
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36?package-id=ad36a07ccdef036d",
      "cpe": "cpe:2.3:a:slf4j-api:slf4j-api:1.7.36:*:*:*:*:*:*:*",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "slf4j-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:org.slf4j:slf4j-api"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "type": "library",
      "version": "1.7.36"
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36?package-id=845c440001f64a3c",
      "cpe": "cpe:2.3:a:slf4j-api:slf4j-api:1.7.36:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6c62681a2f655b49963a5983b8b0950a6120ae14"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.slf4j",
      "name": "slf4j-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/slf4j-api-1.7.36.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "slf4j-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/slf4j-api-1.7.36.jar"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "type": "library",
      "version": "1.7.36"
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/slf4j-log4j12@1.7.10?package-id=d4c505afd8c4e6bf",
      "cpe": "cpe:2.3:a:slf4j-log4j12:slf4j-log4j12:1.7.10:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b3eeae7d1765f988a1f45ea81517191315c69c9e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.slf4j",
      "name": "slf4j-log4j12",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-log4j12:slf4j_log4j12:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_log4j12:slf4j-log4j12:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_log4j12:slf4j_log4j12:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j-log4j12:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j_log4j12:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/slf4j-log4j12-1.7.10.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "slf4j-log4j12"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/slf4j-log4j12-1.7.10.jar"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-log4j12@1.7.10",
      "type": "library",
      "version": "1.7.10"
    },
    {
      "bom-ref": "pkg:maven/org.yaml/snakeyaml@1.27?package-id=ae1151ca333b1b05",
      "cpe": "cpe:2.3:a:snakeyaml:snakeyaml:1.27:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "359d62567480b07a679dc643f82fc926b100eed5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.yaml",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "snakeyaml",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:yaml:snakeyaml:1.27:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/snakeyaml-1.27.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "snakeyaml"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.yaml"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/snakeyaml-1.27.jar"
        }
      ],
      "purl": "pkg:maven/org.yaml/snakeyaml@1.27",
      "type": "library",
      "version": "1.27"
    },
    {
      "bom-ref": "pkg:maven/org.yaml/snakeyaml@1.32?package-id=58ccbe753c87d20a",
      "cpe": "cpe:2.3:a:snakeyaml:snakeyaml:1.32:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e80612549feb5c9191c498de628c1aa80693cf0b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.yaml",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "snakeyaml",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:yaml:snakeyaml:1.32:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/snakeyaml-1.32.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "snakeyaml"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.yaml"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/snakeyaml-1.32.jar"
        }
      ],
      "purl": "pkg:maven/org.yaml/snakeyaml@1.32",
      "type": "library",
      "version": "1.32"
    },
    {
      "bom-ref": "pkg:maven/org.yaml/snakeyaml@2.0?package-id=3de8f8501c51312a",
      "cpe": "cpe:2.3:a:snakeyaml:snakeyaml:2.0:*:*:*:*:*:*:*",
      "group": "org.yaml",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "snakeyaml",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:yaml:snakeyaml:2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "snakeyaml"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.yaml"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:org.yaml:snakeyaml"
        }
      ],
      "purl": "pkg:maven/org.yaml/snakeyaml@2.0",
      "type": "library",
      "version": "2.0"
    },
    {
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.0.4.1?package-id=fd17cf23230054a7",
      "cpe": "cpe:2.3:a:SnappyBundleActivator:snappy-java:1.0.4.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f88b89a5a21a466aeb0ecf0c063605bd584b4947"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.xerial.snappy",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "snappy-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy_java:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy-java:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy_java:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy-java:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy_java:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy-java:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy_java:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy-java:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy_java:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/snappy-java-1.0.4.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "snappy-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.xerial.snappy"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/snappy-java-1.0.4.1.jar"
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.0.4.1",
      "type": "library",
      "version": "1.0.4.1"
    },
    {
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4?package-id=de5ed0cb761d9a1b",
      "cpe": "cpe:2.3:a:SnappyBundleActivator:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "66f0d56454509f6e36175f2331572e250e04a6cc"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "snappy-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/snappy-java-1.1.8.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/snappy-java-1.1.8.4.jar"
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4",
      "type": "library",
      "version": "1.1.8.4"
    },
    {
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4?package-id=479983536ba03142",
      "cpe": "cpe:2.3:a:SnappyBundleActivator:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "66f0d56454509f6e36175f2331572e250e04a6cc"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "snappy-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/snappy-java-1.1.8.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/snappy-java-1.1.8.4.jar"
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4",
      "type": "library",
      "version": "1.1.8.4"
    },
    {
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4?package-id=0f044f55fae24b54",
      "cpe": "cpe:2.3:a:SnappyBundleActivator:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "66f0d56454509f6e36175f2331572e250e04a6cc"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "snappy-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-indexing-service/snappy-java-1.1.8.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-indexing-service/snappy-java-1.1.8.4.jar"
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4",
      "type": "library",
      "version": "1.1.8.4"
    },
    {
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4?package-id=5b9b1b3a87e6ba0d",
      "cpe": "cpe:2.3:a:SnappyBundleActivator:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "66f0d56454509f6e36175f2331572e250e04a6cc"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "snappy-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/snappy-java-1.1.8.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/snappy-java-1.1.8.4.jar"
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4",
      "type": "library",
      "version": "1.1.8.4"
    },
    {
      "bom-ref": "pkg:maven/net.spy.memcached.BuildInfo/spymemcached@2.12.3?package-id=a64d0ad8291b55b7",
      "cpe": "cpe:2.3:a:2006-2011-dustin-sallings\\,-matt-ingenthron:spymemcached:2.12.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9a648a4897f8038dc146d445b6fe94dacbb7e132"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "spymemcached",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:2006_2011_dustin_sallings\\,_matt_ingenthron:spymemcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:2006-2011-dustin-sallings\\,-matt-ingenthron:BuildInfo:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:2006-2011-dustin-sallings\\,-matt-ingenthron:memcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:2006_2011_dustin_sallings\\,_matt_ingenthron:BuildInfo:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:2006_2011_dustin_sallings\\,_matt_ingenthron:memcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spymemcached:spymemcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:BuildInfo:spymemcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:memcached:spymemcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spymemcached:BuildInfo:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spymemcached:memcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:BuildInfo:BuildInfo:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:BuildInfo:memcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:memcached:BuildInfo:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:memcached:memcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spy:spymemcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spy:BuildInfo:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spy:memcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/spymemcached-2.12.3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/spymemcached-2.12.3.jar"
        }
      ],
      "purl": "pkg:maven/net.spy.memcached.BuildInfo/spymemcached@2.12.3",
      "type": "library",
      "version": "2.12.3"
    },
    {
      "bom-ref": "pkg:rpm/rhel/sqlite-libs@3.34.1-7.el9_3?arch=aarch64&upstream=sqlite-3.34.1-7.el9_3.src.rpm&distro=rhel-9.4&package-id=8ebdb1c9df56761e",
      "cpe": "cpe:2.3:a:sqlite-libs:sqlite-libs:3.34.1-7.el9_3:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "sqlite-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sqlite-libs:sqlite_libs:3.34.1-7.el9_3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sqlite_libs:sqlite-libs:3.34.1-7.el9_3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sqlite_libs:sqlite_libs:3.34.1-7.el9_3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:sqlite-libs:3.34.1-7.el9_3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:sqlite_libs:3.34.1-7.el9_3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sqlite:sqlite-libs:3.34.1-7.el9_3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sqlite:sqlite_libs:3.34.1-7.el9_3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el9_3"
        },
        {
          "name": "syft:metadata:size",
          "value": "1294856"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "sqlite-3.34.1-7.el9_3.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/sqlite-libs@3.34.1-7.el9_3?arch=aarch64&upstream=sqlite-3.34.1-7.el9_3.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "3.34.1-7.el9_3"
    },
    {
      "bom-ref": "pkg:maven/stax-api/stax-api@1.0-2?package-id=c7e7dde6842613c6",
      "cpe": "cpe:2.3:a:stax-api:stax-api:1.0-2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d6337b0de8b25e53e81b922352fbea9f9f57ba0b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "stax-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax-api:stax_api:1.0-2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax_api:stax-api:1.0-2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax_api:stax_api:1.0-2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax:stax-api:1.0-2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax:stax_api:1.0-2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/stax-api-1.0-2.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/stax-api-1.0-2.jar"
        }
      ],
      "purl": "pkg:maven/stax-api/stax-api@1.0-2",
      "type": "library",
      "version": "1.0-2"
    },
    {
      "bom-ref": "pkg:maven/org.jvnet.staxex/stax-ex@1.8?package-id=b54ecce11372786a",
      "cpe": "cpe:2.3:a:stax-ex:stax-ex:1.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8cc35f73da321c29973191f2cf143d29d26a1df7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.jvnet.staxex",
      "licenses": [
        {
          "license": {
            "name": "https://glassfish.dev.java.net/public/CDDL+GPL_1_1.html"
          }
        }
      ],
      "name": "stax-ex",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax-ex:stax_ex:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax_ex:stax-ex:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax_ex:stax_ex:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:staxex:stax-ex:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:staxex:stax_ex:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jvnet:stax-ex:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jvnet:stax_ex:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax:stax-ex:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax:stax_ex:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/stax-ex-1.8.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "stax-ex"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.jvnet.staxex"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/stax-ex-1.8.jar"
        }
      ],
      "purl": "pkg:maven/org.jvnet.staxex/stax-ex@1.8",
      "type": "library",
      "version": "1.8"
    },
    {
      "bom-ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?package-id=c48e16bc51839f53",
      "cpe": "cpe:2.3:a:fasterxml-com:stax2-api:4.2.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a3f7325c52240418c2ba257b103c3c550e140c83"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.codehaus.woodstox",
      "licenses": [
        {
          "license": {
            "name": "http://www.opensource.org/licenses/bsd-license.php"
          }
        }
      ],
      "name": "stax2-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml-com:stax2_api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml_com:stax2-api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml_com:stax2_api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax2-api:stax2-api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax2-api:stax2_api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax2_api:stax2-api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax2_api:stax2_api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:stax2-api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:stax2_api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox:stax2-api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox:stax2_api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax2:stax2-api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax2:stax2_api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/stax2-api-4.2.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "stax2-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.codehaus.woodstox"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/stax2-api-4.2.1.jar"
        }
      ],
      "purl": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1",
      "type": "library",
      "version": "4.2.1"
    },
    {
      "bom-ref": "pkg:maven/stringtemplate/stringtemplate@3.2?package-id=92e46e6af7d3e3cd",
      "cpe": "cpe:2.3:a:stringtemplate:stringtemplate:3.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6fe2e3bb57daebd1555494818909f9664376dd6c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "stringtemplate",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-single/stringtemplate-3.2.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-single/stringtemplate-3.2.jar"
        }
      ],
      "purl": "pkg:maven/stringtemplate/stringtemplate@3.2",
      "type": "library",
      "version": "3.2"
    },
    {
      "bom-ref": "pkg:maven/io.swagger/swagger-annotations@1.6.2?package-id=ce1942ccf7cb9c3f",
      "cpe": "cpe:2.3:a:swagger-annotations:swagger-annotations:1.6.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "313913e603eaf3bb2c3b05079046ec07bb61f8c6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.swagger",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "name": "swagger-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger-annotations:swagger_annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_annotations:swagger-annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_annotations:swagger_annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:swagger-annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:swagger_annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger-annotations:annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_annotations:annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:swagger-annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:swagger_annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/swagger-annotations-1.6.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "swagger-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.swagger"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/swagger-annotations-1.6.2.jar"
        }
      ],
      "purl": "pkg:maven/io.swagger/swagger-annotations@1.6.2",
      "type": "library",
      "version": "1.6.2"
    },
    {
      "bom-ref": "pkg:maven/io.swagger/swagger-annotations@1.6.2?package-id=1b5a43c1876a1a30",
      "cpe": "cpe:2.3:a:swagger-annotations:swagger-annotations:1.6.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "313913e603eaf3bb2c3b05079046ec07bb61f8c6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.swagger",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "name": "swagger-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger-annotations:swagger_annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_annotations:swagger-annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_annotations:swagger_annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:swagger-annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:swagger_annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger-annotations:annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_annotations:annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:swagger-annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:swagger_annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/swagger-annotations-1.6.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "swagger-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.swagger"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/swagger-annotations-1.6.2.jar"
        }
      ],
      "purl": "pkg:maven/io.swagger/swagger-annotations@1.6.2",
      "type": "library",
      "version": "1.6.2"
    },
    {
      "bom-ref": "pkg:maven/io.swagger/swagger-annotations@1.6.2?package-id=317fe34d852233e3",
      "cpe": "cpe:2.3:a:swagger-annotations:swagger-annotations:1.6.2:*:*:*:*:*:*:*",
      "group": "io.swagger",
      "name": "swagger-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger-annotations:swagger_annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_annotations:swagger-annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_annotations:swagger_annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:swagger-annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:swagger_annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "swagger-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.swagger"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:io.swagger:swagger-annotations"
        }
      ],
      "purl": "pkg:maven/io.swagger/swagger-annotations@1.6.2",
      "type": "library",
      "version": "1.6.2"
    },
    {
      "bom-ref": "pkg:maven/io.swagger/swagger-core@1.6.2?package-id=5f1e90c00b054e96",
      "cpe": "cpe:2.3:a:swagger-core:swagger-core:1.6.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4f062ad1aebb1255b84c851d00694cc7949de832"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.swagger",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "name": "swagger-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger-core:swagger_core:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_core:swagger-core:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_core:swagger_core:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:swagger-core:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:swagger_core:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:swagger-core:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:swagger_core:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger-core:core:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_core:core:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:core:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/swagger-core-1.6.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "swagger-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.swagger"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/swagger-core-1.6.2.jar"
        }
      ],
      "purl": "pkg:maven/io.swagger/swagger-core@1.6.2",
      "type": "library",
      "version": "1.6.2"
    },
    {
      "bom-ref": "pkg:maven/io.swagger/swagger-core@1.6.2?package-id=71286f479e56f9c0",
      "cpe": "cpe:2.3:a:swagger-core:swagger-core:1.6.2:*:*:*:*:*:*:*",
      "group": "io.swagger",
      "name": "swagger-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger-core:swagger_core:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_core:swagger-core:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_core:swagger_core:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:swagger-core:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:swagger_core:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "swagger-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.swagger"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:io.swagger:swagger-core"
        }
      ],
      "purl": "pkg:maven/io.swagger/swagger-core@1.6.2",
      "type": "library",
      "version": "1.6.2"
    },
    {
      "bom-ref": "pkg:maven/io.swagger/swagger-models@1.6.2?package-id=641785417d8803e1",
      "cpe": "cpe:2.3:a:swagger-models:swagger-models:1.6.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "887697058d8464462e8fd6d23c8461e90aec8c08"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.swagger",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "name": "swagger-models",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger-models:swagger_models:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_models:swagger-models:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_models:swagger_models:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:swagger-models:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:swagger_models:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:models:swagger-models:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:models:swagger_models:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger-models:models:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_models:models:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:models:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:models:models:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/swagger-models-1.6.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "swagger-models"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.swagger"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/swagger-models-1.6.2.jar"
        }
      ],
      "purl": "pkg:maven/io.swagger/swagger-models@1.6.2",
      "type": "library",
      "version": "1.6.2"
    },
    {
      "bom-ref": "pkg:maven/io.swagger/swagger-models@1.6.2?package-id=9ab326dace8e7f06",
      "cpe": "cpe:2.3:a:swagger-models:swagger-models:1.6.2:*:*:*:*:*:*:*",
      "group": "io.swagger",
      "name": "swagger-models",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger-models:swagger_models:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_models:swagger-models:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_models:swagger_models:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:swagger-models:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:swagger_models:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "swagger-models"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.swagger"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:io.swagger:swagger-models"
        }
      ],
      "purl": "pkg:maven/io.swagger/swagger-models@1.6.2",
      "type": "library",
      "version": "1.6.2"
    },
    {
      "bom-ref": "pkg:rpm/rhel/systemd-libs@252-32.el9_4?arch=aarch64&upstream=systemd-252-32.el9_4.src.rpm&distro=rhel-9.4&package-id=6a2ceb6eda9c45a5",
      "cpe": "cpe:2.3:a:systemd-libs:systemd-libs:252-32.el9_4:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+ and MIT"
          }
        }
      ],
      "name": "systemd-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:systemd-libs:systemd_libs:252-32.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:systemd_libs:systemd-libs:252-32.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:systemd_libs:systemd_libs:252-32.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:systemd:systemd-libs:252-32.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:systemd:systemd_libs:252-32.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:systemd-libs:252-32.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:systemd_libs:252-32.el9_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "32.el9_4"
        },
        {
          "name": "syft:metadata:size",
          "value": "1977352"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "systemd-252-32.el9_4.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/systemd-libs@252-32.el9_4?arch=aarch64&upstream=systemd-252-32.el9_4.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "252-32.el9_4"
    },
    {
      "bom-ref": "pkg:rpm/rhel/systemd-libs@252-32.el9_4.6?arch=aarch64&upstream=systemd-252-32.el9_4.6.src.rpm&distro=rhel-9.4&package-id=8ed32e04bfe98223",
      "cpe": "cpe:2.3:a:systemd-libs:systemd-libs:252-32.el9_4.6:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+ and MIT"
          }
        }
      ],
      "name": "systemd-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:systemd-libs:systemd_libs:252-32.el9_4.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:systemd_libs:systemd-libs:252-32.el9_4.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:systemd_libs:systemd_libs:252-32.el9_4.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:systemd:systemd-libs:252-32.el9_4.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:systemd:systemd_libs:252-32.el9_4.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:systemd-libs:252-32.el9_4.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:systemd_libs:252-32.el9_4.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "32.el9_4.6"
        },
        {
          "name": "syft:metadata:size",
          "value": "1977360"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "systemd-252-32.el9_4.6.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/systemd-libs@252-32.el9_4.6?arch=aarch64&upstream=systemd-252-32.el9_4.6.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "252-32.el9_4.6"
    },
    {
      "bom-ref": "pkg:rpm/rhel/tar@1.34-6.el9_1?arch=aarch64&epoch=2&upstream=tar-1.34-6.el9_1.src.rpm&distro=rhel-9.4&package-id=857dab354e463f32",
      "cpe": "cpe:2.3:a:redhat:tar:2\\:1.34-6.el9_1:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+"
          }
        }
      ],
      "name": "tar",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tar:tar:2\\:1.34-6.el9_1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "2"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el9_1"
        },
        {
          "name": "syft:metadata:size",
          "value": "3174803"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "tar-1.34-6.el9_1.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/tar@1.34-6.el9_1?arch=aarch64&epoch=2&upstream=tar-1.34-6.el9_1.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2:1.34-6.el9_1"
    },
    {
      "bom-ref": "pkg:maven/io.tesla.aether/tesla-aether@0.0.5?package-id=d992396e2576f7e7",
      "cpe": "cpe:2.3:a:tesla-aether:tesla-aether:0.0.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5397c9a02f77744da25d4ef63a7ebf01affeca62"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.tesla.aether",
      "licenses": [
        {
          "license": {
            "name": "The Eclipse Public License, Version 1.0",
            "url": "http://www.eclipse.org/legal/epl-v10.html"
          }
        }
      ],
      "name": "tesla-aether",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla-aether:tesla_aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla_aether:tesla-aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla_aether:tesla_aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:tesla-aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:tesla_aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla-aether:aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla_aether:aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla:tesla-aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla:tesla_aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla:aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/tesla-aether-0.0.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "tesla-aether"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.tesla.aether"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/tesla-aether-0.0.5.jar"
        }
      ],
      "purl": "pkg:maven/io.tesla.aether/tesla-aether@0.0.5",
      "type": "library",
      "version": "0.0.5"
    },
    {
      "bom-ref": "pkg:maven/org.threeten/threeten-extra@1.5.0?package-id=f476334f07df417a",
      "cpe": "cpe:2.3:a:threeten-extra:threeten-extra:1.5.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d6adb54fefe72482ed049f07af31ddf2c287345f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.threeten",
      "licenses": [
        {
          "license": {
            "name": "https://raw.githubusercontent.com/ThreeTen/threeten-extra/master/LICENSE.txt"
          }
        }
      ],
      "name": "threeten-extra",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten-extra:threeten_extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten_extra:threeten-extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten_extra:threeten_extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten-org:threeten-extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten-org:threeten_extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten_org:threeten-extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten_org:threeten_extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten:threeten-extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten:threeten_extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:extra:threeten-extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:extra:threeten_extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten-extra:extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten_extra:extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten-org:extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten_org:extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten:extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:extra:extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/threeten-extra-1.5.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "threeten-extra"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.threeten"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/threeten-extra-1.5.0.jar"
        }
      ],
      "purl": "pkg:maven/org.threeten/threeten-extra@1.5.0",
      "type": "library",
      "version": "1.5.0"
    },
    {
      "bom-ref": "pkg:maven/org.glassfish.jaxb/txw2@2.3.1?package-id=dd146b7dd92ffb68",
      "cpe": "cpe:2.3:a:glassfish:txw2:2.3.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a09d2c48d3285f206fafbffe0e50619284e92126"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.glassfish.jaxb",
      "name": "txw2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:txw2:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb:txw2:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:txw2:txw2:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/txw2-2.3.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "txw2"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.glassfish.jaxb"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/txw2-2.3.1.jar"
        }
      ],
      "purl": "pkg:maven/org.glassfish.jaxb/txw2@2.3.1",
      "type": "library",
      "version": "2.3.1"
    },
    {
      "bom-ref": "pkg:rpm/rhel/tzdata@2024a-1.el9?arch=noarch&upstream=tzdata-2024a-1.el9.src.rpm&distro=rhel-9.4&package-id=b4ba3ef7051be978",
      "cpe": "cpe:2.3:a:redhat:tzdata:2024a-1.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "tzdata",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tzdata:tzdata:2024a-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "1707934"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "tzdata-2024a-1.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/tzdata@2024a-1.el9?arch=noarch&upstream=tzdata-2024a-1.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2024a-1.el9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/tzdata-java@2024a-1.el9?arch=noarch&upstream=tzdata-2024a-1.el9.src.rpm&distro=rhel-9.4&package-id=06f693d787979885",
      "cpe": "cpe:2.3:a:tzdata-java:tzdata-java:2024a-1.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "tzdata-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tzdata-java:tzdata_java:2024a-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tzdata_java:tzdata-java:2024a-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tzdata_java:tzdata_java:2024a-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:tzdata-java:2024a-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:tzdata_java:2024a-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tzdata:tzdata-java:2024a-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tzdata:tzdata_java:2024a-1.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "350078"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "tzdata-2024a-1.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/tzdata-java@2024a-1.el9?arch=noarch&upstream=tzdata-2024a-1.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "2024a-1.el9"
    },
    {
      "bom-ref": "pkg:maven/javax.validation/validation-api@1.1.0.Final?package-id=51e599addddb0811",
      "cpe": "cpe:2.3:a:validation-api:validation-api:1.1.0.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8613ae82954779d518631e05daa73a6a954817d5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "javax.validation",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "validation-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validation-api:validation_api:1.1.0.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validation_api:validation-api:1.1.0.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validation_api:validation_api:1.1.0.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validation:validation-api:1.1.0.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validation:validation_api:1.1.0.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/validation-api-1.1.0.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "validation-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "javax.validation"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/validation-api-1.1.0.Final.jar"
        }
      ],
      "purl": "pkg:maven/javax.validation/validation-api@1.1.0.Final",
      "type": "library",
      "version": "1.1.0.Final"
    },
    {
      "bom-ref": "pkg:maven/io.vavr/vavr@0.10.2?package-id=a364b4ac142bf1af",
      "cpe": "cpe:2.3:a:vavr:vavr:0.10.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "dfd5101b17da36c32ae024b984e0b72712f01a35"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.vavr",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "vavr",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/vavr-0.10.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "vavr"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.vavr"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/vavr-0.10.2.jar"
        }
      ],
      "purl": "pkg:maven/io.vavr/vavr@0.10.2",
      "type": "library",
      "version": "0.10.2"
    },
    {
      "bom-ref": "pkg:maven/io.vavr/vavr-match@0.10.2?package-id=2701e157d5ff9c36",
      "cpe": "cpe:2.3:a:vavr-match:vavr-match:0.10.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "68f1af10052713fda01bfb1e5b831dcf6d826ab2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.vavr",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "vavr-match",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vavr-match:vavr_match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vavr_match:vavr-match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vavr_match:vavr_match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:match:vavr-match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:match:vavr_match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vavr-match:match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vavr_match:match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vavr:vavr-match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vavr:vavr_match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:match:match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vavr:match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/vavr-match-0.10.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "vavr-match"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.vavr"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/vavr-match-0.10.2.jar"
        }
      ],
      "purl": "pkg:maven/io.vavr/vavr-match@0.10.2",
      "type": "library",
      "version": "0.10.2"
    },
    {
      "bom-ref": "pkg:rpm/rhel/vector@0.39.0-1?arch=aarch64&upstream=vector-0.39.0-1.src.rpm&distro=rhel-9.4&package-id=56ab70b92a1a1ad7",
      "cpe": "cpe:2.3:a:vector:vector:0.39.0-1:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MPL-2.0"
          }
        }
      ],
      "name": "vector",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "1"
        },
        {
          "name": "syft:metadata:size",
          "value": "120546481"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "vector-0.39.0-1.src.rpm"
        }
      ],
      "purl": "pkg:rpm/rhel/vector@0.39.0-1?arch=aarch64&upstream=vector-0.39.0-1.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "0.39.0-1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.velocity/velocity-engine-core@2.2?package-id=21c5ac5a111462de",
      "cpe": "cpe:2.3:a:apache:velocity-engine-core:2.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "68d899cb70cd27d495562fa808feb2da4926d38f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.velocity",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "velocity-engine-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:velocity_engine_core:2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:velocity:2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/velocity-engine-core-2.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "velocity-engine-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.velocity"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/velocity-engine-core-2.2.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.velocity/velocity-engine-core@2.2",
      "type": "library",
      "version": "2.2"
    },
    {
      "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-provider-api@2.4?package-id=a22f4a2c37f42849",
      "cpe": "cpe:2.3:a:apache:wagon-provider-api:2.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e40429d9dd849c5fe0bdf97062b1d9358d99826d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.maven.wagon",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "wagon-provider-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:wagon_provider_api:2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:wagon:2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/wagon-provider-api-2.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "wagon-provider-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.maven.wagon"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/wagon-provider-api-2.4.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.maven.wagon/wagon-provider-api@2.4",
      "type": "library",
      "version": "2.4"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid/web-console@26.0.0?package-id=aa57d41d0876d045",
      "cpe": "cpe:2.3:a:apache:web-console:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "dd380a65a8234d4f2a6414eaa2fcfb76bee42830"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid",
      "name": "web-console",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:web_console:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/web-console-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "web-console"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/web-console-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid/web-console@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.1?package-id=4f0ba12919a0fa42",
      "cpe": "cpe:2.3:a:woodstox-core:woodstox-core:6.2.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1600925b1ec7c7a3403c8f068ad62feead13132f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.woodstox",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "woodstox-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox-core:woodstox_core:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox_core:woodstox-core:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox_core:woodstox_core:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:woodstox-core:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:woodstox_core:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox-core:woodstox:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox:woodstox-core:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox:woodstox_core:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox_core:woodstox:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:woodstox:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox:woodstox:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/woodstox-core-6.2.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "woodstox-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.woodstox"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/woodstox-core-6.2.1.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.1",
      "type": "library",
      "version": "6.2.1"
    },
    {
      "bom-ref": "pkg:maven/xmlenc/xmlenc@0.52?package-id=1ec82b7b0b311812",
      "cpe": "cpe:2.3:a:ernst-de-haan:xmlenc:0.52:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d82554efbe65906d83b3d97bd7509289e9db561a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "xmlenc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ernst_de_haan:xmlenc:0.52:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xmlenc:xmlenc:0.52:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/xmlenc-0.52.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/xmlenc-0.52.jar"
        }
      ],
      "purl": "pkg:maven/xmlenc/xmlenc@0.52",
      "type": "library",
      "version": "0.52"
    },
    {
      "bom-ref": "pkg:maven/xmlenc/xmlenc@0.52?package-id=f35999385f5fe8c2",
      "cpe": "cpe:2.3:a:ernst-de-haan:xmlenc:0.52:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d82554efbe65906d83b3d97bd7509289e9db561a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "xmlenc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ernst_de_haan:xmlenc:0.52:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xmlenc:xmlenc:0.52:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/xmlenc-0.52.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/xmlenc-0.52.jar"
        }
      ],
      "purl": "pkg:maven/xmlenc/xmlenc@0.52",
      "type": "library",
      "version": "0.52"
    },
    {
      "bom-ref": "pkg:maven/net.java.dev.msv/xsdlib@2013.6.1?package-id=f4393723e1a9d119",
      "cpe": "cpe:2.3:a:xsdlib:xsdlib:2013.6.1:*:*:*:*:*:*:*",
      "group": "net.java.dev.msv",
      "name": "xsdlib",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:xsdlib:2013.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dev:xsdlib:2013.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:msv:xsdlib:2013.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/woodstox-core-6.2.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "xsdlib"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.java.dev.msv"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/woodstox-core-6.2.1.jar:net.java.dev.msv:xsdlib"
        }
      ],
      "purl": "pkg:maven/net.java.dev.msv/xsdlib@2013.6.1",
      "type": "library",
      "version": "2013.6.1"
    },
    {
      "bom-ref": "pkg:maven/org.tukaani.xz/xz@1.8?package-id=099918109823f888",
      "cpe": "cpe:2.3:a:tukaani:xz:1.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c4f7d054303948eb6a4066194253886c8af07128"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "xz",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xz:xz:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/xz-1.8.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/xz-1.8.jar"
        }
      ],
      "purl": "pkg:maven/org.tukaani.xz/xz@1.8",
      "type": "library",
      "version": "1.8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/xz-libs@5.2.5-8.el9_0?arch=aarch64&upstream=xz-5.2.5-8.el9_0.src.rpm&distro=rhel-9.4&package-id=d5ee253bdf529d94",
      "cpe": "cpe:2.3:a:xz-libs:xz-libs:5.2.5-8.el9_0:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "xz-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xz-libs:xz_libs:5.2.5-8.el9_0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xz_libs:xz-libs:5.2.5-8.el9_0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xz_libs:xz_libs:5.2.5-8.el9_0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:xz-libs:5.2.5-8.el9_0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:xz_libs:5.2.5-8.el9_0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xz:xz-libs:5.2.5-8.el9_0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xz:xz_libs:5.2.5-8.el9_0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "8.el9_0"
        },
        {
          "name": "syft:metadata:size",
          "value": "205837"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "xz-5.2.5-8.el9_0.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/xz-libs@5.2.5-8.el9_0?arch=aarch64&upstream=xz-5.2.5-8.el9_0.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "5.2.5-8.el9_0"
    },
    {
      "bom-ref": "pkg:maven/net.openhft/zero-allocation-hashing@0.9?package-id=b05b20e2feb44f7b",
      "cpe": "cpe:2.3:a:zero-allocation-hashing:zero-allocation-hashing:0.9:*:*:*:*:*:*:*",
      "group": "net.openhft",
      "name": "zero-allocation-hashing",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero-allocation-hashing:zero_allocation_hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero_allocation_hashing:zero-allocation-hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero_allocation_hashing:zero_allocation_hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero-allocation:zero-allocation-hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero-allocation:zero_allocation_hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero_allocation:zero-allocation-hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero_allocation:zero_allocation_hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openhft:zero-allocation-hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openhft:zero_allocation_hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero:zero-allocation-hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero:zero_allocation_hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-column-1.12.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "zero-allocation-hashing"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.openhft"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-column-1.12.3.jar:net.openhft:zero-allocation-hashing"
        }
      ],
      "purl": "pkg:maven/net.openhft/zero-allocation-hashing@0.9",
      "type": "library",
      "version": "0.9"
    },
    {
      "bom-ref": "pkg:maven/com.flipkart.zjsonpatch/zjsonpatch@0.4.11?package-id=c20e50a71dff08fd",
      "cpe": "cpe:2.3:a:zjsonpatch:zjsonpatch:0.4.11:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c5500b069122750c79d43167a8bcafd8458747fe"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.flipkart.zjsonpatch",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "zjsonpatch",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:flipkart:zjsonpatch:0.4.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/zjsonpatch-0.4.11.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "zjsonpatch"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.flipkart.zjsonpatch"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/zjsonpatch-0.4.11.jar"
        }
      ],
      "purl": "pkg:maven/com.flipkart.zjsonpatch/zjsonpatch@0.4.11",
      "type": "library",
      "version": "0.4.11"
    },
    {
      "bom-ref": "pkg:rpm/rhel/zlib@1.2.11-40.el9?arch=aarch64&upstream=zlib-1.2.11-40.el9.src.rpm&distro=rhel-9.4&package-id=8c65691b8e115bf0",
      "cpe": "cpe:2.3:a:redhat:zlib:1.2.11-40.el9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "zlib and Boost"
          }
        }
      ],
      "name": "zlib",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zlib:zlib:1.2.11-40.el9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:308d0848980f4c3228e4d55b8572c2f4ad9eb129c2589e2291c16775f20b6374"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:3911c5cd702197ff42e96e008a952e71fffba3db6bf444d657bd51553c74e5bd"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:53ce7ccd46624c30c3cd21bfbd9589c37e2ce99e7c724595ca4a17e65f1da763"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:7307c26bea2127338a8577bdb3f157b55eb84fcf9c8d9b4353226af05841afec"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:8776ca137cba0f72c99ad67dba3d6aa62fb3465f7985290ba1042f438c8df7b9"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/rpmdb.sqlite"
        },
        {
          "name": "syft:metadata:release",
          "value": "40.el9"
        },
        {
          "name": "syft:metadata:size",
          "value": "235473"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "zlib-1.2.11-40.el9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/zlib@1.2.11-40.el9?arch=aarch64&upstream=zlib-1.2.11-40.el9.src.rpm&distro=rhel-9.4",
      "type": "library",
      "version": "1.2.11-40.el9"
    },
    {
      "bom-ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.10?package-id=e339ce1fe45f8391",
      "cpe": "cpe:2.3:a:apache:zookeeper:3.5.10:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e6c13d4da56d3ab9eb7b140d8522681a053d23e4"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.zookeeper",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "zookeeper",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/zookeeper-3.5.10.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "zookeeper"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.zookeeper"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/zookeeper-3.5.10.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.10",
      "type": "library",
      "version": "3.5.10"
    },
    {
      "bom-ref": "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.5.10?package-id=f23193949075487e",
      "cpe": "cpe:2.3:a:apache:zookeeper-jute:3.5.10:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a47bdd09007f2a6b087760590d5507b610781fb6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.zookeeper",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "zookeeper-jute",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:zookeeper_jute:3.5.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:zookeeper:3.5.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/zookeeper-jute-3.5.10.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "zookeeper-jute"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.zookeeper"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/zookeeper-jute-3.5.10.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.5.10",
      "type": "library",
      "version": "3.5.10"
    },
    {
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.2-3?package-id=c20c05a509e189f7",
      "cpe": "cpe:2.3:a:zstd-jni:zstd-jni:1.5.2-3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f52de0603f31798455e48bd90e10a8f888dd6d93"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "https://opensource.org/licenses/BSD-2-Clause;description=BSD 2-Clause License"
          }
        }
      ],
      "name": "zstd-jni",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/zstd-jni-1.5.2-3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/zstd-jni-1.5.2-3.jar"
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.2-3",
      "type": "library",
      "version": "1.5.2-3"
    },
    {
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.2-3?package-id=31f8c4b32437c5dd",
      "cpe": "cpe:2.3:a:zstd-jni:zstd-jni:1.5.2-3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f52de0603f31798455e48bd90e10a8f888dd6d93"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "https://opensource.org/licenses/BSD-2-Clause;description=BSD 2-Clause License"
          }
        }
      ],
      "name": "zstd-jni",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/zstd-jni-1.5.2-3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/zstd-jni-1.5.2-3.jar"
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.2-3",
      "type": "library",
      "version": "1.5.2-3"
    },
    {
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.2-3?package-id=5ed4c55caf3dbe22",
      "cpe": "cpe:2.3:a:zstd-jni:zstd-jni:1.5.2-3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f52de0603f31798455e48bd90e10a8f888dd6d93"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "https://opensource.org/licenses/BSD-2-Clause;description=BSD 2-Clause License"
          }
        }
      ],
      "name": "zstd-jni",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-indexing-service/zstd-jni-1.5.2-3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-indexing-service/zstd-jni-1.5.2-3.jar"
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.2-3",
      "type": "library",
      "version": "1.5.2-3"
    },
    {
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.2-3?package-id=58abf25d1b1ce3d2",
      "cpe": "cpe:2.3:a:zstd-jni:zstd-jni:1.5.2-3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f52de0603f31798455e48bd90e10a8f888dd6d93"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "https://opensource.org/licenses/BSD-2-Clause;description=BSD 2-Clause License"
          }
        }
      ],
      "name": "zstd-jni",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/zstd-jni-1.5.2-3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/zstd-jni-1.5.2-3.jar"
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.2-3",
      "type": "library",
      "version": "1.5.2-3"
    },
    {
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.2-3?package-id=9b5b3942cb9f00aa",
      "cpe": "cpe:2.3:a:zstd-jni:zstd-jni:1.5.2-3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f52de0603f31798455e48bd90e10a8f888dd6d93"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "https://opensource.org/licenses/BSD-2-Clause;description=BSD 2-Clause License"
          }
        }
      ],
      "name": "zstd-jni",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:d0d44fcfb486a6bb126434d9d0298daa3c98c5ebf2f4b758026a9659135db6dd"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/zstd-jni-1.5.2-3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/zstd-jni-1.5.2-3.jar"
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.2-3",
      "type": "library",
      "version": "1.5.2-3"
    },
    {
      "bom-ref": "os:rhel@9.4",
      "cpe": "cpe:2.3:o:redhat:enterprise_linux:9:*:baseos:*:*:*:*:*",
      "description": "Red Hat Enterprise Linux 9.4 (Plow)",
      "externalReferences": [
        {
          "type": "issue-tracker",
          "url": "https://bugzilla.redhat.com/"
        },
        {
          "type": "website",
          "url": "https://www.redhat.com/"
        }
      ],
      "name": "rhel",
      "properties": [
        {
          "name": "syft:distro:id",
          "value": "rhel"
        },
        {
          "name": "syft:distro:idLike:0",
          "value": "fedora"
        },
        {
          "name": "syft:distro:prettyName",
          "value": "Red Hat Enterprise Linux 9.4 (Plow)"
        },
        {
          "name": "syft:distro:versionID",
          "value": "9.4"
        }
      ],
      "swid": {
        "name": "rhel",
        "tagId": "rhel",
        "version": "9.4"
      },
      "type": "operating-system",
      "version": "9.4"
    }
  ],
  "metadata": {
    "component": {
      "author": "Stackable GmbH",
      "bom-ref": "a4d5649b027d38df",
      "description": "Apache Druid. This image is deployed by the Stackable Operator for Apache Druid",
      "name": "druid",
      "publisher": "Stackable GmbH",
      "purl": "pkg:docker/sdp/druid@sha256:11c65da4a0b634d291e1627e0269342dd28d015a7d56e0bf24e68e7a0fd5263a?repository_url=oci.stackable.tech",
      "supplier": {
        "name": "Stackable GmbH",
        "url": [
          "https://stackable.tech/"
        ]
      },
      "type": "container",
      "version": "26.0.0-stackable24.7.0-arm64"
    },
    "properties": [
      {
        "name": "syft:image:labels:architecture",
        "value": "arm64"
      },
      {
        "name": "syft:image:labels:build-date",
        "value": "2024-07-24T08:09:39.338393+00:00"
      },
      {
        "name": "syft:image:labels:description",
        "value": "This image is deployed by the Stackable Operator for Apache Druid"
      },
      {
        "name": "syft:image:labels:distribution-scope",
        "value": "public"
      },
      {
        "name": "syft:image:labels:io.k8s.description",
        "value": "This image is deployed by the Stackable Operator for Apache Druid"
      },
      {
        "name": "syft:image:labels:io.k8s.display-name",
        "value": "Apache Druid"
      },
      {
        "name": "syft:image:labels:io.openshift.tags",
        "value": "ubi9,stackable,druid,sdp"
      },
      {
        "name": "syft:image:labels:maintainer",
        "value": "info@stackable.tech"
      },
      {
        "name": "syft:image:labels:name",
        "value": "Apache Druid"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.authors",
        "value": "info@stackable.tech"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.created",
        "value": "2024-07-24T08:09:39.338393+00:00"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.description",
        "value": "This image is deployed by the Stackable Operator for Apache Druid"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.documentation",
        "value": "https://docs.stackable.tech/home/stable/druid/"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.licenses",
        "value": "Apache-2.0"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.revision",
        "value": "85facdb1f919aa1ebef6450efa42ad95df274e09"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.source",
        "value": "https://github.com/stackabletech/docker-images/"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.title",
        "value": "Apache Druid"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.url",
        "value": "https://stackable.tech"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.vendor",
        "value": "Stackable GmbH"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.version",
        "value": "26.0.0"
      },
      {
        "name": "syft:image:labels:release",
        "value": "24.7.0-arm64"
      },
      {
        "name": "syft:image:labels:summary",
        "value": "The Stackable image for Apache Druid"
      },
      {
        "name": "syft:image:labels:url",
        "value": "https://stackable.tech"
      },
      {
        "name": "syft:image:labels:vcs-type",
        "value": "git"
      },
      {
        "name": "syft:image:labels:vendor",
        "value": "Stackable GmbH"
      },
      {
        "name": "syft:image:labels:version",
        "value": "26.0.0"
      }
    ],
    "timestamp": "2024-07-24T08:34:19Z",
    "tools": {
      "components": [
        {
          "author": "anchore",
          "name": "syft",
          "type": "application",
          "version": "1.4.1"
        }
      ]
    }
  },
  "serialNumber": "urn:uuid:d3181ed3-5021-4f4e-9c14-7669603aa486",
  "specVersion": "1.5",
  "version": 1
}