{
  "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
  "bomFormat": "CycloneDX",
  "components": [
    {
      "bom-ref": "pkg:maven/11/11@2.0.0?package-id=bb6a06eb0e95c435",
      "cpe": "cpe:2.3:a:11:11:2.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ce50a2f37f0369578b2b3ed935a8a3fe2e6d30b1"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "CDDL-1.1"
          }
        }
      ],
      "name": "11",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/kafka_2.11-2.0.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/kafka_2.11-2.0.0.jar"
        }
      ],
      "purl": "pkg:maven/11/11@2.0.0",
      "type": "library",
      "version": "2.0.0"
    },
    {
      "bom-ref": "pkg:maven/com.typesafe.scala-logging/11@3.9.0?package-id=901836f92f82afb6",
      "cpe": "cpe:2.3:a:scala-logging:scala-logging:3.9.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0e0dba06b4a763a0e2208182b264421baedbb0df"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.html;description=Apache 2.0 License"
          }
        }
      ],
      "name": "11",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-logging:scala_logging:3.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_logging:scala-logging:3.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_logging:scala_logging:3.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:typesafe:scala-logging:3.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:typesafe:scala_logging:3.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala-logging:3.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala_logging:3.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:11:scala-logging:3.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:11:scala_logging:3.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-logging:11:3.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_logging:11:3.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:typesafe:11:3.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:11:3.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:11:11:3.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/scala-logging_2.11-3.9.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/scala-logging_2.11-3.9.0.jar"
        }
      ],
      "purl": "pkg:maven/com.typesafe.scala-logging/11@3.9.0",
      "type": "library",
      "version": "3.9.0"
    },
    {
      "bom-ref": "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@1.2.15?package-id=ac020410ea733dd0",
      "cpe": "cpe:2.3:a:FastInfoset:FastInfoset:1.2.15:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bb7b7ec0379982b97c62cd17465cb6d9155f68e8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.xml.fastinfoset",
      "licenses": [
        {
          "license": {
            "name": "http://www.opensource.org/licenses/apache2.0.php"
          }
        }
      ],
      "name": "FastInfoset",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastinfoset:FastInfoset:1.2.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:FastInfoset:1.2.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:FastInfoset:1.2.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xml:FastInfoset:1.2.15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/FastInfoset-1.2.15.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "FastInfoset"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.xml.fastinfoset"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/FastInfoset-1.2.15.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@1.2.15",
      "type": "library",
      "version": "1.2.15"
    },
    {
      "bom-ref": "pkg:maven/RoaringBitmap/RoaringBitmap@0.9.0?package-id=d623a4afd07e0e6f",
      "cpe": "cpe:2.3:a:RoaringBitmap:RoaringBitmap:0.9.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4cfebd5d429c2c7067b3e1f58ac99b5578244c7b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "RoaringBitmap",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/RoaringBitmap-0.9.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/RoaringBitmap-0.9.0.jar"
        }
      ],
      "purl": "pkg:maven/RoaringBitmap/RoaringBitmap@0.9.0",
      "type": "library",
      "version": "0.9.0"
    },
    {
      "bom-ref": "pkg:maven/net.minidev/accessors-smart@1.2?package-id=88aaac3734b64c0c",
      "cpe": "cpe:2.3:a:accessors-smart:accessors-smart:1.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c592b500269bfde36096641b01238a8350f8aa31"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.minidev",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "accessors-smart",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors-smart:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors_smart:accessors-smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors_smart:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors:accessors-smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:accessors-smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/accessors-smart-1.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "accessors-smart"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.minidev"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/accessors-smart-1.2.jar"
        }
      ],
      "purl": "pkg:maven/net.minidev/accessors-smart@1.2",
      "type": "library",
      "version": "1.2"
    },
    {
      "bom-ref": "pkg:maven/net.minidev/accessors-smart@1.2?package-id=ec480c1e79663a8c",
      "cpe": "cpe:2.3:a:accessors-smart:accessors-smart:1.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c592b500269bfde36096641b01238a8350f8aa31"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.minidev",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "accessors-smart",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors-smart:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors_smart:accessors-smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors_smart:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors:accessors-smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:accessors-smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/accessors-smart-1.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "accessors-smart"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.minidev"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/accessors-smart-1.2.jar"
        }
      ],
      "purl": "pkg:maven/net.minidev/accessors-smart@1.2",
      "type": "library",
      "version": "1.2"
    },
    {
      "bom-ref": "pkg:maven/net.minidev/accessors-smart@1.2?package-id=aec1c3ff9c9c4617",
      "cpe": "cpe:2.3:a:accessors-smart:accessors-smart:1.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c592b500269bfde36096641b01238a8350f8aa31"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.minidev",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "accessors-smart",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors-smart:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors_smart:accessors-smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors_smart:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors:accessors-smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:accessors-smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/accessors-smart-1.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "accessors-smart"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.minidev"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/accessors-smart-1.2.jar"
        }
      ],
      "purl": "pkg:maven/net.minidev/accessors-smart@1.2",
      "type": "library",
      "version": "1.2"
    },
    {
      "bom-ref": "pkg:maven/net.minidev/accessors-smart@1.2?package-id=14878ef977d60ef5",
      "cpe": "cpe:2.3:a:accessors-smart:accessors-smart:1.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c592b500269bfde36096641b01238a8350f8aa31"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.minidev",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "accessors-smart",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors-smart:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors_smart:accessors-smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors_smart:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors:accessors-smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:accessors:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:accessors-smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:accessors_smart:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/accessors-smart-1.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "accessors-smart"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.minidev"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/accessors-smart-1.2.jar"
        }
      ],
      "purl": "pkg:maven/net.minidev/accessors-smart@1.2",
      "type": "library",
      "version": "1.2"
    },
    {
      "bom-ref": "pkg:maven/com.sun/activation@1.1?package-id=ab911e02b463aacd",
      "cpe": "cpe:2.3:a:sun-microsystems\\,-inc-:activation:1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e6cb541461c2834bdea3eb920f1884d1eb508b50"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CDDL-1.0"
          }
        }
      ],
      "name": "activation",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun_microsystems\\,_inc_:activation:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:activation:activation:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:activation:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/activation-1.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/activation-1.1.jar"
        }
      ],
      "purl": "pkg:maven/com.sun/activation@1.1",
      "type": "library",
      "version": "1.1"
    },
    {
      "bom-ref": "pkg:maven/com.sun/activation@1.1.1?package-id=6e4bca39e1c6b46d",
      "cpe": "cpe:2.3:a:sun-microsystems\\,-inc-:activation:1.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "485de3a253e23f645037828c07f1d7f1af40763a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CDDL-1.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        }
      ],
      "name": "activation",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun_microsystems\\,_inc_:activation:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:activation:activation:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:activation:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/activation-1.1.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/activation-1.1.1.jar"
        }
      ],
      "purl": "pkg:maven/com.sun/activation@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.aether/aether-api@0.9.0.M2?package-id=d027029e1a5a22a5",
      "cpe": "cpe:2.3:a:aether-api:aether-api:0.9.0.M2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "97662c999c6b2fbf2ee50e814a34639c1c1d22de"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.aether",
      "licenses": [
        {
          "license": {
            "name": "http://www.eclipse.org/legal/epl-v10.html"
          }
        }
      ],
      "name": "aether-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-api:aether_api:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_api:aether-api:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_api:aether_api:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether-api:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether_api:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-api:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether-api:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether_api:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_api:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-api:api:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_api:api:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api:aether-api:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api:aether_api:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:api:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:api:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api:api:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-api-0.9.0.M2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aether-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.aether"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-api-0.9.0.M2.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.aether/aether-api@0.9.0.M2",
      "type": "library",
      "version": "0.9.0.M2"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.aether/aether-connector-file@0.9.0.M2?package-id=dc8aa96229d18b69",
      "cpe": "cpe:2.3:a:aether-connector-file:aether-connector-file:0.9.0.M2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "21608dd8b3853da69c4862fbaf9b35b326dc0ddc"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.aether",
      "licenses": [
        {
          "license": {
            "name": "http://www.eclipse.org/legal/epl-v10.html"
          }
        }
      ],
      "name": "aether-connector-file",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector-file:aether_connector_file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector_file:aether-connector-file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector_file:aether_connector_file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector:aether-connector-file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector:aether_connector_file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector:aether-connector-file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector:aether_connector_file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connector:aether-connector-file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connector:aether_connector_file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether-connector-file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether_connector_file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector-file:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether-connector-file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether_connector_file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector_file:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector-file:file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector_file:file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file:aether-connector-file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file:aether_connector_file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector:file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector:file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connector:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connector:file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file:file:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-connector-file-0.9.0.M2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aether-connector-file"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.aether"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-connector-file-0.9.0.M2.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.aether/aether-connector-file@0.9.0.M2",
      "type": "library",
      "version": "0.9.0.M2"
    },
    {
      "bom-ref": "pkg:maven/io.tesla.aether/aether-connector-okhttp@0.0.9?package-id=0d756ffb17f616b8",
      "cpe": "cpe:2.3:a:aether-connector-okhttp:aether-connector-okhttp:0.0.9:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a9cd24fe92272ad1f084d98cd7edeffcd9de720f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.tesla.aether",
      "name": "aether-connector-okhttp",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector-okhttp:aether_connector_okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector_okhttp:aether-connector-okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector_okhttp:aether_connector_okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector:aether-connector-okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector:aether_connector_okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector:aether-connector-okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector:aether_connector_okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector-okhttp:aether:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether-connector-okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether_connector_okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector_okhttp:aether:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla:aether-connector-okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla:aether_connector_okhttp:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-connector:aether:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_connector:aether:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla:aether:0.0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-connector-okhttp-0.0.9.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aether-connector-okhttp"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.tesla.aether"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-connector-okhttp-0.0.9.jar"
        }
      ],
      "purl": "pkg:maven/io.tesla.aether/aether-connector-okhttp@0.0.9",
      "type": "library",
      "version": "0.0.9"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.aether/aether-impl@0.9.0.M2?package-id=df192eee9580e67e",
      "cpe": "cpe:2.3:a:aether-impl:aether-impl:0.9.0.M2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "eab9a4baae8de96a24c04219236363d0ca73e8a9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.aether",
      "licenses": [
        {
          "license": {
            "name": "http://www.eclipse.org/legal/epl-v10.html"
          }
        }
      ],
      "name": "aether-impl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-impl:aether_impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_impl:aether-impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_impl:aether_impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether-impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether_impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-impl:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether-impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether_impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_impl:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-impl:impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_impl:impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:impl:aether-impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:impl:aether_impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:impl:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:impl:impl:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-impl-0.9.0.M2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aether-impl"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.aether"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-impl-0.9.0.M2.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.aether/aether-impl@0.9.0.M2",
      "type": "library",
      "version": "0.9.0.M2"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.aether/aether-spi@0.9.0.M2?package-id=7db92a350aa34ae4",
      "cpe": "cpe:2.3:a:aether-spi:aether-spi:0.9.0.M2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3647d00620a91360990c9680f29fbcc22d69c2ee"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.aether",
      "licenses": [
        {
          "license": {
            "name": "http://www.eclipse.org/legal/epl-v10.html"
          }
        }
      ],
      "name": "aether-spi",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-spi:aether_spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_spi:aether-spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_spi:aether_spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether-spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether_spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-spi:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether-spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether_spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_spi:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-spi:spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_spi:spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spi:aether-spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spi:aether_spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spi:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spi:spi:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-spi-0.9.0.M2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aether-spi"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.aether"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-spi-0.9.0.M2.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.aether/aether-spi@0.9.0.M2",
      "type": "library",
      "version": "0.9.0.M2"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.aether/aether-util@0.9.0.M2?package-id=1369510261f52ce7",
      "cpe": "cpe:2.3:a:aether-util:aether-util:0.9.0.M2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b957089deb654647da320ad7507b0a4b5ce23813"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.aether",
      "licenses": [
        {
          "license": {
            "name": "http://www.eclipse.org/legal/epl-v10.html"
          }
        }
      ],
      "name": "aether-util",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-util:aether_util:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_util:aether-util:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_util:aether_util:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether-util:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether_util:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-util:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether-util:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether_util:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_util:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether-util:util:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether_util:util:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:aether-util:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:aether_util:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:util:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:util:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:aether:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:util:0.9.0.M2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-util-0.9.0.M2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aether-util"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.aether"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aether-util-0.9.0.M2.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.aether/aether-util@0.9.0.M2",
      "type": "library",
      "version": "0.9.0.M2"
    },
    {
      "bom-ref": "pkg:maven/net.hydromatic/aggdesigner-algorithm@6.0?package-id=ee015b3503b1d534",
      "cpe": "cpe:2.3:a:aggdesigner-algorithm:aggdesigner-algorithm:6.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bd0cd7ad1e3791a8a0929df0dcdbffc02fd0bab4"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.hydromatic",
      "name": "aggdesigner-algorithm",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aggdesigner-algorithm:aggdesigner_algorithm:6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aggdesigner_algorithm:aggdesigner-algorithm:6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aggdesigner_algorithm:aggdesigner_algorithm:6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aggdesigner:aggdesigner-algorithm:6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aggdesigner:aggdesigner_algorithm:6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hydromatic:aggdesigner-algorithm:6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hydromatic:aggdesigner_algorithm:6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aggdesigner-algorithm-6.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aggdesigner-algorithm"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.hydromatic"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aggdesigner-algorithm-6.0.jar"
        }
      ],
      "purl": "pkg:maven/net.hydromatic/aggdesigner-algorithm@6.0",
      "type": "library",
      "version": "6.0"
    },
    {
      "bom-ref": "pkg:maven/io.airlift/aircompressor@0.21?package-id=48d2dc1f4e94dd66",
      "cpe": "cpe:2.3:a:aircompressor:aircompressor:0.21:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0d1efd839d539481952a9757834054239774f057"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.airlift",
      "licenses": [
        {
          "license": {
            "name": "Apache License 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "name": "aircompressor",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:airlift:aircompressor:0.21:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/aircompressor-0.21.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aircompressor"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.airlift"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/aircompressor-0.21.jar"
        }
      ],
      "purl": "pkg:maven/io.airlift/aircompressor@0.21",
      "type": "library",
      "version": "0.21"
    },
    {
      "bom-ref": "pkg:maven/com.github.rvesse/airline@2.8.4?package-id=8f950ae71f3924f7",
      "cpe": "cpe:2.3:a:airline:airline:2.8.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f6148c941e4ec2f314b285e6e4e995f61374aa2f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.github.rvesse",
      "name": "airline",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:airline:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rvesse:airline:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/airline-2.8.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "airline"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.github.rvesse"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/airline-2.8.4.jar"
        }
      ],
      "purl": "pkg:maven/com.github.rvesse/airline@2.8.4",
      "type": "library",
      "version": "2.8.4"
    },
    {
      "bom-ref": "pkg:maven/com.github.rvesse/airline-io@2.8.4?package-id=a2939c6c0b165363",
      "cpe": "cpe:2.3:a:airline-io:airline-io:2.8.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "502008366a98296ce95c62397b1cb7e06521a195"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.github.rvesse",
      "name": "airline-io",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:airline-io:airline_io:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:airline_io:airline-io:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:airline_io:airline_io:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:airline:airline-io:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:airline:airline_io:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:airline-io:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:airline_io:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rvesse:airline-io:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rvesse:airline_io:2.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/airline-io-2.8.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "airline-io"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.github.rvesse"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/airline-io-2.8.4.jar"
        }
      ],
      "purl": "pkg:maven/com.github.rvesse/airline-io@2.8.4",
      "type": "library",
      "version": "2.8.4"
    },
    {
      "bom-ref": "pkg:rpm/rhel/alsa-lib@1.2.9-1.el8?arch=x86_64&upstream=alsa-lib-1.2.9-1.el8.src.rpm&distro=rhel-8.9&package-id=30caa8dd787b1c30",
      "cpe": "cpe:2.3:a:alsa-lib:alsa-lib:1.2.9-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "alsa-lib",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alsa-lib:alsa_lib:1.2.9-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alsa_lib:alsa-lib:1.2.9-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alsa_lib:alsa_lib:1.2.9-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:alsa-lib:1.2.9-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:alsa_lib:1.2.9-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alsa:alsa-lib:1.2.9-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alsa:alsa_lib:1.2.9-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "1478147"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "alsa-lib-1.2.9-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/alsa-lib@1.2.9-1.el8?arch=x86_64&upstream=alsa-lib-1.2.9-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.2.9-1.el8"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/amazon-kinesis-client@1.14.4?package-id=3a02202a1ca244c3",
      "cpe": "cpe:2.3:a:amazon-kinesis-client:amazon-kinesis-client:1.14.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "526df0db4c22be3eb490dab2b4ef979032e3588d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "amazon-kinesis-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazon-kinesis-client:amazon_kinesis_client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazon_kinesis_client:amazon-kinesis-client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazon_kinesis_client:amazon_kinesis_client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazon-kinesis:amazon-kinesis-client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazon-kinesis:amazon_kinesis_client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazon_kinesis:amazon-kinesis-client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazon_kinesis:amazon_kinesis_client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:amazon-kinesis-client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:amazon_kinesis_client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazon:amazon-kinesis-client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazon:amazon_kinesis_client:1.14.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/amazon-kinesis-client-1.14.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "amazon-kinesis-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/amazon-kinesis-client-1.14.4.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/amazon-kinesis-client@1.14.4",
      "type": "library",
      "version": "1.14.4"
    },
    {
      "bom-ref": "pkg:maven/org.jetbrains.annotations/annotations@17.0.0?package-id=2632b651b770da79",
      "cpe": "cpe:2.3:a:annotations:annotations:17.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8ceead41f4e71821919dbdb7a9847608f1a938cb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetbrains:annotations:17.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/annotations-17.0.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/annotations-17.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.jetbrains.annotations/annotations@17.0.0",
      "type": "library",
      "version": "17.0.0"
    },
    {
      "bom-ref": "pkg:maven/antlr/antlr@2.7.7?package-id=3e52f929bd93b9f5",
      "cpe": "cpe:2.3:a:antlr:antlr:2.7.7:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "83cd2cd674a217ade95a4bb83a8a14f351f48bd0"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "antlr",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-single/antlr-2.7.7.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-single/antlr-2.7.7.jar"
        }
      ],
      "purl": "pkg:maven/antlr/antlr@2.7.7",
      "type": "library",
      "version": "2.7.7"
    },
    {
      "bom-ref": "pkg:maven/org.antlr/antlr-runtime@3.4?package-id=d5a1926b87258c59",
      "cpe": "cpe:2.3:a:antlr-runtime:antlr-runtime:3.4:*:*:*:*:*:*:*",
      "group": "org.antlr",
      "name": "antlr-runtime",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr-runtime:antlr_runtime:3.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr_runtime:antlr-runtime:3.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr_runtime:antlr_runtime:3.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr:antlr-runtime:3.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr:antlr_runtime:3.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jdbi-2.63.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "antlr-runtime"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.antlr"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jdbi-2.63.1.jar:org.antlr:antlr-runtime"
        }
      ],
      "purl": "pkg:maven/org.antlr/antlr-runtime@3.4",
      "type": "library",
      "version": "3.4"
    },
    {
      "bom-ref": "pkg:maven/org.antlr/antlr4-runtime@4.5.1?package-id=42893c3e666ed3a5",
      "cpe": "cpe:2.3:a:antlr4-runtime-osgi:antlr4-runtime:4.5.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "07d7288bbe0599b32b844971f270ed001a661357"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.antlr",
      "licenses": [
        {
          "license": {
            "name": "http://www.antlr.org/license.html"
          }
        }
      ],
      "name": "antlr4-runtime",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4-runtime-osgi:antlr4_runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4_runtime_osgi:antlr4-runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4_runtime_osgi:antlr4_runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4-runtime:antlr4-runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4-runtime:antlr4_runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4_runtime:antlr4-runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4_runtime:antlr4_runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4:antlr4-runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr4:antlr4_runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr:antlr4-runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:antlr:antlr4_runtime:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/antlr4-runtime-4.5.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "antlr4-runtime"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.antlr"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/antlr4-runtime-4.5.1.jar"
        }
      ],
      "purl": "pkg:maven/org.antlr/antlr4-runtime@4.5.1",
      "type": "library",
      "version": "4.5.1"
    },
    {
      "bom-ref": "pkg:maven/aopalliance/aopalliance@1.0?package-id=6c89fdbe91494c90",
      "cpe": "cpe:2.3:a:aopalliance:aopalliance:1.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "aopalliance",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/aopalliance-1.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/aopalliance-1.0.jar"
        }
      ],
      "purl": "pkg:maven/aopalliance/aopalliance@1.0",
      "type": "library",
      "version": "1.0"
    },
    {
      "bom-ref": "pkg:maven/aopalliance/aopalliance@1.0?package-id=dbe97d014a81b842",
      "cpe": "cpe:2.3:a:aopalliance:aopalliance:1.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "aopalliance",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aopalliance-1.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aopalliance-1.0.jar"
        }
      ],
      "purl": "pkg:maven/aopalliance/aopalliance@1.0",
      "type": "library",
      "version": "1.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.api/api@1.0.0-M20?package-id=d92a94a75f1079d0",
      "cpe": "cpe:2.3:a:apache:directory:1.0.0-M20:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5e6486ffa3125ba44dc410ead166e1d6ba8ac76d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:asn1:1.0.0-M20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api:1.0.0-M20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/api-asn1-api-1.0.0-M20.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/api-asn1-api-1.0.0-M20.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.api/api@1.0.0-M20",
      "type": "library",
      "version": "1.0.0-M20"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.api/api@1.0.0-M20?package-id=5551641c24c047dd",
      "cpe": "cpe:2.3:a:apache:directory:1.0.0-M20:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5e6486ffa3125ba44dc410ead166e1d6ba8ac76d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:asn1:1.0.0-M20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api:1.0.0-M20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/api-asn1-api-1.0.0-M20.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/api-asn1-api-1.0.0-M20.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.api/api@1.0.0-M20",
      "type": "library",
      "version": "1.0.0-M20"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.api/api@1.0.0-M20?package-id=036cb8662a476d17",
      "cpe": "cpe:2.3:a:apache:directory:1.0.0-M20:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5e6486ffa3125ba44dc410ead166e1d6ba8ac76d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:asn1:1.0.0-M20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api:1.0.0-M20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/api-asn1-api-1.0.0-M20.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/api-asn1-api-1.0.0-M20.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.api/api@1.0.0-M20",
      "type": "library",
      "version": "1.0.0-M20"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.api/api@1.0.0-M20?package-id=8815f835556abdb8",
      "cpe": "cpe:2.3:a:apache:directory:1.0.0-M20:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5e6486ffa3125ba44dc410ead166e1d6ba8ac76d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:asn1:1.0.0-M20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api:1.0.0-M20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/api-asn1-api-1.0.0-M20.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/api-asn1-api-1.0.0-M20.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.api/api@1.0.0-M20",
      "type": "library",
      "version": "1.0.0-M20"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?package-id=1b885b0f57e0e757",
      "cpe": "cpe:2.3:a:apache:api-util:1.0.0-M20:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a871abf060b3cf83fc6dc4d7e3d151fce50ac3cb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.directory.api",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "api-util",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api_util:1.0.0-M20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:util:1.0.0-M20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api:1.0.0-M20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/api-util-1.0.0-M20.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "api-util"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.directory.api"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/api-util-1.0.0-M20.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20",
      "type": "library",
      "version": "1.0.0-M20"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.api/api-util@1.0.3?package-id=a636b7c66a963160",
      "cpe": "cpe:2.3:a:apache:api-util:1.0.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ce50ea3b0120727a1e3d176d38bb607e8463a502"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.directory.api",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "api-util",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api_util:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:util:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/api-util-1.0.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "api-util"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.directory.api"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/api-util-1.0.3.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.api/api-util@1.0.3",
      "type": "library",
      "version": "1.0.3"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.api/api-util@1.0.3?package-id=bc8a9f2ade4fd796",
      "cpe": "cpe:2.3:a:apache:api-util:1.0.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ce50ea3b0120727a1e3d176d38bb607e8463a502"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.directory.api",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "api-util",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api_util:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:util:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/api-util-1.0.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "api-util"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.directory.api"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/api-util-1.0.3.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.api/api-util@1.0.3",
      "type": "library",
      "version": "1.0.3"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.api/api-util@1.0.3?package-id=5ad51708b0ea55ec",
      "cpe": "cpe:2.3:a:apache:api-util:1.0.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ce50ea3b0120727a1e3d176d38bb607e8463a502"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.directory.api",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "api-util",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api_util:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:util:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/api-util-1.0.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "api-util"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.directory.api"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/api-util-1.0.3.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.api/api-util@1.0.3",
      "type": "library",
      "version": "1.0.3"
    },
    {
      "bom-ref": "pkg:maven/org.objectweb.asm/asm@9.3?package-id=60aabd775c5b3b35",
      "cpe": "cpe:2.3:a:objectweb:asm:9.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8e6300ef51c1d801a7ed62d07cd221aca3a90640"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt"
          }
        }
      ],
      "name": "asm",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/asm-9.3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/asm-9.3.jar"
        }
      ],
      "purl": "pkg:maven/org.objectweb.asm/asm@9.3",
      "type": "library",
      "version": "9.3"
    },
    {
      "bom-ref": "pkg:maven/org.objectweb.asm/asm@9.3?package-id=bde7df76536e76be",
      "cpe": "cpe:2.3:a:objectweb:asm:9.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8e6300ef51c1d801a7ed62d07cd221aca3a90640"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt"
          }
        }
      ],
      "name": "asm",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/asm-9.3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/asm-9.3.jar"
        }
      ],
      "purl": "pkg:maven/org.objectweb.asm/asm@9.3",
      "type": "library",
      "version": "9.3"
    },
    {
      "bom-ref": "pkg:maven/org.objectweb.asm/asm@9.3?package-id=b7da0d85945d982b",
      "cpe": "cpe:2.3:a:objectweb:asm:9.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8e6300ef51c1d801a7ed62d07cd221aca3a90640"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt"
          }
        }
      ],
      "name": "asm",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/asm-9.3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/asm-9.3.jar"
        }
      ],
      "purl": "pkg:maven/org.objectweb.asm/asm@9.3",
      "type": "library",
      "version": "9.3"
    },
    {
      "bom-ref": "pkg:maven/org.objectweb.asm/asm@9.3?package-id=8b845179adbb3c1e",
      "cpe": "cpe:2.3:a:objectweb:asm:9.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8e6300ef51c1d801a7ed62d07cd221aca3a90640"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt"
          }
        }
      ],
      "name": "asm",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/asm-9.3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/asm-9.3.jar"
        }
      ],
      "purl": "pkg:maven/org.objectweb.asm/asm@9.3",
      "type": "library",
      "version": "9.3"
    },
    {
      "bom-ref": "pkg:maven/org.objectweb.asm.tree.analysis/asm-analysis@9.3?package-id=685a27ad7e5d44ec",
      "cpe": "cpe:2.3:a:asm-analysis:asm-analysis:9.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4b071f211b37c38e0e9f5998550197c8593f6ad8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt"
          }
        }
      ],
      "name": "asm-analysis",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-analysis:asm_analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_analysis:asm-analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_analysis:asm_analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm-analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm_analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:analysis:asm-analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:analysis:asm_analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-analysis:analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_analysis:analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:analysis:analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-analysis:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_analysis:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:asm-analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:asm_analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-analysis:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm-analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm_analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_analysis:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:analysis:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:analysis:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:analysis:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/asm-analysis-9.3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/asm-analysis-9.3.jar"
        }
      ],
      "purl": "pkg:maven/org.objectweb.asm.tree.analysis/asm-analysis@9.3",
      "type": "library",
      "version": "9.3"
    },
    {
      "bom-ref": "pkg:maven/org.objectweb.asm.commons/asm-commons@9.3?package-id=08136d7b1cbd8669",
      "cpe": "cpe:2.3:a:asm-commons:asm-commons:9.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1f2a432d1212f5c352ae607d7b61dcae20c20af5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt"
          }
        }
      ],
      "name": "asm-commons",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-commons:asm_commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_commons:asm-commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_commons:asm_commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm-commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm_commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-commons:commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_commons:commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:asm-commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:asm_commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-commons:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm-commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm_commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_commons:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:commons:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/asm-commons-9.3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/asm-commons-9.3.jar"
        }
      ],
      "purl": "pkg:maven/org.objectweb.asm.commons/asm-commons@9.3",
      "type": "library",
      "version": "9.3"
    },
    {
      "bom-ref": "pkg:maven/org.objectweb.asm.tree/asm-tree@9.3?package-id=867ab79ad388a643",
      "cpe": "cpe:2.3:a:objectweb:asm-tree:9.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "78d2ecd61318b5a58cd04fb237636c0e86b77d97"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt"
          }
        }
      ],
      "name": "asm-tree",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm_tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-tree:asm-tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-tree:asm_tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_tree:asm-tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_tree:asm_tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-tree:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_tree:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objectweb:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:asm-tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:asm_tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm-tree:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm-tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm_tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm_tree:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:tree:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tree:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asm:asm:9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/asm-tree-9.3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/asm-tree-9.3.jar"
        }
      ],
      "purl": "pkg:maven/org.objectweb.asm.tree/asm-tree@9.3",
      "type": "library",
      "version": "9.3"
    },
    {
      "bom-ref": "pkg:maven/org.asynchttpclient/async-http-client@2.5.3?package-id=c66a576c2f9cd2f2",
      "cpe": "cpe:2.3:a:async-http-client:async-http-client:2.5.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "507505543772f54342d6ee855fa8f459d4bc6a11"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.asynchttpclient",
      "name": "async-http-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async-http-client:async_http_client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http_client:async-http-client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http_client:async_http_client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asynchttpclient:async-http-client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asynchttpclient:async_http_client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async-http:async-http-client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async-http:async_http_client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http:async-http-client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http:async_http_client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async:async-http-client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async:async_http_client:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/async-http-client-2.5.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "async-http-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.asynchttpclient"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/async-http-client-2.5.3.jar"
        }
      ],
      "purl": "pkg:maven/org.asynchttpclient/async-http-client@2.5.3",
      "type": "library",
      "version": "2.5.3"
    },
    {
      "bom-ref": "pkg:maven/org.asynchttpclient/async-http-client-netty-utils@2.5.3?package-id=f01c7c90686aabd2",
      "cpe": "cpe:2.3:a:async-http-client-netty-utils:async-http-client-netty-utils:2.5.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "71abe1781fa182d92e97bf60450026cc72984ac2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.asynchttpclient",
      "name": "async-http-client-netty-utils",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async-http-client-netty-utils:async_http_client_netty_utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http_client_netty_utils:async-http-client-netty-utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http_client_netty_utils:async_http_client_netty_utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async-http-client-netty:async-http-client-netty-utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async-http-client-netty:async_http_client_netty_utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http_client_netty:async-http-client-netty-utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http_client_netty:async_http_client_netty_utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async-http-client:async-http-client-netty-utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async-http-client:async_http_client_netty_utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http_client:async-http-client-netty-utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http_client:async_http_client_netty_utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asynchttpclient:async-http-client-netty-utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:asynchttpclient:async_http_client_netty_utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async-http:async-http-client-netty-utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async-http:async_http_client_netty_utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http:async-http-client-netty-utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async_http:async_http_client_netty_utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async:async-http-client-netty-utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:async:async_http_client_netty_utils:2.5.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/async-http-client-netty-utils-2.5.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "async-http-client-netty-utils"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.asynchttpclient"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/async-http-client-netty-utils-2.5.3.jar"
        }
      ],
      "purl": "pkg:maven/org.asynchttpclient/async-http-client-netty-utils@2.5.3",
      "type": "library",
      "version": "2.5.3"
    },
    {
      "bom-ref": "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?package-id=bcceb29d50c4c1a2",
      "cpe": "cpe:2.3:a:apache:audience-annotations:0.12.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e0efa60318229590103e31c69ebdaae56d903644"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.yetus",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "audience-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:audience_annotations:0.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/audience-annotations-0.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "audience-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.yetus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/audience-annotations-0.12.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.yetus/audience-annotations@0.12.0",
      "type": "library",
      "version": "0.12.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.yetus/audience-annotations@0.5.0?package-id=b1300daaf1e0a66e",
      "cpe": "cpe:2.3:a:apache:audience-annotations:0.5.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "55762d3191a8d6610ef46d11e8cb70c7667342a3"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.yetus",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "audience-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:audience_annotations:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/audience-annotations-0.5.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "audience-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.yetus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/audience-annotations-0.5.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.yetus/audience-annotations@0.5.0",
      "type": "library",
      "version": "0.5.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/audit-libs@3.0.7-5.el8?arch=x86_64&upstream=audit-3.0.7-5.el8.src.rpm&distro=rhel-8.9&package-id=ede952ac0c8cd373",
      "cpe": "cpe:2.3:a:audit-libs:audit-libs:3.0.7-5.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "audit-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:audit-libs:audit_libs:3.0.7-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:audit_libs:audit-libs:3.0.7-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:audit_libs:audit_libs:3.0.7-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:audit-libs:3.0.7-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:audit_libs:3.0.7-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:audit:audit-libs:3.0.7-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:audit:audit_libs:3.0.7-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "5.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "308490"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "audit-3.0.7-5.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/audit-libs@3.0.7-5.el8?arch=x86_64&upstream=audit-3.0.7-5.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.0.7-5.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/avahi-libs@0.7-21.el8_9.1?arch=x86_64&upstream=avahi-0.7-21.el8_9.1.src.rpm&distro=rhel-8.9&package-id=ab676c7dfbe04ad2",
      "cpe": "cpe:2.3:a:avahi-libs:avahi-libs:0.7-21.el8_9.1:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "avahi-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:avahi-libs:avahi_libs:0.7-21.el8_9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:avahi_libs:avahi-libs:0.7-21.el8_9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:avahi_libs:avahi_libs:0.7-21.el8_9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:avahi-libs:0.7-21.el8_9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:avahi_libs:0.7-21.el8_9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:avahi:avahi-libs:0.7-21.el8_9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:avahi:avahi_libs:0.7-21.el8_9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "21.el8_9.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "155912"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "avahi-0.7-21.el8_9.1.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/avahi-libs@0.7-21.el8_9.1?arch=x86_64&upstream=avahi-0.7-21.el8_9.1.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "0.7-21.el8_9.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.calcite.avatica/avatica-core@1.17.0?package-id=3c6af4e1bf0d7d97",
      "cpe": "cpe:2.3:a:apache:avatica-core:1.17.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d69e7e0f02610af0f432e5241d7a202ab48bf3cb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "avatica-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avatica_core:1.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avatica:1.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:calcite:1.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/avatica-core-1.17.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/avatica-core-1.17.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.calcite.avatica/avatica-core@1.17.0",
      "type": "library",
      "version": "1.17.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.calcite.avatica/avatica-metrics@1.17.0?package-id=f67b2f6e401a2a98",
      "cpe": "cpe:2.3:a:apache:avatica-metrics:1.17.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c1c778095d3069504b17155c468169075c646e75"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "avatica-metrics",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avatica_metrics:1.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avatica:1.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:calcite:1.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/avatica-metrics-1.17.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/avatica-metrics-1.17.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.calcite.avatica/avatica-metrics@1.17.0",
      "type": "library",
      "version": "1.17.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.calcite.avatica/avatica-server@1.17.0?package-id=794907389cc5eaa8",
      "cpe": "cpe:2.3:a:apache:avatica-server:1.17.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cadc51ec46ac0586c94ec1740f1dcb200ef244ac"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "avatica-server",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avatica_server:1.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avatica:1.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:calcite:1.17.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/avatica-server-1.17.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/avatica-server-1.17.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.calcite.avatica/avatica-server@1.17.0",
      "type": "library",
      "version": "1.17.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.avro/avro@1.7.4?package-id=fc4afedb69e141cc",
      "cpe": "cpe:2.3:a:apache:avro:1.7.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "416e7030879814f52845b97f04bb50ecd1cef372"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.avro",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "avro",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/avro-1.7.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "avro"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.avro"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/avro-1.7.4.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.avro/avro@1.7.4",
      "type": "library",
      "version": "1.7.4"
    },
    {
      "bom-ref": "pkg:maven/org.apache.avro/avro@1.9.2?package-id=47c48ed4a5ca84ab",
      "cpe": "cpe:2.3:a:apache:avro:1.9.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7e67193b94e45d32277ac480ea86421fd3976424"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.avro",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "avro",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/avro-1.9.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "avro"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.avro"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/avro-1.9.2.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.avro/avro@1.9.2",
      "type": "library",
      "version": "1.9.2"
    },
    {
      "bom-ref": "pkg:maven/org.apache.avro/avro@1.9.2?package-id=562ef1ff3fe41849",
      "cpe": "cpe:2.3:a:apache:avro:1.9.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7e67193b94e45d32277ac480ea86421fd3976424"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.avro",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "avro",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/avro-1.9.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "avro"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.avro"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/avro-1.9.2.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.avro/avro@1.9.2",
      "type": "library",
      "version": "1.9.2"
    },
    {
      "bom-ref": "pkg:maven/org.apache.avro/avro@1.9.2?package-id=edac9fa6d3570a17",
      "cpe": "cpe:2.3:a:apache:avro:1.9.2:*:*:*:*:*:*:*",
      "group": "org.apache.avro",
      "name": "avro",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "avro"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.avro"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:org.apache.avro:avro"
        }
      ],
      "purl": "pkg:maven/org.apache.avro/avro@1.9.2",
      "type": "library",
      "version": "1.9.2"
    },
    {
      "bom-ref": "pkg:maven/org.apache.avro/avro-ipc@1.9.2?package-id=8a42fd795b3c55dd",
      "cpe": "cpe:2.3:a:apache:avro-ipc:1.9.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2f773b34e4085e7912611e558ed78b1661a52049"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.avro",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "avro-ipc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avro_ipc:1.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avro:1.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/avro-ipc-1.9.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "avro-ipc"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.avro"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/avro-ipc-1.9.2.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.avro/avro-ipc@1.9.2",
      "type": "library",
      "version": "1.9.2"
    },
    {
      "bom-ref": "pkg:maven/org.apache.avro/avro-ipc-jetty@1.9.2?package-id=8fa5392fe13970a7",
      "cpe": "cpe:2.3:a:apache:avro-ipc-jetty:1.9.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f93d9e827d5c299076281548d0e5ea420195d4be"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.avro",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "avro-ipc-jetty",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avro_ipc_jetty:1.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avro:1.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/avro-ipc-jetty-1.9.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "avro-ipc-jetty"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.avro"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/avro-ipc-jetty-1.9.2.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.avro/avro-ipc-jetty@1.9.2",
      "type": "library",
      "version": "1.9.2"
    },
    {
      "bom-ref": "pkg:maven/org.apache.avro/avro-mapred@1.9.2?package-id=764fa716bde687d3",
      "cpe": "cpe:2.3:a:apache:avro-mapred:1.9.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "54c4f49051c56ed52a510d4460d1091c287f633f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.avro",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "avro-mapred",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avro_mapred:1.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:avro:1.9.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/avro-mapred-1.9.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "avro-mapred"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.avro"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/avro-mapred-1.9.2.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.avro/avro-mapred@1.9.2",
      "type": "library",
      "version": "1.9.2"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.317?package-id=092a07157942cc26",
      "cpe": "cpe:2.3:a:aws-java-sdk-core:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ae34f9c7d3676f214ab3e2b9c263cb7161d9b2f2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-core:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_core:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_core:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/aws-java-sdk-core-1.12.317.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/aws-java-sdk-core-1.12.317.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.317",
      "type": "library",
      "version": "1.12.317"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.317?package-id=e2a6bf89a165cf5d",
      "cpe": "cpe:2.3:a:aws-java-sdk-core:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ae34f9c7d3676f214ab3e2b9c263cb7161d9b2f2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-core:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_core:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_core:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/aws-java-sdk-core-1.12.317.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/aws-java-sdk-core-1.12.317.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.317",
      "type": "library",
      "version": "1.12.317"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.317?package-id=b326ebcec1f6ee37",
      "cpe": "cpe:2.3:a:aws-java-sdk-core:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ae34f9c7d3676f214ab3e2b9c263cb7161d9b2f2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-core:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_core:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_core:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/aws-java-sdk-core-1.12.317.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/aws-java-sdk-core-1.12.317.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.317",
      "type": "library",
      "version": "1.12.317"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.317?package-id=f51f2825d5c9b08b",
      "cpe": "cpe:2.3:a:aws-java-sdk-core:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ae34f9c7d3676f214ab3e2b9c263cb7161d9b2f2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-core:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_core:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_core:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_core:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aws-java-sdk-core-1.12.317.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aws-java-sdk-core-1.12.317.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-core@1.12.317",
      "type": "library",
      "version": "1.12.317"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-ec2@1.12.317?package-id=94299cd765c0e886",
      "cpe": "cpe:2.3:a:aws-java-sdk-ec2:aws-java-sdk-ec2:1.12.317:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9df29e6ba91d4e0f5b8f9f1cf21da876f03162a6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-ec2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-ec2:aws_java_sdk_ec2:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_ec2:aws-java-sdk-ec2:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_ec2:aws_java_sdk_ec2:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-ec2:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_ec2:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-ec2:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_ec2:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-ec2:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_ec2:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-ec2:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_ec2:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-ec2:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_ec2:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-ec2:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_ec2:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aws-java-sdk-ec2-1.12.317.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-ec2"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aws-java-sdk-ec2-1.12.317.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-ec2@1.12.317",
      "type": "library",
      "version": "1.12.317"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-kinesis@1.12.317?package-id=df79efdd36327838",
      "cpe": "cpe:2.3:a:aws-java-sdk-kinesis:aws-java-sdk-kinesis:1.12.317:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "39f41fc06ec5793d75dbf53d0ee67893b2f1b7d5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-kinesis",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-kinesis:aws_java_sdk_kinesis:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_kinesis:aws-java-sdk-kinesis:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_kinesis:aws_java_sdk_kinesis:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-kinesis:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_kinesis:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-kinesis:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_kinesis:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-kinesis:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_kinesis:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-kinesis:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_kinesis:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-kinesis:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_kinesis:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-kinesis:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_kinesis:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/aws-java-sdk-kinesis-1.12.317.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-kinesis"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/aws-java-sdk-kinesis-1.12.317.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-kinesis@1.12.317",
      "type": "library",
      "version": "1.12.317"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-kms@1.12.317?package-id=a8b470a4d7bdf350",
      "cpe": "cpe:2.3:a:aws-java-sdk-kms:aws-java-sdk-kms:1.12.317:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3a8bebb62712c7e353216c778d09d6f0c72436b9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-kms",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-kms:aws_java_sdk_kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_kms:aws-java-sdk-kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_kms:aws_java_sdk_kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/aws-java-sdk-kms-1.12.317.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-kms"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/aws-java-sdk-kms-1.12.317.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-kms@1.12.317",
      "type": "library",
      "version": "1.12.317"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-kms@1.12.317?package-id=95cb798e78fb1d44",
      "cpe": "cpe:2.3:a:aws-java-sdk-kms:aws-java-sdk-kms:1.12.317:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3a8bebb62712c7e353216c778d09d6f0c72436b9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-kms",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-kms:aws_java_sdk_kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_kms:aws-java-sdk-kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_kms:aws_java_sdk_kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_kms:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aws-java-sdk-kms-1.12.317.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-kms"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aws-java-sdk-kms-1.12.317.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-kms@1.12.317",
      "type": "library",
      "version": "1.12.317"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-rds@1.12.317?package-id=f10f4a870ef28ebc",
      "cpe": "cpe:2.3:a:aws-java-sdk-rds:aws-java-sdk-rds:1.12.317:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9afc371646eb566ba5a557494e42d7a8cb15111a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-rds",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-rds:aws_java_sdk_rds:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_rds:aws-java-sdk-rds:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_rds:aws_java_sdk_rds:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-rds:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_rds:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-rds:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_rds:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-rds:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_rds:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-rds:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_rds:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-rds:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_rds:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-rds:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_rds:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/aws-java-sdk-rds-1.12.317.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-rds"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/aws-java-sdk-rds-1.12.317.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-rds@1.12.317",
      "type": "library",
      "version": "1.12.317"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-s3@1.12.317?package-id=73878f61bdb2d2ec",
      "cpe": "cpe:2.3:a:aws-java-sdk-s3:aws-java-sdk-s3:1.12.317:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3a6e804b708fa5458dc28be437ec6ab2e31f2c05"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-s3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-s3:aws_java_sdk_s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_s3:aws-java-sdk-s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_s3:aws_java_sdk_s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/aws-java-sdk-s3-1.12.317.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-s3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/aws-java-sdk-s3-1.12.317.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-s3@1.12.317",
      "type": "library",
      "version": "1.12.317"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-s3@1.12.317?package-id=8271a85803bff43a",
      "cpe": "cpe:2.3:a:aws-java-sdk-s3:aws-java-sdk-s3:1.12.317:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3a6e804b708fa5458dc28be437ec6ab2e31f2c05"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-s3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-s3:aws_java_sdk_s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_s3:aws-java-sdk-s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_s3:aws_java_sdk_s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_s3:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aws-java-sdk-s3-1.12.317.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-s3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aws-java-sdk-s3-1.12.317.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-s3@1.12.317",
      "type": "library",
      "version": "1.12.317"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-sts@1.12.317?package-id=6f22417ede5e2786",
      "cpe": "cpe:2.3:a:aws-java-sdk-sts:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "73102a5d256eb8d20e838dfd03cb23acc11b8397"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-sts",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-sts:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_sts:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_sts:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/aws-java-sdk-sts-1.12.317.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-sts"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/aws-java-sdk-sts-1.12.317.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-sts@1.12.317",
      "type": "library",
      "version": "1.12.317"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-sts@1.12.317?package-id=a874be0465c96262",
      "cpe": "cpe:2.3:a:aws-java-sdk-sts:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "73102a5d256eb8d20e838dfd03cb23acc11b8397"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-sts",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-sts:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_sts:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_sts:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/aws-java-sdk-sts-1.12.317.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-sts"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/aws-java-sdk-sts-1.12.317.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-sts@1.12.317",
      "type": "library",
      "version": "1.12.317"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/aws-java-sdk-sts@1.12.317?package-id=d1e28c2d20df676b",
      "cpe": "cpe:2.3:a:aws-java-sdk-sts:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "73102a5d256eb8d20e838dfd03cb23acc11b8397"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "name": "aws-java-sdk-sts",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk-sts:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_sts:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk_sts:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java-sdk:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java_sdk:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws-java:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws_java:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws-java-sdk-sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_java_sdk_sts:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/aws-java-sdk-sts-1.12.317.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "aws-java-sdk-sts"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/aws-java-sdk-sts-1.12.317.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/aws-java-sdk-sts@1.12.317",
      "type": "library",
      "version": "1.12.317"
    },
    {
      "bom-ref": "pkg:maven/com.microsoft.azure/azure-keyvault-core@1.0.0?package-id=95d0de0c9caaca54",
      "cpe": "cpe:2.3:a:azure-keyvault-core:azure-keyvault-core:1.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e89dd5e621e21b753096ec6a03f203c01482c612"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.microsoft.azure",
      "licenses": [
        {
          "license": {
            "name": "The MIT License (MIT)",
            "url": "http://opensource.org/licenses/MIT"
          }
        }
      ],
      "name": "azure-keyvault-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure-keyvault-core:azure_keyvault_core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure_keyvault_core:azure-keyvault-core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure_keyvault_core:azure_keyvault_core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure-keyvault:azure-keyvault-core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure-keyvault:azure_keyvault_core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure_keyvault:azure-keyvault-core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure_keyvault:azure_keyvault_core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft:azure-keyvault-core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft:azure_keyvault_core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure-keyvault-core:azure:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure:azure-keyvault-core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure:azure_keyvault_core:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure_keyvault_core:azure:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure-keyvault:azure:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure_keyvault:azure:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft:azure:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure:azure:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/azure-keyvault-core-1.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "azure-keyvault-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.microsoft.azure"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/azure-keyvault-core-1.0.0.jar"
        }
      ],
      "purl": "pkg:maven/com.microsoft.azure/azure-keyvault-core@1.0.0",
      "type": "library",
      "version": "1.0.0"
    },
    {
      "bom-ref": "pkg:maven/com.microsoft.azure/azure-storage@8.6.0?package-id=00f705a850df0166",
      "cpe": "cpe:2.3:a:azure-storage:azure-storage:8.6.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2386c73fbdb8145979a339d7342293ec08c17ee9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.microsoft.azure",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "azure-storage",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure-storage:azure_storage:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure_storage:azure-storage:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure_storage:azure_storage:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft:azure-storage:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft:azure_storage:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure-storage:azure:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure:azure-storage:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure:azure_storage:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure_storage:azure:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:microsoft:azure:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:azure:azure:8.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/azure-storage-8.6.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "azure-storage"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.microsoft.azure"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/azure-storage-8.6.0.jar"
        }
      ],
      "purl": "pkg:maven/com.microsoft.azure/azure-storage@8.6.0",
      "type": "library",
      "version": "8.6.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/basesystem@11-5.el8?arch=noarch&upstream=basesystem-11-5.el8.src.rpm&distro=rhel-8.9&package-id=f189342fc7bcda17",
      "cpe": "cpe:2.3:a:basesystem:basesystem:11-5.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "basesystem",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:basesystem:11-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "5.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "0"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "basesystem-11-5.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/basesystem@11-5.el8?arch=noarch&upstream=basesystem-11-5.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "11-5.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/bash@4.4.20-4.el8_6?arch=x86_64&upstream=bash-4.4.20-4.el8_6.src.rpm&distro=rhel-8.9&package-id=74d5c6be5ad93593",
      "cpe": "cpe:2.3:a:redhat:bash:4.4.20-4.el8_6:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+"
          }
        }
      ],
      "name": "bash",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bash:bash:4.4.20-4.el8_6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "4.el8_6"
        },
        {
          "name": "syft:metadata:size",
          "value": "6861444"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "bash-4.4.20-4.el8_6.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/bash@4.4.20-4.el8_6?arch=x86_64&upstream=bash-4.4.20-4.el8_6.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "4.4.20-4.el8_6"
    },
    {
      "bom-ref": "pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.66?package-id=44ceb4635296da98",
      "cpe": "cpe:2.3:a:bouncycastle-org:bcpkix-jdk15on:1.66:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "86cca2c1a32775abe92316d9628b7ee50b6f19ad"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "bcpkix-jdk15on",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle-org:bcpkix_jdk15on:1.66:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle_org:bcpkix-jdk15on:1.66:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle_org:bcpkix_jdk15on:1.66:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcpkix-jdk15on:bcpkix-jdk15on:1.66:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcpkix-jdk15on:bcpkix_jdk15on:1.66:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcpkix_jdk15on:bcpkix-jdk15on:1.66:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcpkix_jdk15on:bcpkix_jdk15on:1.66:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle:bcpkix-jdk15on:1.66:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle:bcpkix_jdk15on:1.66:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcpkix:bcpkix-jdk15on:1.66:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcpkix:bcpkix_jdk15on:1.66:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/bcpkix-jdk15on-1.66.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/bcpkix-jdk15on-1.66.jar"
        }
      ],
      "purl": "pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.66",
      "type": "library",
      "version": "1.66"
    },
    {
      "bom-ref": "pkg:maven/org.bouncycastle/bcprov-ext-jdk15on@1.68?package-id=b6b2bb60e97e2394",
      "cpe": "cpe:2.3:a:bcprov-ext-jdk15on:bcprov-ext-jdk15on:1.68:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d25fd4c83ea5e4d28f5bc25ddc06bde1fd148956"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "bcprov-ext-jdk15on",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov-ext-jdk15on:bcprov_ext_jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov_ext_jdk15on:bcprov-ext-jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov_ext_jdk15on:bcprov_ext_jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle-org:bcprov-ext-jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle-org:bcprov_ext_jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle_org:bcprov-ext-jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle_org:bcprov_ext_jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle:bcprov-ext-jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle:bcprov_ext_jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov-ext:bcprov-ext-jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov-ext:bcprov_ext_jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov_ext:bcprov-ext-jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov_ext:bcprov_ext_jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov:bcprov-ext-jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov:bcprov_ext_jdk15on:1.68:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/bcprov-ext-jdk15on-1.68.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/bcprov-ext-jdk15on-1.68.jar"
        }
      ],
      "purl": "pkg:maven/org.bouncycastle/bcprov-ext-jdk15on@1.68",
      "type": "library",
      "version": "1.68"
    },
    {
      "bom-ref": "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.69?package-id=dda35f6a3edd5d5b",
      "cpe": "cpe:2.3:a:bouncycastle-org:bcprov-jdk15on:1.69:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "91e1628251cf3ca90093ce9d0fe67e5b7dab3850"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "bcprov-jdk15on",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle-org:bcprov_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle_org:bcprov-jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle_org:bcprov_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov-jdk15on:bcprov-jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov-jdk15on:bcprov_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov_jdk15on:bcprov-jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov_jdk15on:bcprov_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle:bcprov-jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bouncycastle:bcprov_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov:bcprov-jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bcprov:bcprov_jdk15on:1.69:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/bcprov-jdk15on-1.69.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/bcprov-jdk15on-1.69.jar"
        }
      ],
      "purl": "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.69",
      "type": "library",
      "version": "1.69"
    },
    {
      "bom-ref": "pkg:rpm/rhel/brotli@1.0.6-3.el8?arch=x86_64&upstream=brotli-1.0.6-3.el8.src.rpm&distro=rhel-8.9&package-id=ff462a14a490c78a",
      "cpe": "cpe:2.3:a:brotli:brotli:1.0.6-3.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "brotli",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:brotli:1.0.6-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "1521892"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "brotli-1.0.6-3.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/brotli@1.0.6-3.el8?arch=x86_64&upstream=brotli-1.0.6-3.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.0.6-3.el8"
    },
    {
      "bom-ref": "pkg:maven/com.github.vladimir-bukhtoyarov/bucket4j-core@4.10.0?package-id=33678628a4232879",
      "cpe": "cpe:2.3:a:vladimir-bukhtoyarov:bucket4j-core:4.10.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "beb36c663ec78daf291d3a573c809003d557e9b2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.github.vladimir-bukhtoyarov",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "bucket4j-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir-bukhtoyarov:bucket4j_core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir_bukhtoyarov:bucket4j-core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir_bukhtoyarov:bucket4j_core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir-bukhtoyarov:bucket4j:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir_bukhtoyarov:bucket4j:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j-core:bucket4j-core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j-core:bucket4j_core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j_core:bucket4j-core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j_core:bucket4j_core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir-bukhtoyarov:core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir_bukhtoyarov:core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j-core:bucket4j:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j:bucket4j-core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j:bucket4j_core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j_core:bucket4j:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir:bucket4j-core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir:bucket4j_core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:bucket4j-core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:bucket4j_core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j-core:core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j_core:core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:bucket4j-core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:bucket4j_core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j:bucket4j:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir:bucket4j:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:bucket4j:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bucket4j:core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:bucket4j:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vladimir:core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:4.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/bucket4j-core-4.10.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "bucket4j-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.github.vladimir-bukhtoyarov"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/bucket4j-core-4.10.0.jar"
        }
      ],
      "purl": "pkg:maven/com.github.vladimir-bukhtoyarov/bucket4j-core@4.10.0",
      "type": "library",
      "version": "4.10.0"
    },
    {
      "bom-ref": "pkg:maven/net.bytebuddy/byte-buddy@1.12.7?package-id=14f880f6811e00a5",
      "cpe": "cpe:2.3:a:byte-buddy:byte-buddy:1.12.7:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e2a08a3fae74979ee76a8dd67cfd37958874e0fb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.bytebuddy",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "byte-buddy",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte-buddy:byte_buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy:byte-buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy:byte_buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bytebuddy:byte-buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bytebuddy:byte_buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte:byte-buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte:byte_buddy:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/byte-buddy-1.12.7.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "byte-buddy"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.bytebuddy"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/byte-buddy-1.12.7.jar"
        }
      ],
      "purl": "pkg:maven/net.bytebuddy/byte-buddy@1.12.7",
      "type": "library",
      "version": "1.12.7"
    },
    {
      "bom-ref": "pkg:maven/net.bytebuddy/byte-buddy-agent@1.12.7?package-id=72939c1a62ac255c",
      "cpe": "cpe:2.3:a:byte-buddy-agent:byte-buddy-agent:1.12.7:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8b23f1a6afed2b787102a3625c1cfddc56b17a73"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.bytebuddy",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "byte-buddy-agent",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte-buddy-agent:byte_buddy_agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy_agent:byte-buddy-agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy_agent:byte_buddy_agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte-buddy:byte-buddy-agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte-buddy:byte_buddy_agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy:byte-buddy-agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy:byte_buddy_agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bytebuddy:byte-buddy-agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bytebuddy:byte_buddy_agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte:byte-buddy-agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte:byte_buddy_agent:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/byte-buddy-agent-1.12.7.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "byte-buddy-agent"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.bytebuddy"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/byte-buddy-agent-1.12.7.jar"
        }
      ],
      "purl": "pkg:maven/net.bytebuddy/byte-buddy-agent@1.12.7",
      "type": "library",
      "version": "1.12.7"
    },
    {
      "bom-ref": "pkg:maven/net.bytebuddy/byte-buddy-dep@1.12.7?package-id=01a19cfb2d517b46",
      "cpe": "cpe:2.3:a:byte-buddy-dep:byte-buddy-dep:1.12.7:*:*:*:*:*:*:*",
      "group": "net.bytebuddy",
      "name": "byte-buddy-dep",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte-buddy-dep:byte_buddy_dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy_dep:byte-buddy-dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy_dep:byte_buddy_dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte-buddy:byte-buddy-dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte-buddy:byte_buddy_dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy:byte-buddy-dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte_buddy:byte_buddy_dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bytebuddy:byte-buddy-dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bytebuddy:byte_buddy_dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte:byte-buddy-dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:byte:byte_buddy_dep:1.12.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/byte-buddy-1.12.7.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "byte-buddy-dep"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.bytebuddy"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/byte-buddy-1.12.7.jar:net.bytebuddy:byte-buddy-dep"
        }
      ],
      "purl": "pkg:maven/net.bytebuddy/byte-buddy-dep@1.12.7",
      "type": "library",
      "version": "1.12.7"
    },
    {
      "bom-ref": "pkg:rpm/rhel/bzip2-libs@1.0.6-26.el8?arch=x86_64&upstream=bzip2-1.0.6-26.el8.src.rpm&distro=rhel-8.9&package-id=61e11dd82952edfd",
      "cpe": "cpe:2.3:a:bzip2-libs:bzip2-libs:1.0.6-26.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "bzip2-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bzip2-libs:bzip2_libs:1.0.6-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bzip2_libs:bzip2-libs:1.0.6-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bzip2_libs:bzip2_libs:1.0.6-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:bzip2-libs:1.0.6-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:bzip2_libs:1.0.6-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bzip2:bzip2-libs:1.0.6-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bzip2:bzip2_libs:1.0.6-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "26.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "76645"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "bzip2-1.0.6-26.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/bzip2-libs@1.0.6-26.el8?arch=x86_64&upstream=bzip2-1.0.6-26.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.0.6-26.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/ca-certificates@2023.2.60_v7.0.306-80.0.el8_8?arch=noarch&upstream=ca-certificates-2023.2.60_v7.0.306-80.0.el8_8.src.rpm&distro=rhel-8.9&package-id=7b4a189eaf39be7f",
      "cpe": "cpe:2.3:a:ca-certificates:ca-certificates:2023.2.60_v7.0.306-80.0.el8_8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "ca-certificates",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca-certificates:ca_certificates:2023.2.60_v7.0.306-80.0.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca_certificates:ca-certificates:2023.2.60_v7.0.306-80.0.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca_certificates:ca_certificates:2023.2.60_v7.0.306-80.0.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:ca-certificates:2023.2.60_v7.0.306-80.0.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:ca_certificates:2023.2.60_v7.0.306-80.0.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca:ca-certificates:2023.2.60_v7.0.306-80.0.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ca:ca_certificates:2023.2.60_v7.0.306-80.0.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "80.0.el8_8"
        },
        {
          "name": "syft:metadata:size",
          "value": "2332584"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "ca-certificates-2023.2.60_v7.0.306-80.0.el8_8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/ca-certificates@2023.2.60_v7.0.306-80.0.el8_8?arch=noarch&upstream=ca-certificates-2023.2.60_v7.0.306-80.0.el8_8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2023.2.60_v7.0.306-80.0.el8_8"
    },
    {
      "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.8.0?package-id=a3afc1ee5e22c7d6",
      "cpe": "cpe:2.3:a:ben-manes:ben-manes:2.8.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6000774d7f8412ced005a704188ced78beeed2bb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "caffeine",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben-manes:ben_manes:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben_manes:ben-manes:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben_manes:ben_manes:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben-manes:caffeine:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben_manes:caffeine:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:caffeine:ben-manes:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:caffeine:ben_manes:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:caffeine:caffeine:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:ben-manes:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:ben_manes:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:caffeine:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben:ben-manes:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben:ben_manes:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben:caffeine:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/caffeine-2.8.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/caffeine-2.8.0.jar"
        }
      ],
      "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.8.0",
      "type": "library",
      "version": "2.8.0"
    },
    {
      "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.8.0?package-id=208bd6fa11800629",
      "cpe": "cpe:2.3:a:ben-manes:ben-manes:2.8.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6000774d7f8412ced005a704188ced78beeed2bb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "caffeine",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben-manes:ben_manes:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben_manes:ben-manes:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben_manes:ben_manes:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben-manes:caffeine:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben_manes:caffeine:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:caffeine:ben-manes:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:caffeine:ben_manes:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:caffeine:caffeine:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:ben-manes:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:ben_manes:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:caffeine:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben:ben-manes:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben:ben_manes:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ben:caffeine:2.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/caffeine-2.8.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/caffeine-2.8.0.jar"
        }
      ],
      "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.8.0",
      "type": "library",
      "version": "2.8.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.calcite/calcite-core@1.21.0?package-id=38ca8b22094da0ce",
      "cpe": "cpe:2.3:a:apache:calcite-core:1.21.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cc4925ff83fb0ba25b417169a6cba77f5a6908aa"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.calcite",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "calcite-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:calcite_core:1.21.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:calcite:1.21.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/calcite-core-1.21.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "calcite-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.calcite"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/calcite-core-1.21.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.calcite/calcite-core@1.21.0",
      "type": "library",
      "version": "1.21.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.calcite/calcite-linq4j@1.21.0?package-id=e21e017588c0efd2",
      "cpe": "cpe:2.3:a:apache:calcite-linq4j:1.21.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "25ce2a98c29794a86f81dbbc94e392538394d09f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.calcite",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "calcite-linq4j",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:calcite_linq4j:1.21.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:calcite:1.21.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/calcite-linq4j-1.21.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "calcite-linq4j"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.calcite"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/calcite-linq4j-1.21.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.calcite/calcite-linq4j@1.21.0",
      "type": "library",
      "version": "1.21.0"
    },
    {
      "bom-ref": "pkg:maven/cglib/cglib@3.2.0?package-id=3c278ec2a42f6045",
      "cpe": "cpe:2.3:a:cglib:cglib:3.2.0:*:*:*:*:*:*:*",
      "group": "cglib",
      "name": "cglib",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/guice-4.1.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "cglib"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "cglib"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/guice-4.1.0.jar:cglib:cglib"
        }
      ],
      "purl": "pkg:maven/cglib/cglib@3.2.0",
      "type": "library",
      "version": "3.2.0"
    },
    {
      "bom-ref": "pkg:maven/cglib/cglib@3.2.0?package-id=63ae7bf17011b2d4",
      "cpe": "cpe:2.3:a:cglib:cglib:3.2.0:*:*:*:*:*:*:*",
      "group": "cglib",
      "name": "cglib",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/guice-4.1.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "cglib"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "cglib"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/guice-4.1.0.jar:cglib:cglib"
        }
      ],
      "purl": "pkg:maven/cglib/cglib@3.2.0",
      "type": "library",
      "version": "3.2.0"
    },
    {
      "bom-ref": "pkg:maven/org.checkerframework.checker.qual/checker-qual@2.10.0?package-id=f204517763c9f130",
      "cpe": "cpe:2.3:a:checkerframework:checker-qual:2.10.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5786699a0cb71f9dc32e6cca1d665eef07a0882f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "checker-qual",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:checker_qual:2.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker-qual:2.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker_qual:2.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker-qual:2.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker_qual:2.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:checker:2.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:qual:2.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker:2.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker-qual:2.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker_qual:2.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker:2.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:qual:2.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:qual:2.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker-qual:2.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker_qual:2.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker:2.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:qual:2.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker:2.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:qual:2.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/checker-qual-2.10.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/checker-qual-2.10.0.jar"
        }
      ],
      "purl": "pkg:maven/org.checkerframework.checker.qual/checker-qual@2.10.0",
      "type": "library",
      "version": "2.10.0"
    },
    {
      "bom-ref": "pkg:maven/org.checkerframework.checker.qual/checker-qual@2.5.7?package-id=aba87f94122f1096",
      "cpe": "cpe:2.3:a:checkerframework:checker-qual:2.5.7:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2bd4f1921c78c2adffbe2eb01117c7936d0a0789"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "checker-qual",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:checker_qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker-qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker_qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker-qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker_qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:checker:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker-qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker_qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker-qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker_qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:qual:2.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/checker-qual-2.5.7.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/checker-qual-2.5.7.jar"
        }
      ],
      "purl": "pkg:maven/org.checkerframework.checker.qual/checker-qual@2.5.7",
      "type": "library",
      "version": "2.5.7"
    },
    {
      "bom-ref": "pkg:maven/org.checkerframework.checker.qual/checker-qual@3.5.0?package-id=97541e0a7f0e4e09",
      "cpe": "cpe:2.3:a:checkerframework:checker-qual:3.5.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2f50520c8abea66fbd8d26e481d3aef5c673b510"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "checker-qual",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:checker_qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker-qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker_qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker-qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker_qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:checker:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker-qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker_qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker-qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker_qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:qual:3.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/postgresql-metadata-storage/checker-qual-3.5.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/postgresql-metadata-storage/checker-qual-3.5.0.jar"
        }
      ],
      "purl": "pkg:maven/org.checkerframework.checker.qual/checker-qual@3.5.0",
      "type": "library",
      "version": "3.5.0"
    },
    {
      "bom-ref": "pkg:maven/org.checkerframework.checker.qual/checker-qual@3.8.0?package-id=6e71fbdc06c7abf3",
      "cpe": "cpe:2.3:a:checkerframework:checker-qual:3.8.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6b83e4a33220272c3a08991498ba9dc09519f190"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "checker-qual",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:checker_qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker-qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker_qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker-qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker_qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:checker:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checkerframework:qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:checker:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker-qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker_qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:checker:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker-qual:qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker_qual:qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker-qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker_qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:checker:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:checker:qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:checker:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:qual:qual:3.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/checker-qual-3.8.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/checker-qual-3.8.0.jar"
        }
      ],
      "purl": "pkg:maven/org.checkerframework.checker.qual/checker-qual@3.8.0",
      "type": "library",
      "version": "3.8.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/chkconfig@1.19.2-1.el8?arch=x86_64&upstream=chkconfig-1.19.2-1.el8.src.rpm&distro=rhel-8.9&package-id=35e30bb34bd7e7e1",
      "cpe": "cpe:2.3:a:chkconfig:chkconfig:1.19.2-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2"
          }
        }
      ],
      "name": "chkconfig",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:chkconfig:1.19.2-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "827702"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "chkconfig-1.19.2-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/chkconfig@1.19.2-1.el8?arch=x86_64&upstream=chkconfig-1.19.2-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.19.2-1.el8"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml/classmate@1.1.0?package-id=dd828577805960ac",
      "cpe": "cpe:2.3:a:classmate:classmate:1.1.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "dbbd699a1486ad0f2ed6f5af6cfed66acacb9056"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "classmate",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:classmate:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/classmate-1.1.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "classmate"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/classmate-1.1.0.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml/classmate@1.1.0",
      "type": "library",
      "version": "1.1.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml/classmate@1.1.0?package-id=dec776fdd3106716",
      "cpe": "cpe:2.3:a:classmate:classmate:1.1.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "classmate",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:classmate:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sonatype:classmate:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oss:classmate:1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jdbi-2.63.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "classmate"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jdbi-2.63.1.jar:com.fasterxml:classmate"
        }
      ],
      "purl": "pkg:maven/com.fasterxml/classmate@1.1.0",
      "type": "library",
      "version": "1.1.0"
    },
    {
      "bom-ref": "pkg:maven/io.kubernetes/client-java@11.0.1?package-id=1ea33a75bb1efec6",
      "cpe": "cpe:2.3:a:client-java:client-java:11.0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7e96c8397fda04b2b2b57d47d817806c403df2f6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.kubernetes",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "client-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client-java:client_java:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java:client-java:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java:client_java:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kubernetes:client-java:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kubernetes:client_java:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:client-java:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:client_java:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/client-java-11.0.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "client-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.kubernetes"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/client-java-11.0.1.jar"
        }
      ],
      "purl": "pkg:maven/io.kubernetes/client-java@11.0.1",
      "type": "library",
      "version": "11.0.1"
    },
    {
      "bom-ref": "pkg:maven/io.kubernetes/client-java-api@11.0.1?package-id=0fbf126d7c33a772",
      "cpe": "cpe:2.3:a:client-java-api:client-java-api:11.0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9351fce15597e7f18f37430187888dd0fff56d62"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.kubernetes",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "client-java-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client-java-api:client_java_api:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java_api:client-java-api:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java_api:client_java_api:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client-java:client-java-api:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client-java:client_java_api:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java:client-java-api:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java:client_java_api:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kubernetes:client-java-api:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kubernetes:client_java_api:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:client-java-api:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:client_java_api:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/client-java-api-11.0.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "client-java-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.kubernetes"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/client-java-api-11.0.1.jar"
        }
      ],
      "purl": "pkg:maven/io.kubernetes/client-java-api@11.0.1",
      "type": "library",
      "version": "11.0.1"
    },
    {
      "bom-ref": "pkg:maven/io.kubernetes/client-java-extended@11.0.1?package-id=8794aa6097e9ccd0",
      "cpe": "cpe:2.3:a:client-java-extended:client-java-extended:11.0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "be7ed2d0b2db266a9cfd52c53fab5243fd6d9c2b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.kubernetes",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "client-java-extended",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client-java-extended:client_java_extended:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java_extended:client-java-extended:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java_extended:client_java_extended:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client-java:client-java-extended:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client-java:client_java_extended:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java:client-java-extended:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java:client_java_extended:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kubernetes:client-java-extended:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kubernetes:client_java_extended:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:client-java-extended:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:client_java_extended:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/client-java-extended-11.0.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "client-java-extended"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.kubernetes"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/client-java-extended-11.0.1.jar"
        }
      ],
      "purl": "pkg:maven/io.kubernetes/client-java-extended@11.0.1",
      "type": "library",
      "version": "11.0.1"
    },
    {
      "bom-ref": "pkg:maven/io.kubernetes/client-java-proto@11.0.1?package-id=a3398db50f4ffdbf",
      "cpe": "cpe:2.3:a:client-java-proto:client-java-proto:11.0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "13892e86f63965cbf363d33355615423494b6d4d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.kubernetes",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "client-java-proto",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client-java-proto:client_java_proto:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java_proto:client-java-proto:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java_proto:client_java_proto:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client-java:client-java-proto:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client-java:client_java_proto:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java:client-java-proto:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client_java:client_java_proto:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kubernetes:client-java-proto:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kubernetes:client_java_proto:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:client-java-proto:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:client_java_proto:11.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/client-java-proto-11.0.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "client-java-proto"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.kubernetes"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/client-java-proto-11.0.1.jar"
        }
      ],
      "purl": "pkg:maven/io.kubernetes/client-java-proto@11.0.1",
      "type": "library",
      "version": "11.0.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.server/codec@2.0.0-M15?package-id=39971865af0016eb",
      "cpe": "cpe:2.3:a:apache:directory:2.0.0-M15:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1c16e4e477183641c5f0dd5cdecd27ec331bacb5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:kerberos:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:server:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:codec:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/apacheds-kerberos-codec-2.0.0-M15.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/apacheds-kerberos-codec-2.0.0-M15.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.server/codec@2.0.0-M15",
      "type": "library",
      "version": "2.0.0-M15"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.server/codec@2.0.0-M15?package-id=018809284b8c43fd",
      "cpe": "cpe:2.3:a:apache:directory:2.0.0-M15:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1c16e4e477183641c5f0dd5cdecd27ec331bacb5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:kerberos:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:server:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:codec:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/apacheds-kerberos-codec-2.0.0-M15.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/apacheds-kerberos-codec-2.0.0-M15.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.server/codec@2.0.0-M15",
      "type": "library",
      "version": "2.0.0-M15"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.server/codec@2.0.0-M15?package-id=55e9c1f62d061970",
      "cpe": "cpe:2.3:a:apache:directory:2.0.0-M15:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1c16e4e477183641c5f0dd5cdecd27ec331bacb5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:kerberos:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:server:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:codec:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/apacheds-kerberos-codec-2.0.0-M15.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/apacheds-kerberos-codec-2.0.0-M15.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.server/codec@2.0.0-M15",
      "type": "library",
      "version": "2.0.0-M15"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.server/codec@2.0.0-M15?package-id=dc53eaad7fad0c30",
      "cpe": "cpe:2.3:a:apache:directory:2.0.0-M15:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1c16e4e477183641c5f0dd5cdecd27ec331bacb5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:kerberos:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:server:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:codec:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/apacheds-kerberos-codec-2.0.0-M15.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/apacheds-kerberos-codec-2.0.0-M15.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.server/codec@2.0.0-M15",
      "type": "library",
      "version": "2.0.0-M15"
    },
    {
      "bom-ref": "pkg:maven/io.confluent/common-config@5.5.1?package-id=041d4d073bb1488b",
      "cpe": "cpe:2.3:a:common-config:common-config:5.5.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ec1e5be64c3b3cf8adeb838a1fe22759433f994c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.confluent",
      "name": "common-config",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common-config:common_config:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_config:common-config:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_config:common_config:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:confluent:common-config:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:confluent:common_config:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:common-config:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:common_config:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/common-config-5.5.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "common-config"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.confluent"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/common-config-5.5.1.jar"
        }
      ],
      "purl": "pkg:maven/io.confluent/common-config@5.5.1",
      "type": "library",
      "version": "5.5.1"
    },
    {
      "bom-ref": "pkg:maven/io.confluent/common-utils@5.5.1?package-id=663d721b06d1fc22",
      "cpe": "cpe:2.3:a:common-utils:common-utils:5.5.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "96d0c4dcce8eee1234c781db3c3420de02c1ae3e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.confluent",
      "name": "common-utils",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common-utils:common_utils:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_utils:common-utils:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_utils:common_utils:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:confluent:common-utils:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:confluent:common_utils:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:common-utils:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:common_utils:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/common-utils-5.5.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "common-utils"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.confluent"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/common-utils-5.5.1.jar"
        }
      ],
      "purl": "pkg:maven/io.confluent/common-utils@5.5.1",
      "type": "library",
      "version": "5.5.1"
    },
    {
      "bom-ref": "pkg:maven/io.confluent/common-utils@6.0.1?package-id=889c953770b09d3d",
      "cpe": "cpe:2.3:a:common-utils:common-utils:6.0.1:*:*:*:*:*:*:*",
      "group": "io.confluent",
      "name": "common-utils",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common-utils:common_utils:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_utils:common-utils:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_utils:common_utils:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:confluent:common-utils:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:confluent:common_utils:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:common-utils:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:common_utils:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "common-utils"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.confluent"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:io.confluent:common-utils"
        }
      ],
      "purl": "pkg:maven/io.confluent/common-utils@6.0.1",
      "type": "library",
      "version": "6.0.1"
    },
    {
      "bom-ref": "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?package-id=458618a84970b45a",
      "cpe": "cpe:2.3:a:apache:commons-beanutils:1.9.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d52b9abcd97f38c81342bb7e7ae1eee9b73cba51"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-beanutils",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-beanutils",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_beanutils:1.9.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.9.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-beanutils-1.9.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-beanutils"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-beanutils"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-beanutils-1.9.4.jar"
        }
      ],
      "purl": "pkg:maven/commons-beanutils/commons-beanutils@1.9.4",
      "type": "library",
      "version": "1.9.4"
    },
    {
      "bom-ref": "pkg:maven/commons-cli/commons-cli@1.2?package-id=8a117155faf3616b",
      "cpe": "cpe:2.3:a:apache:commons-cli:1.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2bf96b7aa8b611c177d329452af1dc933e14501c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-cli",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-cli",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_cli:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:cli:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-cli-1.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-cli"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-cli"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-cli-1.2.jar"
        }
      ],
      "purl": "pkg:maven/commons-cli/commons-cli@1.2",
      "type": "library",
      "version": "1.2"
    },
    {
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.13?package-id=1fdd33eaa8219d7f",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-codec:1.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3f18e1aa31031d89db6f01ba05d501258ce69d2c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-codec",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/commons-codec-1.13.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/commons-codec-1.13.jar"
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.13",
      "type": "library",
      "version": "1.13"
    },
    {
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.13?package-id=0362f14d55490aba",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-codec:1.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3f18e1aa31031d89db6f01ba05d501258ce69d2c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-codec",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-codec-1.13.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-codec-1.13.jar"
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.13",
      "type": "library",
      "version": "1.13"
    },
    {
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.13?package-id=aef0b8fdb67edbaa",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-codec:1.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3f18e1aa31031d89db6f01ba05d501258ce69d2c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-codec",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/commons-codec-1.13.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/commons-codec-1.13.jar"
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.13",
      "type": "library",
      "version": "1.13"
    },
    {
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.13?package-id=f866a6e097fceec0",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-codec:1.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3f18e1aa31031d89db6f01ba05d501258ce69d2c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-codec",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/commons-codec-1.13.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/commons-codec-1.13.jar"
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.13",
      "type": "library",
      "version": "1.13"
    },
    {
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.13?package-id=9ac73fe763c2a0d2",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-codec:1.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3f18e1aa31031d89db6f01ba05d501258ce69d2c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-codec",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/commons-codec-1.13.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/commons-codec-1.13.jar"
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.13",
      "type": "library",
      "version": "1.13"
    },
    {
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.13?package-id=ccd9d9f139f831df",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-codec:1.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3f18e1aa31031d89db6f01ba05d501258ce69d2c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-codec",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_codec:1.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-codec-1.13.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-codec-1.13.jar"
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.13",
      "type": "library",
      "version": "1.13"
    },
    {
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.4?package-id=488d9107b53808b6",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-codec:1.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4216af16d38465bbab0f3dff8efa14204f7a399a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-codec",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_codec:1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-codec:1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_codec:1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons-codec:1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-codec:commons_codec:1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons-codec:1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_codec:commons_codec:1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-codec:1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_codec:1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-codec-1.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-codec"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-codec-1.4.jar"
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.4",
      "type": "library",
      "version": "1.4"
    },
    {
      "bom-ref": "pkg:maven/commons-collections/commons-collections@3.2.2?package-id=3e83b73dc0779779",
      "cpe": "cpe:2.3:a:apache:commons-collections:3.2.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-collections",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-collections",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:collections:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-collections-3.2.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-collections"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-collections"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-collections-3.2.2.jar"
        }
      ],
      "purl": "pkg:maven/commons-collections/commons-collections@3.2.2",
      "type": "library",
      "version": "3.2.2"
    },
    {
      "bom-ref": "pkg:maven/commons-collections/commons-collections@3.2.2?package-id=750130b5f9d7271a",
      "cpe": "cpe:2.3:a:apache:commons-collections:3.2.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-collections",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-collections",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:collections:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/commons-collections-3.2.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-collections"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-collections"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/commons-collections-3.2.2.jar"
        }
      ],
      "purl": "pkg:maven/commons-collections/commons-collections@3.2.2",
      "type": "library",
      "version": "3.2.2"
    },
    {
      "bom-ref": "pkg:maven/commons-collections/commons-collections@3.2.2?package-id=c5b7c102172b6f32",
      "cpe": "cpe:2.3:a:apache:commons-collections:3.2.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-collections",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-collections",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:collections:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-collections-3.2.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-collections"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-collections"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-collections-3.2.2.jar"
        }
      ],
      "purl": "pkg:maven/commons-collections/commons-collections@3.2.2",
      "type": "library",
      "version": "3.2.2"
    },
    {
      "bom-ref": "pkg:maven/commons-collections/commons-collections@3.2.2?package-id=38b49b069ce08493",
      "cpe": "cpe:2.3:a:apache:commons-collections:3.2.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-collections",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-collections",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:collections:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-collections-3.2.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-collections"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-collections"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-collections-3.2.2.jar"
        }
      ],
      "purl": "pkg:maven/commons-collections/commons-collections@3.2.2",
      "type": "library",
      "version": "3.2.2"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-collections4@4.2?package-id=82a7cb3ebb55f47d",
      "cpe": "cpe:2.3:a:apache:commons-collections4:4.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "54ebea0a5b653d3c680131e73fe807bb8f78c4ed"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-collections4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_collections4:4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/commons-collections4-4.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-collections4"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/commons-collections4-4.2.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-collections4@4.2",
      "type": "library",
      "version": "4.2"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-collections4@4.2?package-id=3f1aa3a03f83a576",
      "cpe": "cpe:2.3:a:apache:commons-collections4:4.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "54ebea0a5b653d3c680131e73fe807bb8f78c4ed"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-collections4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_collections4:4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-collections4-4.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-collections4"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-collections4-4.2.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-collections4@4.2",
      "type": "library",
      "version": "4.2"
    },
    {
      "bom-ref": "pkg:maven/org.codehaus.janino/commons-compiler@3.0.11?package-id=f04627b8d83082ef",
      "cpe": "cpe:2.3:a:commons-compiler:commons-compiler:3.0.11:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f2a6ec7fbc929c9fc87ff8bb486c0574951c5b09"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.codehaus.janino",
      "licenses": [
        {
          "license": {
            "name": "https://raw.githubusercontent.com/janino-compiler/janino/master/LICENSE"
          }
        }
      ],
      "name": "commons-compiler",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-compiler:commons_compiler:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_compiler:commons-compiler:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_compiler:commons_compiler:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:commons-compiler:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:commons_compiler:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-compiler:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_compiler:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:janino:commons-compiler:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:janino:commons_compiler:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-compiler-3.0.11.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-compiler"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.codehaus.janino"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-compiler-3.0.11.jar"
        }
      ],
      "purl": "pkg:maven/org.codehaus.janino/commons-compiler@3.0.11",
      "type": "library",
      "version": "3.0.11"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-compress@1.21?package-id=ec48c0ff27aac569",
      "cpe": "cpe:2.3:a:apache:commons-compress:1.21:*:*:*:*:*:*:*",
      "group": "org.apache.commons",
      "name": "commons-compress",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_compress:1.21:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.21:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-compress"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:org.apache.commons:commons-compress"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-compress@1.21",
      "type": "library",
      "version": "1.21"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-compress@1.21?package-id=16c80cee90f050cb",
      "cpe": "cpe:2.3:a:apache:commons-compress:1.21:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4ec95b60d4e86b5c95a0e919cb172a0af98011ef"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-compress",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_compress:1.21:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:compress:1.21:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.21:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-compress-1.21.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-compress"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-compress-1.21.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-compress@1.21",
      "type": "library",
      "version": "1.21"
    },
    {
      "bom-ref": "pkg:maven/commons-configuration/commons-configuration@1.6?package-id=ea578af3947237fd",
      "cpe": "cpe:2.3:a:apache:commons-configuration:1.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "32cadde23955d7681b0d94a2715846d20b425235"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-configuration",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-configuration",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-configuration-1.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-configuration-1.6.jar"
        }
      ],
      "purl": "pkg:maven/commons-configuration/commons-configuration@1.6",
      "type": "library",
      "version": "1.6"
    },
    {
      "bom-ref": "pkg:maven/commons-configuration/commons-configuration@1.6?package-id=3d462564e0141236",
      "cpe": "cpe:2.3:a:apache:commons-configuration:1.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "32cadde23955d7681b0d94a2715846d20b425235"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-configuration",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-configuration",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/commons-configuration-1.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/commons-configuration-1.6.jar"
        }
      ],
      "purl": "pkg:maven/commons-configuration/commons-configuration@1.6",
      "type": "library",
      "version": "1.6"
    },
    {
      "bom-ref": "pkg:maven/commons-configuration/commons-configuration@1.6?package-id=40f62e09b637cc44",
      "cpe": "cpe:2.3:a:apache:commons-configuration:1.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "32cadde23955d7681b0d94a2715846d20b425235"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-configuration",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-configuration",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/commons-configuration-1.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/commons-configuration-1.6.jar"
        }
      ],
      "purl": "pkg:maven/commons-configuration/commons-configuration@1.6",
      "type": "library",
      "version": "1.6"
    },
    {
      "bom-ref": "pkg:maven/commons-configuration/commons-configuration@1.6?package-id=f3036bc19949f0ff",
      "cpe": "cpe:2.3:a:apache:commons-configuration:1.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "32cadde23955d7681b0d94a2715846d20b425235"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-configuration",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-configuration",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/commons-configuration-1.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/commons-configuration-1.6.jar"
        }
      ],
      "purl": "pkg:maven/commons-configuration/commons-configuration@1.6",
      "type": "library",
      "version": "1.6"
    },
    {
      "bom-ref": "pkg:maven/commons-configuration/commons-configuration@1.6?package-id=00ab9f7670b29a16",
      "cpe": "cpe:2.3:a:apache:commons-configuration:1.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "32cadde23955d7681b0d94a2715846d20b425235"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-configuration",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-configuration",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/commons-configuration-1.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/commons-configuration-1.6.jar"
        }
      ],
      "purl": "pkg:maven/commons-configuration/commons-configuration@1.6",
      "type": "library",
      "version": "1.6"
    },
    {
      "bom-ref": "pkg:maven/commons-configuration/commons-configuration@1.6?package-id=5c6213929ea4ad8c",
      "cpe": "cpe:2.3:a:apache:commons-configuration:1.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "32cadde23955d7681b0d94a2715846d20b425235"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-configuration",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-configuration",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:configuration:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-configuration-1.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-configuration"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-configuration-1.6.jar"
        }
      ],
      "purl": "pkg:maven/commons-configuration/commons-configuration@1.6",
      "type": "library",
      "version": "1.6"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-dbcp2@2.0.1?package-id=fa3089bb4c67a436",
      "cpe": "cpe:2.3:a:apache:commons-dbcp2:2.0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "dc887691eab129c5728e26b095751fcadd36719d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-dbcp2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_dbcp2:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:dbcp2:2.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-dbcp2-2.0.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-dbcp2"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-dbcp2-2.0.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-dbcp2@2.0.1",
      "type": "library",
      "version": "2.0.1"
    },
    {
      "bom-ref": "pkg:maven/commons-digester/commons-digester@1.8?package-id=a3e3b6e291d781dc",
      "cpe": "cpe:2.3:a:apache:commons-digester:1.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "dc6a73fdbd1fa3f0944e8497c6c872fa21dca37e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "commons-digester",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_digester:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:digester:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-digester-1.8.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-digester-1.8.jar"
        }
      ],
      "purl": "pkg:maven/commons-digester/commons-digester@1.8",
      "type": "library",
      "version": "1.8"
    },
    {
      "bom-ref": "pkg:maven/commons-digester/commons-digester@1.8?package-id=590a68a4891cc9c8",
      "cpe": "cpe:2.3:a:apache:commons-digester:1.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "dc6a73fdbd1fa3f0944e8497c6c872fa21dca37e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "commons-digester",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_digester:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:digester:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/commons-digester-1.8.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/commons-digester-1.8.jar"
        }
      ],
      "purl": "pkg:maven/commons-digester/commons-digester@1.8",
      "type": "library",
      "version": "1.8"
    },
    {
      "bom-ref": "pkg:maven/commons-digester/commons-digester@1.8?package-id=bea936421ea27e8b",
      "cpe": "cpe:2.3:a:apache:commons-digester:1.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "dc6a73fdbd1fa3f0944e8497c6c872fa21dca37e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "commons-digester",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_digester:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:digester:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/commons-digester-1.8.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/commons-digester-1.8.jar"
        }
      ],
      "purl": "pkg:maven/commons-digester/commons-digester@1.8",
      "type": "library",
      "version": "1.8"
    },
    {
      "bom-ref": "pkg:maven/commons-digester/commons-digester@1.8?package-id=e55265866f1686ff",
      "cpe": "cpe:2.3:a:apache:commons-digester:1.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "dc6a73fdbd1fa3f0944e8497c6c872fa21dca37e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "commons-digester",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_digester:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:digester:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-digester-1.8.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-digester-1.8.jar"
        }
      ],
      "purl": "pkg:maven/commons-digester/commons-digester@1.8",
      "type": "library",
      "version": "1.8"
    },
    {
      "bom-ref": "pkg:maven/commons-io/commons-io@2.11.0?package-id=78e1e63b38a96de4",
      "cpe": "cpe:2.3:a:apache:commons-io:2.11.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-io",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-io",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_io:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/commons-io-2.11.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-io"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-io"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/commons-io-2.11.0.jar"
        }
      ],
      "purl": "pkg:maven/commons-io/commons-io@2.11.0",
      "type": "library",
      "version": "2.11.0"
    },
    {
      "bom-ref": "pkg:maven/commons-io/commons-io@2.11.0?package-id=4963e00c95fe28e6",
      "cpe": "cpe:2.3:a:apache:commons-io:2.11.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-io",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-io",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_io:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/commons-io-2.11.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-io"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-io"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/commons-io-2.11.0.jar"
        }
      ],
      "purl": "pkg:maven/commons-io/commons-io@2.11.0",
      "type": "library",
      "version": "2.11.0"
    },
    {
      "bom-ref": "pkg:maven/commons-io/commons-io@2.11.0?package-id=80d84fbad55dd69e",
      "cpe": "cpe:2.3:a:apache:commons-io:2.11.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-io",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-io",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_io:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-io-2.11.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-io"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-io"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-io-2.11.0.jar"
        }
      ],
      "purl": "pkg:maven/commons-io/commons-io@2.11.0",
      "type": "library",
      "version": "2.11.0"
    },
    {
      "bom-ref": "pkg:maven/commons-io/commons-io@2.4?package-id=e16e2e0b85b23ecd",
      "cpe": "cpe:2.3:a:apache:commons-io:2.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b1b6ea3b7e4aa4f492509a4952029cd8e48019ad"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-io",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-io",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_io:2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:io:2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-io-2.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-io"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-io"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-io-2.4.jar"
        }
      ],
      "purl": "pkg:maven/commons-io/commons-io@2.4",
      "type": "library",
      "version": "2.4"
    },
    {
      "bom-ref": "pkg:maven/commons-io/commons-io@2.6?package-id=d04fa880f43c3f93",
      "cpe": "cpe:2.3:a:apache:commons-io:2.6:*:*:*:*:*:*:*",
      "group": "commons-io",
      "name": "commons-io",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_io:2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/velocity-engine-core-2.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-io"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-io"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/velocity-engine-core-2.2.jar:commons-io:commons-io"
        }
      ],
      "purl": "pkg:maven/commons-io/commons-io@2.6",
      "type": "library",
      "version": "2.6"
    },
    {
      "bom-ref": "pkg:maven/commons-lang/commons-lang@2.6?package-id=4e21232ba2b336f5",
      "cpe": "cpe:2.3:a:apache:commons-lang:2.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0ce1edb914c94ebc388f086c6827e8bdeec71ac2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-lang",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-lang",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_lang:2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:lang:2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-lang-2.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-lang"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-lang"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-lang-2.6.jar"
        }
      ],
      "purl": "pkg:maven/commons-lang/commons-lang@2.6",
      "type": "library",
      "version": "2.6"
    },
    {
      "bom-ref": "pkg:maven/commons-lang/commons-lang@2.6?package-id=dea61f0a0e454aa4",
      "cpe": "cpe:2.3:a:apache:commons-lang:2.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0ce1edb914c94ebc388f086c6827e8bdeec71ac2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-lang",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-lang",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_lang:2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:lang:2.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-lang-2.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-lang"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-lang"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-lang-2.6.jar"
        }
      ],
      "purl": "pkg:maven/commons-lang/commons-lang@2.6",
      "type": "library",
      "version": "2.6"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0?package-id=693b44a5e77fcb63",
      "cpe": "cpe:2.3:a:apache:commons-lang3:3.12.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-lang3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_lang3:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:lang3:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/commons-lang3-3.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-lang3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/commons-lang3-3.12.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.12.0",
      "type": "library",
      "version": "3.12.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0?package-id=d143ef3416a04cea",
      "cpe": "cpe:2.3:a:apache:commons-lang3:3.12.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-lang3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_lang3:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:lang3:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/commons-lang3-3.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-lang3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/commons-lang3-3.12.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.12.0",
      "type": "library",
      "version": "3.12.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0?package-id=8093db529fc751d8",
      "cpe": "cpe:2.3:a:apache:commons-lang3:3.12.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-lang3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_lang3:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:lang3:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/commons-lang3-3.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-lang3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/commons-lang3-3.12.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.12.0",
      "type": "library",
      "version": "3.12.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0?package-id=0efa50b5a1290859",
      "cpe": "cpe:2.3:a:apache:commons-lang3:3.12.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-lang3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_lang3:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:lang3:3.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-lang3-3.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-lang3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-lang3-3.12.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.12.0",
      "type": "library",
      "version": "3.12.0"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.1?package-id=f1b5b14fb7ea4596",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-logging:1.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5043bfebc3db072ed80fbd362e7caf00e885d8ae"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-logging",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/commons-logging-1.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/commons-logging-1.1.1.jar"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.1?package-id=24073a9d748b7a53",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-logging:1.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5043bfebc3db072ed80fbd362e7caf00e885d8ae"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-logging",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-logging-1.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-logging-1.1.1.jar"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.1?package-id=d660d11d57887f16",
      "cpe": "cpe:2.3:a:apache:commons-logging:1.1.1:*:*:*:*:*:*:*",
      "group": "commons-logging",
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/htrace-core4-4.0.1-incubating.jar:commons-logging:commons-logging"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.1?package-id=5919e6d358ef179c",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-logging:1.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5043bfebc3db072ed80fbd362e7caf00e885d8ae"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-logging",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/commons-logging-1.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/commons-logging-1.1.1.jar"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.1?package-id=e59b6cc92aee1bfb",
      "cpe": "cpe:2.3:a:apache:commons-logging:1.1.1:*:*:*:*:*:*:*",
      "group": "commons-logging",
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/htrace-core4-4.0.1-incubating.jar:commons-logging:commons-logging"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.1?package-id=0a1d1c69d341f86b",
      "cpe": "cpe:2.3:a:apache:commons-logging:1.1.1:*:*:*:*:*:*:*",
      "group": "commons-logging",
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/htrace-core4-4.0.1-incubating.jar:commons-logging:commons-logging"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.1?package-id=16c17a76b48a654b",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-logging:1.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5043bfebc3db072ed80fbd362e7caf00e885d8ae"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-logging",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/commons-logging-1.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/commons-logging-1.1.1.jar"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.1?package-id=557347f051b43075",
      "cpe": "cpe:2.3:a:apache:commons-logging:1.1.1:*:*:*:*:*:*:*",
      "group": "commons-logging",
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/htrace-core4-4.0.1-incubating.jar:commons-logging:commons-logging"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.1?package-id=dfca2ad280fba44f",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-logging:1.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5043bfebc3db072ed80fbd362e7caf00e885d8ae"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-logging",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/commons-logging-1.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/commons-logging-1.1.1.jar"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.1?package-id=3e3d858c791e9450",
      "cpe": "cpe:2.3:a:apache:commons-logging:1.1.1:*:*:*:*:*:*:*",
      "group": "commons-logging",
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/htrace-core4-4.0.1-incubating.jar:commons-logging:commons-logging"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.1?package-id=6084a34f6750d67f",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-logging:1.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5043bfebc3db072ed80fbd362e7caf00e885d8ae"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-logging",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_logging:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-logging-1.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-logging-1.1.1.jar"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.1.3?package-id=4b7b688ff059a633",
      "cpe": "cpe:2.3:a:apache-software-foundation:commons-logging:1.1.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-logging",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache-software-foundation:commons_logging:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons-logging:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache_software_foundation:commons_logging:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons-logging:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-logging:commons_logging:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons-logging:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_logging:commons_logging:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-logging:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_logging:1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-logging-1.1.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-logging-1.1.3.jar"
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.1.3",
      "type": "library",
      "version": "1.1.3"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-math3@3.1.1?package-id=9fdff5311f54ded9",
      "cpe": "cpe:2.3:a:apache:commons-math3:3.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6719d757a98ff24a83d9d727bef9cec83f59b6e1"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-math3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_math3:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:math3:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-math3-3.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-math3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-math3-3.1.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-math3@3.1.1",
      "type": "library",
      "version": "3.1.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-math3@3.6.1?package-id=cb33b8f589d051c3",
      "cpe": "cpe:2.3:a:apache:commons-math3:3.6.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-math3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_math3:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:math3:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-datasketches/commons-math3-3.6.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-math3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-datasketches/commons-math3-3.6.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-math3@3.6.1",
      "type": "library",
      "version": "3.6.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-math3@3.6.1?package-id=616d9a1cf03f4964",
      "cpe": "cpe:2.3:a:apache:commons-math3:3.6.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-math3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_math3:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:math3:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/commons-math3-3.6.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-math3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/commons-math3-3.6.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-math3@3.6.1",
      "type": "library",
      "version": "3.6.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-math3@3.6.1?package-id=8cf3ec975ed02776",
      "cpe": "cpe:2.3:a:apache:commons-math3:3.6.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-math3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_math3:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:math3:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-stats/commons-math3-3.6.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-math3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-stats/commons-math3-3.6.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-math3@3.6.1",
      "type": "library",
      "version": "3.6.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-math3@3.6.1?package-id=0bc51e8f1f321918",
      "cpe": "cpe:2.3:a:apache:commons-math3:3.6.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-math3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_math3:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:math3:3.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-math3-3.6.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-math3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-math3-3.6.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-math3@3.6.1",
      "type": "library",
      "version": "3.6.1"
    },
    {
      "bom-ref": "pkg:maven/commons-net/commons-net@3.1?package-id=189f210c4e893775",
      "cpe": "cpe:2.3:a:apache:commons-net:3.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2298164a7c2484406f2aa5ac85b205d39019896f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-net",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-net",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_net:3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:net:3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-net-3.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-net"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-net"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/commons-net-3.1.jar"
        }
      ],
      "purl": "pkg:maven/commons-net/commons-net@3.1",
      "type": "library",
      "version": "3.1"
    },
    {
      "bom-ref": "pkg:maven/commons-net/commons-net@3.6?package-id=37d58912218a65fd",
      "cpe": "cpe:2.3:a:apache:commons-net:3.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b71de00508dcb078d2b24b5fa7e538636de9b3da"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-net",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-net",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_net:3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:net:3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-net-3.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-net"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-net"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/commons-net-3.6.jar"
        }
      ],
      "purl": "pkg:maven/commons-net/commons-net@3.6",
      "type": "library",
      "version": "3.6"
    },
    {
      "bom-ref": "pkg:maven/commons-net/commons-net@3.6?package-id=cf704523bac46bbc",
      "cpe": "cpe:2.3:a:apache:commons-net:3.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b71de00508dcb078d2b24b5fa7e538636de9b3da"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "commons-net",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-net",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_net:3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:net:3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/commons-net-3.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-net"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "commons-net"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/commons-net-3.6.jar"
        }
      ],
      "purl": "pkg:maven/commons-net/commons-net@3.6",
      "type": "library",
      "version": "3.6"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-pool2@2.2?package-id=b99722d847dfa815",
      "cpe": "cpe:2.3:a:apache:commons-pool2:2.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bd1a6e384f3cf0f9b9a60e1e6c1c1ecbbee7e0b7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-pool2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_pool2:2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:pool2:2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-pool2-2.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-pool2"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-pool2-2.2.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-pool2@2.2",
      "type": "library",
      "version": "2.2"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-text@1.10.0?package-id=5d58f4be280359bd",
      "cpe": "cpe:2.3:a:apache:commons-text:1.10.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3363381aef8cef2dbc1023b3e3a9433b08b64e01"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.commons",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "commons-text",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_text:1.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:1.10.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-text-1.10.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-text"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/commons-text-1.10.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-text@1.10.0",
      "type": "library",
      "version": "1.10.0"
    },
    {
      "bom-ref": "pkg:maven/com.ning/compress-lzf@1.0.4?package-id=efaecc1fcea0c125",
      "cpe": "cpe:2.3:a:compress-lzf:compress-lzf:1.0.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3833ca68f9f42fd11d4e0a036e9a3faae5d5f1a8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.ning",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "name": "compress-lzf",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:compress-lzf:compress_lzf:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:compress_lzf:compress-lzf:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:compress_lzf:compress_lzf:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:compress-lzf:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:compress_lzf:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:compress:compress-lzf:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:compress:compress_lzf:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ning:compress-lzf:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ning:compress_lzf:1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/compress-lzf-1.0.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "compress-lzf"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.ning"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/compress-lzf-1.0.4.jar"
        }
      ],
      "purl": "pkg:maven/com.ning/compress-lzf@1.0.4",
      "type": "library",
      "version": "1.0.4"
    },
    {
      "bom-ref": "pkg:maven/org.skife.config/config-magic@0.9?package-id=a2667239a344fdc5",
      "cpe": "cpe:2.3:a:config-magic:config-magic:0.9:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c22383d089321fd0c58a15c1c6ef5d24b5b5ee0c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.skife.config",
      "licenses": [
        {
          "license": {
            "name": "Apache License 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "name": "config-magic",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:config-magic:config_magic:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:config_magic:config-magic:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:config_magic:config_magic:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:config-magic:config:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:config:config-magic:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:config:config_magic:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:config_magic:config:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:skife:config-magic:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:skife:config_magic:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:config:config:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:skife:config:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/config-magic-0.9.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "config-magic"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.skife.config"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/config-magic-0.9.jar"
        }
      ],
      "purl": "pkg:maven/org.skife.config/config-magic@0.9",
      "type": "library",
      "version": "0.9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/copy-jdk-configs@4.0-2.el8?arch=noarch&upstream=copy-jdk-configs-4.0-2.el8.src.rpm&distro=rhel-8.9&package-id=c92f1dcea129d49f",
      "cpe": "cpe:2.3:a:copy-jdk-configs:copy-jdk-configs:4.0-2.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "copy-jdk-configs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:copy-jdk-configs:copy_jdk_configs:4.0-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:copy_jdk_configs:copy-jdk-configs:4.0-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:copy_jdk_configs:copy_jdk_configs:4.0-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:copy-jdk:copy-jdk-configs:4.0-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:copy-jdk:copy_jdk_configs:4.0-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:copy_jdk:copy-jdk-configs:4.0-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:copy_jdk:copy_jdk_configs:4.0-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:copy-jdk-configs:4.0-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:copy_jdk_configs:4.0-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:copy:copy-jdk-configs:4.0-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:copy:copy_jdk_configs:4.0-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "2.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "19802"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "copy-jdk-configs-4.0-2.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/copy-jdk-configs@4.0-2.el8?arch=noarch&upstream=copy-jdk-configs-4.0-2.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "4.0-2.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/coreutils-single@8.30-15.el8?arch=x86_64&upstream=coreutils-8.30-15.el8.src.rpm&distro=rhel-8.9&package-id=d6cdb3c4b811d3e0",
      "cpe": "cpe:2.3:a:coreutils-single:coreutils-single:8.30-15.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+"
          }
        }
      ],
      "name": "coreutils-single",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:coreutils-single:coreutils_single:8.30-15.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:coreutils_single:coreutils-single:8.30-15.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:coreutils_single:coreutils_single:8.30-15.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:coreutils:coreutils-single:8.30-15.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:coreutils:coreutils_single:8.30-15.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:coreutils-single:8.30-15.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:coreutils_single:8.30-15.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "15.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "1360729"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "coreutils-8.30-15.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/coreutils-single@8.30-15.el8?arch=x86_64&upstream=coreutils-8.30-15.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "8.30-15.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/cracklib@2.9.6-15.el8?arch=x86_64&upstream=cracklib-2.9.6-15.el8.src.rpm&distro=rhel-8.9&package-id=96e15555fc0e9657",
      "cpe": "cpe:2.3:a:cracklib:cracklib:2.9.6-15.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "cracklib",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:cracklib:2.9.6-15.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "15.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "239047"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "cracklib-2.9.6-15.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/cracklib@2.9.6-15.el8?arch=x86_64&upstream=cracklib-2.9.6-15.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.9.6-15.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/cracklib-dicts@2.9.6-15.el8?arch=x86_64&upstream=cracklib-2.9.6-15.el8.src.rpm&distro=rhel-8.9&package-id=d984ec399ce8f054",
      "cpe": "cpe:2.3:a:cracklib-dicts:cracklib-dicts:2.9.6-15.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "cracklib-dicts",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cracklib-dicts:cracklib_dicts:2.9.6-15.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cracklib_dicts:cracklib-dicts:2.9.6-15.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cracklib_dicts:cracklib_dicts:2.9.6-15.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cracklib:cracklib-dicts:2.9.6-15.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cracklib:cracklib_dicts:2.9.6-15.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:cracklib-dicts:2.9.6-15.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:cracklib_dicts:2.9.6-15.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "15.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "9815016"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "cracklib-2.9.6-15.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/cracklib-dicts@2.9.6-15.el8?arch=x86_64&upstream=cracklib-2.9.6-15.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.9.6-15.el8"
    },
    {
      "bom-ref": "pkg:maven/cron-scheduler/cron-scheduler@0.1?package-id=28991bb291eac07c",
      "cpe": "cpe:2.3:a:cron-scheduler:cron-scheduler:0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d25497d443d0843dbf2973e802c06722f2cb4578"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "cron-scheduler",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cron-scheduler:cron_scheduler:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cron_scheduler:cron-scheduler:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cron_scheduler:cron_scheduler:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cron:cron-scheduler:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cron:cron_scheduler:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/cron-scheduler-0.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/cron-scheduler-0.1.jar"
        }
      ],
      "purl": "pkg:maven/cron-scheduler/cron-scheduler@0.1",
      "type": "library",
      "version": "0.1"
    },
    {
      "bom-ref": "pkg:rpm/rhel/crypto-policies@20230731-1.git3177e06.el8?arch=noarch&upstream=crypto-policies-20230731-1.git3177e06.el8.src.rpm&distro=rhel-8.9&package-id=dc2a3f139d7310d5",
      "cpe": "cpe:2.3:a:crypto-policies:crypto-policies:20230731-1.git3177e06.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "crypto-policies",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto-policies:crypto_policies:20230731-1.git3177e06.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto_policies:crypto-policies:20230731-1.git3177e06.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto_policies:crypto_policies:20230731-1.git3177e06.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto:crypto-policies:20230731-1.git3177e06.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto:crypto_policies:20230731-1.git3177e06.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:crypto-policies:20230731-1.git3177e06.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:crypto_policies:20230731-1.git3177e06.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.git3177e06.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "73739"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "crypto-policies-20230731-1.git3177e06.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/crypto-policies@20230731-1.git3177e06.el8?arch=noarch&upstream=crypto-policies-20230731-1.git3177e06.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "20230731-1.git3177e06.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/crypto-policies-scripts@20230731-1.git3177e06.el8?arch=noarch&upstream=crypto-policies-20230731-1.git3177e06.el8.src.rpm&distro=rhel-8.9&package-id=528f5cd6cb79e961",
      "cpe": "cpe:2.3:a:crypto-policies-scripts:crypto-policies-scripts:20230731-1.git3177e06.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "crypto-policies-scripts",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto-policies-scripts:crypto_policies_scripts:20230731-1.git3177e06.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto_policies_scripts:crypto-policies-scripts:20230731-1.git3177e06.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto_policies_scripts:crypto_policies_scripts:20230731-1.git3177e06.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto-policies:crypto-policies-scripts:20230731-1.git3177e06.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto-policies:crypto_policies_scripts:20230731-1.git3177e06.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto_policies:crypto-policies-scripts:20230731-1.git3177e06.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto_policies:crypto_policies_scripts:20230731-1.git3177e06.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto:crypto-policies-scripts:20230731-1.git3177e06.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:crypto:crypto_policies_scripts:20230731-1.git3177e06.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:crypto-policies-scripts:20230731-1.git3177e06.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:crypto_policies_scripts:20230731-1.git3177e06.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.git3177e06.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "190780"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "crypto-policies-20230731-1.git3177e06.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/crypto-policies-scripts@20230731-1.git3177e06.el8?arch=noarch&upstream=crypto-policies-20230731-1.git3177e06.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "20230731-1.git3177e06.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/cups-libs@2.2.6-54.el8_9?arch=x86_64&epoch=1&upstream=cups-2.2.6-54.el8_9.src.rpm&distro=rhel-8.9&package-id=cacfb6e128bd9d58",
      "cpe": "cpe:2.3:a:cups-libs:cups-libs:1\\:2.2.6-54.el8_9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2 and zlib"
          }
        }
      ],
      "name": "cups-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cups-libs:cups_libs:1\\:2.2.6-54.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cups_libs:cups-libs:1\\:2.2.6-54.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cups_libs:cups_libs:1\\:2.2.6-54.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:cups-libs:1\\:2.2.6-54.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:cups_libs:1\\:2.2.6-54.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cups:cups-libs:1\\:2.2.6-54.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cups:cups_libs:1\\:2.2.6-54.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "1"
        },
        {
          "name": "syft:metadata:release",
          "value": "54.el8_9"
        },
        {
          "name": "syft:metadata:size",
          "value": "947980"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "cups-2.2.6-54.el8_9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/cups-libs@2.2.6-54.el8_9?arch=x86_64&epoch=1&upstream=cups-2.2.6-54.el8_9.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1:2.2.6-54.el8_9"
    },
    {
      "bom-ref": "pkg:maven/org.apache.curator/curator-client@2.7.1?package-id=ffc69178c9ff4205",
      "cpe": "cpe:2.3:a:apache:curator-client:2.7.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a591dfc085db3e9d4d480381cc7e6ae8a26b34af"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.curator",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "curator-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator_client:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/curator-client-2.7.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "curator-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.curator"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/curator-client-2.7.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.curator/curator-client@2.7.1",
      "type": "library",
      "version": "2.7.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.curator/curator-client@5.4.0?package-id=124e3b66cd596892",
      "cpe": "cpe:2.3:a:apache:curator-client:5.4.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a607ca5a06d16d01048fad42dffbd85fdde04a95"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.curator",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "curator-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator_client:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-client-5.4.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "curator-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.curator"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-client-5.4.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.curator/curator-client@5.4.0",
      "type": "library",
      "version": "5.4.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.curator/curator-framework@2.7.1?package-id=1b4aafe6023977ef",
      "cpe": "cpe:2.3:a:apache:curator-framework:2.7.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8c7b1eeb78e43bb91ea737111ba3dec0512be876"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.curator",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "curator-framework",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator_framework:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/curator-framework-2.7.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "curator-framework"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.curator"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/curator-framework-2.7.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.curator/curator-framework@2.7.1",
      "type": "library",
      "version": "2.7.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.curator/curator-framework@5.4.0?package-id=08d425fe61260d00",
      "cpe": "cpe:2.3:a:apache:curator-framework:5.4.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "95b32910374186a72133050dc1a4a5e8c68e982f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.curator",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "curator-framework",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator_framework:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/curator-framework-5.4.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "curator-framework"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.curator"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/curator-framework-5.4.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.curator/curator-framework@5.4.0",
      "type": "library",
      "version": "5.4.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.curator/curator-framework@5.4.0?package-id=afaa87a2c71bc5fa",
      "cpe": "cpe:2.3:a:apache:curator-framework:5.4.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "95b32910374186a72133050dc1a4a5e8c68e982f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.curator",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "curator-framework",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator_framework:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/curator-framework-5.4.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "curator-framework"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.curator"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/curator-framework-5.4.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.curator/curator-framework@5.4.0",
      "type": "library",
      "version": "5.4.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.curator/curator-framework@5.4.0?package-id=540a70b9c599467d",
      "cpe": "cpe:2.3:a:apache:curator-framework:5.4.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "95b32910374186a72133050dc1a4a5e8c68e982f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.curator",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "curator-framework",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator_framework:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-framework-5.4.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "curator-framework"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.curator"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-framework-5.4.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.curator/curator-framework@5.4.0",
      "type": "library",
      "version": "5.4.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.curator/curator-recipes@2.7.1?package-id=e78dd7319e66b6f6",
      "cpe": "cpe:2.3:a:apache:curator-recipes:2.7.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a2c180efc6a38a4f8c9197eb35bb4eb5716cd2fa"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.curator",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "curator-recipes",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator_recipes:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator:2.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/curator-recipes-2.7.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "curator-recipes"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.curator"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/curator-recipes-2.7.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.curator/curator-recipes@2.7.1",
      "type": "library",
      "version": "2.7.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.curator/curator-recipes@5.4.0?package-id=ab628f89b7c7ad61",
      "cpe": "cpe:2.3:a:apache:curator-recipes:5.4.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3f56b12fd498dfdc9a9cbc9232f9a6ba999ae893"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.curator",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "curator-recipes",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator_recipes:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/curator-recipes-5.4.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "curator-recipes"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.curator"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/curator-recipes-5.4.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.curator/curator-recipes@5.4.0",
      "type": "library",
      "version": "5.4.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.curator/curator-recipes@5.4.0?package-id=99d5396a3b0b98fc",
      "cpe": "cpe:2.3:a:apache:curator-recipes:5.4.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3f56b12fd498dfdc9a9cbc9232f9a6ba999ae893"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.curator",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "curator-recipes",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator_recipes:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/curator-recipes-5.4.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "curator-recipes"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.curator"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/curator-recipes-5.4.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.curator/curator-recipes@5.4.0",
      "type": "library",
      "version": "5.4.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.curator/curator-recipes@5.4.0?package-id=88920923f4d20d6f",
      "cpe": "cpe:2.3:a:apache:curator-recipes:5.4.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3f56b12fd498dfdc9a9cbc9232f9a6ba999ae893"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.curator",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "curator-recipes",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator_recipes:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-recipes-5.4.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "curator-recipes"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.curator"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-recipes-5.4.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.curator/curator-recipes@5.4.0",
      "type": "library",
      "version": "5.4.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.curator/curator-x-discovery@5.4.0?package-id=980acdde03ccd113",
      "cpe": "cpe:2.3:a:apache:curator-x-discovery:5.4.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "62d8fe7187fddd1440c07ccc2782519cdb0842d8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.curator",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "curator-x-discovery",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator_x_discovery:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:curator:5.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-x-discovery-5.4.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "curator-x-discovery"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.curator"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-x-discovery-5.4.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.curator/curator-x-discovery@5.4.0",
      "type": "library",
      "version": "5.4.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/curl@7.61.1-33.el8?arch=x86_64&upstream=curl-7.61.1-33.el8.src.rpm&distro=rhel-8.9&package-id=d1ef85bb0d125ec0",
      "cpe": "cpe:2.3:a:redhat:curl:7.61.1-33.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "curl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:curl:curl:7.61.1-33.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "33.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "700909"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "curl-7.61.1-33.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/curl@7.61.1-33.el8?arch=x86_64&upstream=curl-7.61.1-33.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "7.61.1-33.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/cyrus-sasl-lib@2.1.27-6.el8_5?arch=x86_64&upstream=cyrus-sasl-2.1.27-6.el8_5.src.rpm&distro=rhel-8.9&package-id=2eb05b71d6a9e048",
      "cpe": "cpe:2.3:a:cyrus-sasl-lib:cyrus-sasl-lib:2.1.27-6.el8_5:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD with advertising"
          }
        }
      ],
      "name": "cyrus-sasl-lib",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyrus-sasl-lib:cyrus_sasl_lib:2.1.27-6.el8_5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyrus_sasl_lib:cyrus-sasl-lib:2.1.27-6.el8_5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyrus_sasl_lib:cyrus_sasl_lib:2.1.27-6.el8_5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyrus-sasl:cyrus-sasl-lib:2.1.27-6.el8_5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyrus-sasl:cyrus_sasl_lib:2.1.27-6.el8_5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyrus_sasl:cyrus-sasl-lib:2.1.27-6.el8_5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyrus_sasl:cyrus_sasl_lib:2.1.27-6.el8_5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:cyrus-sasl-lib:2.1.27-6.el8_5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:cyrus_sasl_lib:2.1.27-6.el8_5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyrus:cyrus-sasl-lib:2.1.27-6.el8_5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyrus:cyrus_sasl_lib:2.1.27-6.el8_5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el8_5"
        },
        {
          "name": "syft:metadata:size",
          "value": "726122"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "cyrus-sasl-2.1.27-6.el8_5.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/cyrus-sasl-lib@2.1.27-6.el8_5?arch=x86_64&upstream=cyrus-sasl-2.1.27-6.el8_5.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.1.27-6.el8_5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.datasketches/datasketches-java@3.2.0?package-id=9901e307cb66d027",
      "cpe": "cpe:2.3:a:apache:datasketches-java:3.2.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ceb2774dcd51210437a2f139b64d33213bf7f523"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.datasketches",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "datasketches-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:datasketches_java:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:datasketches:3.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/datasketches-java-3.2.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "datasketches-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.datasketches"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/datasketches-java-3.2.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.datasketches/datasketches-java@3.2.0",
      "type": "library",
      "version": "3.2.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.datasketches/datasketches-memory@2.0.0?package-id=05f916398fcae423",
      "cpe": "cpe:2.3:a:apache:datasketches-memory:2.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "163d9f33eaea6c8600cd7cd84e7427e69e15a115"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.datasketches",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "name": "datasketches-memory",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:datasketches_memory:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:datasketches:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/datasketches-memory-2.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "datasketches-memory"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.datasketches"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/datasketches-memory-2.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.datasketches/datasketches-memory@2.0.0",
      "type": "library",
      "version": "2.0.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/dbus-libs@1.12.8-26.el8?arch=x86_64&epoch=1&upstream=dbus-1.12.8-26.el8.src.rpm&distro=rhel-8.9&package-id=feb03d3406c08e21",
      "cpe": "cpe:2.3:a:dbus-libs:dbus-libs:1\\:1.12.8-26.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "(GPLv2+ or AFL) and GPLv2+"
          }
        }
      ],
      "name": "dbus-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dbus-libs:dbus_libs:1\\:1.12.8-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dbus_libs:dbus-libs:1\\:1.12.8-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dbus_libs:dbus_libs:1\\:1.12.8-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:dbus-libs:1\\:1.12.8-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:dbus_libs:1\\:1.12.8-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dbus:dbus-libs:1\\:1.12.8-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dbus:dbus_libs:1\\:1.12.8-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "1"
        },
        {
          "name": "syft:metadata:release",
          "value": "26.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "380760"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "dbus-1.12.8-26.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/dbus-libs@1.12.8-26.el8?arch=x86_64&epoch=1&upstream=dbus-1.12.8-26.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1:1.12.8-26.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/dejavu-fonts-common@2.35-7.el8?arch=noarch&upstream=dejavu-fonts-2.35-7.el8.src.rpm&distro=rhel-8.9&package-id=2b95435cb5ed14bc",
      "cpe": "cpe:2.3:a:dejavu-fonts-common:dejavu-fonts-common:2.35-7.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Bitstream Vera and Public Domain"
          }
        }
      ],
      "name": "dejavu-fonts-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu-fonts-common:dejavu_fonts_common:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu_fonts_common:dejavu-fonts-common:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu_fonts_common:dejavu_fonts_common:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu-fonts:dejavu-fonts-common:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu-fonts:dejavu_fonts_common:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu_fonts:dejavu-fonts-common:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu_fonts:dejavu_fonts_common:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu:dejavu-fonts-common:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu:dejavu_fonts_common:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:dejavu-fonts-common:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:dejavu_fonts_common:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "145939"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "dejavu-fonts-2.35-7.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/dejavu-fonts-common@2.35-7.el8?arch=noarch&upstream=dejavu-fonts-2.35-7.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.35-7.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/dejavu-sans-fonts@2.35-7.el8?arch=noarch&upstream=dejavu-fonts-2.35-7.el8.src.rpm&distro=rhel-8.9&package-id=643e501d2c642534",
      "cpe": "cpe:2.3:a:dejavu-sans-fonts:dejavu-sans-fonts:2.35-7.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Bitstream Vera and Public Domain"
          }
        }
      ],
      "name": "dejavu-sans-fonts",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu-sans-fonts:dejavu_sans_fonts:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu_sans_fonts:dejavu-sans-fonts:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu_sans_fonts:dejavu_sans_fonts:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu-sans:dejavu-sans-fonts:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu-sans:dejavu_sans_fonts:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu_sans:dejavu-sans-fonts:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu_sans:dejavu_sans_fonts:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu:dejavu-sans-fonts:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dejavu:dejavu_sans_fonts:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:dejavu-sans-fonts:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:dejavu_sans_fonts:2.35-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "5644754"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "dejavu-fonts-2.35-7.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/dejavu-sans-fonts@2.35-7.el8?arch=noarch&upstream=dejavu-fonts-2.35-7.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.35-7.el8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.derby.osgi.EmbeddedActivator/derby@10.14.2.0?package-id=e954cdc8b7ad2064",
      "cpe": "cpe:2.3:a:apache:EmbeddedActivator:10.14.2.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7efad40ef52fbb1f08142f07a83b42d29e47d8ce"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "derby",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:derby:10.14.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:osgi:10.14.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/derby-10.14.2.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/derby-10.14.2.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.derby.osgi.EmbeddedActivator/derby@10.14.2.0",
      "type": "library",
      "version": "10.14.2.0"
    },
    {
      "bom-ref": "pkg:maven/derbyclient/derbyclient@10.14.2.0?package-id=23a50124f871373a",
      "cpe": "cpe:2.3:a:derbyclient:derbyclient:10.14.2.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "fdd338d43e09bf7cd16f5523a0f717e5ef79a1a8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "derbyclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/derbyclient-10.14.2.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/derbyclient-10.14.2.0.jar"
        }
      ],
      "purl": "pkg:maven/derbyclient/derbyclient@10.14.2.0",
      "type": "library",
      "version": "10.14.2.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.derby.drda.NetworkServerControl/derbynet@10.14.2.0?package-id=7e8ec77ee74a1aaf",
      "cpe": "cpe:2.3:a:apache:NetworkServerControl:10.14.2.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d03edf879317c7102884c4689e03a4d1a5f84126"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "derbynet",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:derbynet:10.14.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:derby:10.14.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:drda:10.14.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/derbynet-10.14.2.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/derbynet-10.14.2.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.derby.drda.NetworkServerControl/derbynet@10.14.2.0",
      "type": "library",
      "version": "10.14.2.0"
    },
    {
      "bom-ref": "pkg:maven/com.lmax.disruptor/disruptor@3.3.6?package-id=fe68d38c5b32c44d",
      "cpe": "cpe:2.3:a:disruptor:disruptor:3.3.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "09bfca4ee4f691f3737b3f4f006d0c4770f178eb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "disruptor",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lmax:disruptor:3.3.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/disruptor-3.3.6.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/disruptor-3.3.6.jar"
        }
      ],
      "purl": "pkg:maven/com.lmax.disruptor/disruptor@3.3.6",
      "type": "library",
      "version": "3.3.6"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-avro-extensions@26.0.0?package-id=b85f09e99b9db68b",
      "cpe": "cpe:2.3:a:apache:druid-avro-extensions:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0672bd3bb0ed7200be51b779657253887201d51f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-avro-extensions",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_avro_extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/druid-avro-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-avro-extensions"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/druid-avro-extensions-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-avro-extensions@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid/druid-aws-common@26.0.0?package-id=469d4ea3e209225b",
      "cpe": "cpe:2.3:a:apache:druid-aws-common:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "de9be48c9fecf04046a7a282b416d450807530aa"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-aws-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_aws_common:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-aws-common-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-aws-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-aws-common-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid/druid-aws-common@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-aws-rds-extensions@26.0.0?package-id=0dda11b4120f0897",
      "cpe": "cpe:2.3:a:apache:druid-aws-rds-extensions:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bdd96e37e2b2ffa2f93432f4c2a484e5844db9ed"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-aws-rds-extensions",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_aws_rds_extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/druid-aws-rds-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-aws-rds-extensions"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/druid-aws-rds-extensions-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-aws-rds-extensions@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-azure-extensions@26.0.0?package-id=74b7513084b23f54",
      "cpe": "cpe:2.3:a:apache:druid-azure-extensions:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9640d9bd2274b10770e1c9d66090e294a5d44099"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-azure-extensions",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_azure_extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/druid-azure-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-azure-extensions"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/druid-azure-extensions-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-azure-extensions@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-basic-security@26.0.0?package-id=86d3de97e99d474e",
      "cpe": "cpe:2.3:a:apache:druid-basic-security:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "161c03d707416e5aefd4a5794921fbfd96bcd5a9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-basic-security",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_basic_security:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-basic-security/druid-basic-security-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-basic-security"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-basic-security/druid-basic-security-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-basic-security@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-bloom-filter@26.0.0?package-id=24331875a4b40fff",
      "cpe": "cpe:2.3:a:apache:druid-bloom-filter:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b75d3151b7f850c3f939909f1b3cbe67ea01127a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-bloom-filter",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_bloom_filter:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-bloom-filter/druid-bloom-filter-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-bloom-filter"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-bloom-filter/druid-bloom-filter-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-bloom-filter@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-catalog@26.0.0?package-id=d0de0a7be34e92dd",
      "cpe": "cpe:2.3:a:apache:druid-catalog:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1cb0bc0b2fed597488a909b5cd9e38d818b0a524"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-catalog",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_catalog:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-catalog/druid-catalog-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-catalog"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-catalog/druid-catalog-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-catalog@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-datasketches@26.0.0?package-id=c4b0d754e2943af2",
      "cpe": "cpe:2.3:a:apache:druid-datasketches:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1c0aa2aaeb7353030726d061d03d97f76b675ab5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-datasketches",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_datasketches:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-datasketches/druid-datasketches-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-datasketches"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-datasketches/druid-datasketches-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-datasketches@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-ec2-extensions@26.0.0?package-id=dd725eb12de842b6",
      "cpe": "cpe:2.3:a:apache:druid-ec2-extensions:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4a88e2533ec3e1fe6c6ba4af82d64aab7ee6b5cb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-ec2-extensions",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_ec2_extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ec2-extensions/druid-ec2-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-ec2-extensions"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ec2-extensions/druid-ec2-extensions-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-ec2-extensions@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid/druid-gcp-common@26.0.0?package-id=b2570fe1a21a5a57",
      "cpe": "cpe:2.3:a:apache:druid-gcp-common:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a3a54f5575b98cb18ef8398e9dbabe7af517d888"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-gcp-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_gcp_common:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-gcp-common-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-gcp-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-gcp-common-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid/druid-gcp-common@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-google-extensions@26.0.0?package-id=6f4db24458d129a5",
      "cpe": "cpe:2.3:a:apache:druid-google-extensions:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2157376e0dbd7f20686be02314c6f46a73ead1bd"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-google-extensions",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_google_extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-google-extensions/druid-google-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-google-extensions"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-google-extensions/druid-google-extensions-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-google-extensions@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-hdfs-storage@26.0.0?package-id=8a73a01460666751",
      "cpe": "cpe:2.3:a:apache:druid-hdfs-storage:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ce25d59844600a5d4416b5689bfcbc9fbf021543"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-hdfs-storage",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_hdfs_storage:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/druid-hdfs-storage-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-hdfs-storage"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/druid-hdfs-storage-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-hdfs-storage@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-histogram@26.0.0?package-id=d705ea11a300c39a",
      "cpe": "cpe:2.3:a:apache:druid-histogram:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "50adaa6a873f22935a1ba06eb2b478ed079fe5f8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-histogram",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_histogram:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-histogram/druid-histogram-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-histogram"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-histogram/druid-histogram-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-histogram@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid/druid-indexing-hadoop@26.0.0?package-id=36f184bb2348e810",
      "cpe": "cpe:2.3:a:apache:druid-indexing-hadoop:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3a402d01df76b5bce802954cd3de839cbec027a9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-indexing-hadoop",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_indexing_hadoop:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-indexing-hadoop-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-indexing-hadoop"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-indexing-hadoop-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid/druid-indexing-hadoop@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid/druid-indexing-service@26.0.0?package-id=c9b839ad4a501797",
      "cpe": "cpe:2.3:a:apache:druid-indexing-service:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "823e4989f220d78d0dc85121eafb5f47fb454211"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid",
      "name": "druid-indexing-service",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_indexing_service:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-indexing-service-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-indexing-service"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-indexing-service-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid/druid-indexing-service@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-kafka-extraction-namespace@26.0.0?package-id=ba3bd856499068be",
      "cpe": "cpe:2.3:a:apache:druid-kafka-extraction-namespace:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "56dfeebed5c9f495352958bcf5047e052bc176fa"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-kafka-extraction-namespace",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_kafka_extraction_namespace:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/druid-kafka-extraction-namespace-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-kafka-extraction-namespace"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/druid-kafka-extraction-namespace-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-kafka-extraction-namespace@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-kafka-indexing-service@26.0.0?package-id=46dfa9040151ae3a",
      "cpe": "cpe:2.3:a:apache:druid-kafka-indexing-service:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "667da795b4d51f928d1ffb908e6ea324aa6bb227"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-kafka-indexing-service",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_kafka_indexing_service:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-indexing-service/druid-kafka-indexing-service-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-kafka-indexing-service"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-indexing-service/druid-kafka-indexing-service-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-kafka-indexing-service@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-kerberos@26.0.0?package-id=00a41f3a9c9a6b14",
      "cpe": "cpe:2.3:a:apache:druid-kerberos:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9ccd9534b95f1b6398f85a600d53ee438c1fbd74"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-kerberos",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_kerberos:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/druid-kerberos-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-kerberos"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/druid-kerberos-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-kerberos@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-kinesis-indexing-service@26.0.0?package-id=500bda1e1e731220",
      "cpe": "cpe:2.3:a:apache:druid-kinesis-indexing-service:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5a2fcd7d19b547b51a351827024be250773d9eda"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-kinesis-indexing-service",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_kinesis_indexing_service:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/druid-kinesis-indexing-service-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-kinesis-indexing-service"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/druid-kinesis-indexing-service-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-kinesis-indexing-service@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-kubernetes-extensions@26.0.0?package-id=2f2bab261eaafac0",
      "cpe": "cpe:2.3:a:apache:druid-kubernetes-extensions:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f9c10ba5cf3ce6f3809549aaf7661161e18b607b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-kubernetes-extensions",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_kubernetes_extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/druid-kubernetes-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-kubernetes-extensions"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/druid-kubernetes-extensions-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-kubernetes-extensions@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-lookups-cached-global@26.0.0?package-id=fbf9249c0b5d1073",
      "cpe": "cpe:2.3:a:apache:druid-lookups-cached-global:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e9288db7a908541ffa4fd48bb0dc721014a4c059"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-lookups-cached-global",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_lookups_cached_global:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/druid-lookups-cached-global-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-lookups-cached-global"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/druid-lookups-cached-global-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-lookups-cached-global@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-lookups-cached-global@26.0.0?package-id=2650e2f2c8f0a2da",
      "cpe": "cpe:2.3:a:apache:druid-lookups-cached-global:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e9288db7a908541ffa4fd48bb0dc721014a4c059"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-lookups-cached-global",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_lookups_cached_global:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-global/druid-lookups-cached-global-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-lookups-cached-global"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-global/druid-lookups-cached-global-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-lookups-cached-global@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-lookups-cached-single@26.0.0?package-id=f7297f7dba495d84",
      "cpe": "cpe:2.3:a:apache:druid-lookups-cached-single:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "18edc5fa10327e2d036cd79ccbd779120f236d48"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-lookups-cached-single",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_lookups_cached_single:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-single/druid-lookups-cached-single-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-lookups-cached-single"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-single/druid-lookups-cached-single-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-lookups-cached-single@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-multi-stage-query@26.0.0?package-id=71ed690daa076dd2",
      "cpe": "cpe:2.3:a:apache:druid-multi-stage-query:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3ad3bc3d196aa1b602517c0029d1e19edc6e3671"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-multi-stage-query",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_multi_stage_query:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-multi-stage-query/druid-multi-stage-query-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-multi-stage-query"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-multi-stage-query/druid-multi-stage-query-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-multi-stage-query@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/tech.stackable/druid-opa-authorizer@0.5.0?package-id=6052cf4377fce6a0",
      "cpe": "cpe:2.3:a:druid-opa-authorizer:druid-opa-authorizer:0.5.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4ad9cc2cf7b341b0e0e9f83e6cbd0304df7511b9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "tech.stackable",
      "name": "druid-opa-authorizer",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:druid-opa-authorizer:druid_opa_authorizer:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:druid_opa_authorizer:druid-opa-authorizer:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:druid_opa_authorizer:druid_opa_authorizer:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:druid-opa:druid-opa-authorizer:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:druid-opa:druid_opa_authorizer:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:druid_opa:druid-opa-authorizer:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:druid_opa:druid_opa_authorizer:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:druid:druid-opa-authorizer:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:druid:druid_opa_authorizer:0.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/druid-opa-authorizer-0.5.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-opa-authorizer"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "tech.stackable"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/druid-opa-authorizer-0.5.0.jar"
        }
      ],
      "purl": "pkg:maven/tech.stackable/druid-opa-authorizer@0.5.0",
      "type": "library",
      "version": "0.5.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-orc-extensions@26.0.0?package-id=61ca66e9128b09c9",
      "cpe": "cpe:2.3:a:apache:druid-orc-extensions:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ba476225c156fc634affa606c893546513ab5b09"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-orc-extensions",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_orc_extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/druid-orc-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-orc-extensions"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/druid-orc-extensions-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-orc-extensions@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-pac4j@26.0.0?package-id=6bebef7dff8a50b7",
      "cpe": "cpe:2.3:a:apache:druid-pac4j:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9b17808750e5d044490ca5230f5b9eddcdc0bce8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-pac4j",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_pac4j:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/druid-pac4j-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-pac4j"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/druid-pac4j-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-pac4j@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-parquet-extensions@26.0.0?package-id=8644eb2a7adedde7",
      "cpe": "cpe:2.3:a:apache:druid-parquet-extensions:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63e3cc661819680b7d5da80a2b64b7ebe5c09101"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-parquet-extensions",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_parquet_extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/druid-parquet-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-parquet-extensions"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/druid-parquet-extensions-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-parquet-extensions@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid/druid-processing@26.0.0?package-id=989e17fb2296b22f",
      "cpe": "cpe:2.3:a:apache:druid-processing:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a945db1a89ac70bfbb5c972170ee7eee3b6e6ea4"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-processing",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_processing:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-processing-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-processing"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-processing-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid/druid-processing@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-protobuf-extensions@26.0.0?package-id=9b338badb170e36d",
      "cpe": "cpe:2.3:a:apache:druid-protobuf-extensions:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3f51bff111d3dcdccb71878407605ced7b05ecff"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-protobuf-extensions",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_protobuf_extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-protobuf-extensions"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-protobuf-extensions@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-ranger-security@26.0.0?package-id=6a877cc8422e84c3",
      "cpe": "cpe:2.3:a:apache:druid-ranger-security:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2306f7e5cb8bb7eb93f5704ef5de566780847006"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-ranger-security",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_ranger_security:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/druid-ranger-security-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-ranger-security"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/druid-ranger-security-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-ranger-security@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-s3-extensions@26.0.0?package-id=872d0fb24aa9ec6e",
      "cpe": "cpe:2.3:a:apache:druid-s3-extensions:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2d757bc2fe3931403792fa783b71076a7b999178"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-s3-extensions",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_s3_extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:extensions:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/druid-s3-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-s3-extensions"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/druid-s3-extensions-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-s3-extensions@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid/druid-server@26.0.0?package-id=47b2c3d9732420de",
      "cpe": "cpe:2.3:a:apache:druid-server:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6c2226d245f11af148810ed3010c877c713aac06"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-server",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_server:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-server-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-server"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-server-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid/druid-server@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid/druid-services@26.0.0?package-id=c76ec28767c48c9c",
      "cpe": "cpe:2.3:a:apache:druid-services:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "17a6adc6111f0e0c3c12907b61fd95a9fed519bf"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-services",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_services:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-services-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-services"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-services-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid/druid-services@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid/druid-sql@26.0.0?package-id=47f8422dba1c64c0",
      "cpe": "cpe:2.3:a:apache:druid-sql:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e39f35e3250f3becd4e7a33a646384a03504fcd0"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-sql",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_sql:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-sql-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-sql"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/druid-sql-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid/druid-sql@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/druid-stats@26.0.0?package-id=418304bce84ee358",
      "cpe": "cpe:2.3:a:apache:druid-stats:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "860d809333645220bc3737844fd7276400767be7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "druid-stats",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid_stats:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:druid:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-stats/druid-stats-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "druid-stats"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-stats/druid-stats-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/druid-stats@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.persistence/eclipselink@2.5.2?package-id=a397762b4ed2011b",
      "cpe": "cpe:2.3:a:eclipse-org---eclipselink-project:eclipselink:2.5.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cd2211635f3011e300ca8fedc1ce0e1cf61c175b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "eclipselink",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-org---eclipselink-project:persistence:2.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_org___eclipselink_project:eclipselink:2.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_org___eclipselink_project:persistence:2.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipselink:eclipselink:2.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipselink:persistence:2.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:persistence:eclipselink:2.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:persistence:persistence:2.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:eclipselink:2.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:persistence:2.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/eclipselink-2.5.2.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/eclipselink-2.5.2.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.persistence/eclipselink@2.5.2",
      "type": "library",
      "version": "2.5.2"
    },
    {
      "bom-ref": "pkg:rpm/rhel/elfutils-libelf@0.189-3.el8?arch=x86_64&upstream=elfutils-0.189-3.el8.src.rpm&distro=rhel-8.9&package-id=ca89f347f451df0a",
      "cpe": "cpe:2.3:a:elfutils-libelf:elfutils-libelf:0.189-3.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+ or LGPLv3+"
          }
        }
      ],
      "name": "elfutils-libelf",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:elfutils-libelf:elfutils_libelf:0.189-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:elfutils_libelf:elfutils-libelf:0.189-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:elfutils_libelf:elfutils_libelf:0.189-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:elfutils:elfutils-libelf:0.189-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:elfutils:elfutils_libelf:0.189-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:elfutils-libelf:0.189-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:elfutils_libelf:0.189-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "1023869"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "elfutils-0.189-3.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/elfutils-libelf@0.189-3.el8?arch=x86_64&upstream=elfutils-0.189-3.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "0.189-3.el8"
    },
    {
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0?package-id=3811802e8a3b36c4",
      "cpe": "cpe:2.3:a:error-prone-annotations:error-prone-annotations:2.11.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c5a0ace696d3f8b1c1d8cc036d8c03cc0cbe6b69"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.errorprone",
      "licenses": [
        {
          "license": {
            "name": "Apache 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "error_prone_annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone-annotations:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone-annotations:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/error_prone_annotations-2.11.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "error_prone_annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.errorprone"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/error_prone_annotations-2.11.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0",
      "type": "library",
      "version": "2.11.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0?package-id=205a91c7d9831980",
      "cpe": "cpe:2.3:a:error-prone-annotations:error-prone-annotations:2.11.0:*:*:*:*:*:*:*",
      "group": "com.google.errorprone",
      "licenses": [
        {
          "license": {
            "name": "Apache 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "error_prone_annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone-annotations:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "error_prone_annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.errorprone"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:com.google.errorprone:error_prone_annotations"
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0",
      "type": "library",
      "version": "2.11.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0?package-id=a509a89ef06a1c34",
      "cpe": "cpe:2.3:a:error-prone-annotations:error-prone-annotations:2.11.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c5a0ace696d3f8b1c1d8cc036d8c03cc0cbe6b69"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.errorprone",
      "licenses": [
        {
          "license": {
            "name": "Apache 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "error_prone_annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone-annotations:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone-annotations:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:error-prone-annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:error_prone_annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:annotations:2.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/error_prone_annotations-2.11.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "error_prone_annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.errorprone"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/error_prone_annotations-2.11.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.11.0",
      "type": "library",
      "version": "2.11.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.5.1?package-id=6df1c245cdc851df",
      "cpe": "cpe:2.3:a:error-prone-annotations:error-prone-annotations:2.5.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "562d366678b89ce5d6b6b82c1a073880341e3fba"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.errorprone",
      "licenses": [
        {
          "license": {
            "name": "Apache 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "error_prone_annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone-annotations:error_prone_annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:error-prone-annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:error_prone_annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:error-prone-annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:error_prone_annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone-annotations:annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:error-prone-annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:error_prone_annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:error-prone-annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:error_prone_annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone_annotations:annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:error-prone-annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:error_prone_annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:error-prone-annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:error_prone_annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:error-prone-annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:error_prone_annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error-prone:annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error_prone:annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:errorprone:annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:error:annotations:2.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/error_prone_annotations-2.5.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "error_prone_annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.errorprone"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/error_prone_annotations-2.5.1.jar"
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.5.1",
      "type": "library",
      "version": "2.5.1"
    },
    {
      "bom-ref": "pkg:maven/com.esri.geometry/esri-geometry-api@2.2.0?package-id=632889da0f84bdb2",
      "cpe": "cpe:2.3:a:esri-geometry-api:esri-geometry-api:2.2.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2663f80d28c2470630a996464d6130b2809c9dbe"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.esri.geometry",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "esri-geometry-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esri-geometry-api:esri_geometry_api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esri_geometry_api:esri-geometry-api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esri_geometry_api:esri_geometry_api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esri-geometry:esri-geometry-api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esri-geometry:esri_geometry_api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esri_geometry:esri-geometry-api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esri_geometry:esri_geometry_api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:geometry:esri-geometry-api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:geometry:esri_geometry_api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esri:esri-geometry-api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esri:esri_geometry_api:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/esri-geometry-api-2.2.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "esri-geometry-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.esri.geometry"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/esri-geometry-api-2.2.0.jar"
        }
      ],
      "purl": "pkg:maven/com.esri.geometry/esri-geometry-api@2.2.0",
      "type": "library",
      "version": "2.2.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/expat@2.2.5-11.el8?arch=x86_64&upstream=expat-2.2.5-11.el8.src.rpm&distro=rhel-8.9&package-id=b877de2f576593a8",
      "cpe": "cpe:2.3:a:redhat:expat:2.2.5-11.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "expat",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:expat:expat:2.2.5-11.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "11.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "315276"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "expat-2.2.5-11.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/expat@2.2.5-11.el8?arch=x86_64&upstream=expat-2.2.5-11.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.2.5-11.el8"
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/failureaccess@1.0.1?package-id=89e8995435cc3f92",
      "cpe": "cpe:2.3:a:failureaccess:failureaccess:1.0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.guava",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "failureaccess",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:failureaccess:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:failureaccess:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/failureaccess-1.0.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "failureaccess"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/failureaccess-1.0.1.jar"
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.1",
      "type": "library",
      "version": "1.0.1"
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/failureaccess@1.0.1?package-id=5024a93fbbdfd985",
      "cpe": "cpe:2.3:a:failureaccess:failureaccess:1.0.1:*:*:*:*:*:*:*",
      "group": "com.google.guava",
      "name": "failureaccess",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:failureaccess:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:failureaccess:1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-client-5.4.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "failureaccess"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-client-5.4.0.jar:com.google.guava:failureaccess"
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.1",
      "type": "library",
      "version": "1.0.1"
    },
    {
      "bom-ref": "pkg:maven/fastutil/fastutil@8.5.4?package-id=7f221fdb142574d3",
      "cpe": "cpe:2.3:a:fastutil:fastutil:8.5.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "799748e42a644db85394db066af658809f89c523"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "fastutil",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/fastutil-8.5.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/fastutil-8.5.4.jar"
        }
      ],
      "purl": "pkg:maven/fastutil/fastutil@8.5.4",
      "type": "library",
      "version": "8.5.4"
    },
    {
      "bom-ref": "pkg:maven/fastutil-core/fastutil-core@8.5.4?package-id=6354ed165d7d778f",
      "cpe": "cpe:2.3:a:fastutil-core:fastutil-core:8.5.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c693557ee87e311340eb0f8a811b8bca027af421"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "fastutil-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastutil-core:fastutil_core:8.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastutil_core:fastutil-core:8.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastutil_core:fastutil_core:8.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastutil:fastutil-core:8.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastutil:fastutil_core:8.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/fastutil-core-8.5.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/fastutil-core-8.5.4.jar"
        }
      ],
      "purl": "pkg:maven/fastutil-core/fastutil-core@8.5.4",
      "type": "library",
      "version": "8.5.4"
    },
    {
      "bom-ref": "pkg:maven/fastutil-extra/fastutil-extra@8.5.4?package-id=39f20fe2822ed370",
      "cpe": "cpe:2.3:a:fastutil-extra:fastutil-extra:8.5.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "912b86862ad070dd3d21f51e05e361eba1f515da"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "fastutil-extra",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastutil-extra:fastutil_extra:8.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastutil_extra:fastutil-extra:8.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastutil_extra:fastutil_extra:8.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastutil:fastutil-extra:8.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastutil:fastutil_extra:8.5.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/fastutil-extra-8.5.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/fastutil-extra-8.5.4.jar"
        }
      ],
      "purl": "pkg:maven/fastutil-extra/fastutil-extra@8.5.4",
      "type": "library",
      "version": "8.5.4"
    },
    {
      "bom-ref": "pkg:rpm/rhel/file-libs@5.33-25.el8?arch=x86_64&upstream=file-5.33-25.el8.src.rpm&distro=rhel-8.9&package-id=42a354110ae20db7",
      "cpe": "cpe:2.3:a:file-libs:file-libs:5.33-25.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "file-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file-libs:file_libs:5.33-25.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file_libs:file-libs:5.33-25.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file_libs:file_libs:5.33-25.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:file-libs:5.33-25.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:file_libs:5.33-25.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file:file-libs:5.33-25.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:file:file_libs:5.33-25.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "25.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "6386562"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "file-5.33-25.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/file-libs@5.33-25.el8?arch=x86_64&upstream=file-5.33-25.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "5.33-25.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/filesystem@3.8-6.el8?arch=x86_64&upstream=filesystem-3.8-6.el8.src.rpm&distro=rhel-8.9&package-id=64ff4fe5b9771290",
      "cpe": "cpe:2.3:a:filesystem:filesystem:3.8-6.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "filesystem",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:filesystem:3.8-6.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "0"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "filesystem-3.8-6.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/filesystem@3.8-6.el8?arch=x86_64&upstream=filesystem-3.8-6.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.8-6.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/findutils@4.6.0-21.el8?arch=x86_64&epoch=1&upstream=findutils-4.6.0-21.el8.src.rpm&distro=rhel-8.9&package-id=1046d5fc39da7268",
      "cpe": "cpe:2.3:a:findutils:findutils:1\\:4.6.0-21.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+"
          }
        }
      ],
      "name": "findutils",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:findutils:1\\:4.6.0-21.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "1"
        },
        {
          "name": "syft:metadata:release",
          "value": "21.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "1768873"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "findutils-4.6.0-21.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/findutils@4.6.0-21.el8?arch=x86_64&epoch=1&upstream=findutils-4.6.0-21.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1:4.6.0-21.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/fontconfig@2.13.1-4.el8?arch=x86_64&upstream=fontconfig-2.13.1-4.el8.src.rpm&distro=rhel-8.9&package-id=d206dbb9b65bc590",
      "cpe": "cpe:2.3:a:fontconfig:fontconfig:2.13.1-4.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "MIT and Public Domain and UCD"
          }
        }
      ],
      "name": "fontconfig",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:fontconfig:2.13.1-4.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "4.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "710897"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "fontconfig-2.13.1-4.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/fontconfig@2.13.1-4.el8?arch=x86_64&upstream=fontconfig-2.13.1-4.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.13.1-4.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/fontpackages-filesystem@1.44-22.el8?arch=noarch&upstream=fontpackages-1.44-22.el8.src.rpm&distro=rhel-8.9&package-id=315016418283d1df",
      "cpe": "cpe:2.3:a:fontpackages-filesystem:fontpackages-filesystem:1.44-22.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "fontpackages-filesystem",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fontpackages-filesystem:fontpackages_filesystem:1.44-22.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fontpackages_filesystem:fontpackages-filesystem:1.44-22.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fontpackages_filesystem:fontpackages_filesystem:1.44-22.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fontpackages:fontpackages-filesystem:1.44-22.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fontpackages:fontpackages_filesystem:1.44-22.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:fontpackages-filesystem:1.44-22.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:fontpackages_filesystem:1.44-22.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "22.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "0"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "fontpackages-1.44-22.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/fontpackages-filesystem@1.44-22.el8?arch=noarch&upstream=fontpackages-1.44-22.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.44-22.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/freetype@2.9.1-9.el8?arch=x86_64&upstream=freetype-2.9.1-9.el8.src.rpm&distro=rhel-8.9&package-id=9f99a3e4bb11f6b1",
      "cpe": "cpe:2.3:a:freetype:freetype:2.9.1-9.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "(FTL or GPLv2+) and BSD and MIT and Public Domain and zlib with acknowledgement"
          }
        }
      ],
      "name": "freetype",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:freetype:2.9.1-9.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "9.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "812023"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "freetype-2.9.1-9.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/freetype@2.9.1-9.el8?arch=x86_64&upstream=freetype-2.9.1-9.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.9.1-9.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gawk@4.2.1-4.el8?arch=x86_64&upstream=gawk-4.2.1-4.el8.src.rpm&distro=rhel-8.9&package-id=32f96b07df5cef9e",
      "cpe": "cpe:2.3:a:redhat:gawk:4.2.1-4.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+ and GPLv2+ and LGPLv2+ and BSD"
          }
        }
      ],
      "name": "gawk",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gawk:gawk:4.2.1-4.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "4.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "2699774"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gawk-4.2.1-4.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/gawk@4.2.1-4.el8?arch=x86_64&upstream=gawk-4.2.1-4.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "4.2.1-4.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gdbm@1.18-2.el8?arch=x86_64&epoch=1&upstream=gdbm-1.18-2.el8.src.rpm&distro=rhel-8.9&package-id=8e1bc65694083a9a",
      "cpe": "cpe:2.3:a:redhat:gdbm:1\\:1.18-2.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+"
          }
        }
      ],
      "name": "gdbm",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gdbm:gdbm:1\\:1.18-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "1"
        },
        {
          "name": "syft:metadata:release",
          "value": "2.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "389593"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gdbm-1.18-2.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/gdbm@1.18-2.el8?arch=x86_64&epoch=1&upstream=gdbm-1.18-2.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1:1.18-2.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gdbm-libs@1.18-2.el8?arch=x86_64&epoch=1&upstream=gdbm-1.18-2.el8.src.rpm&distro=rhel-8.9&package-id=f5db50ac60914cf9",
      "cpe": "cpe:2.3:a:gdbm-libs:gdbm-libs:1\\:1.18-2.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+"
          }
        }
      ],
      "name": "gdbm-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gdbm-libs:gdbm_libs:1\\:1.18-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gdbm_libs:gdbm-libs:1\\:1.18-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gdbm_libs:gdbm_libs:1\\:1.18-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:gdbm-libs:1\\:1.18-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:gdbm_libs:1\\:1.18-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gdbm:gdbm-libs:1\\:1.18-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gdbm:gdbm_libs:1\\:1.18-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "1"
        },
        {
          "name": "syft:metadata:release",
          "value": "2.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "118440"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gdbm-1.18-2.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/gdbm-libs@1.18-2.el8?arch=x86_64&epoch=1&upstream=gdbm-1.18-2.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1:1.18-2.el8"
    },
    {
      "bom-ref": "pkg:maven/com.kstruct/gethostname4j@0.0.2?package-id=a03be428f66e1a3d",
      "cpe": "cpe:2.3:a:gethostname4j:gethostname4j:0.0.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4302d5a77087fe77df0c4281d963fa55e98af8e6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.kstruct",
      "licenses": [
        {
          "license": {
            "name": "MIT License",
            "url": "http://www.opensource.org/licenses/mit-license.php"
          }
        }
      ],
      "name": "gethostname4j",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kstruct:gethostname4j:0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/gethostname4j-0.0.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "gethostname4j"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.kstruct"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/gethostname4j-0.0.2.jar"
        }
      ],
      "purl": "pkg:maven/com.kstruct/gethostname4j@0.0.2",
      "type": "library",
      "version": "0.0.2"
    },
    {
      "bom-ref": "pkg:rpm/rhel/glib2@2.56.4-161.el8?arch=x86_64&upstream=glib2-2.56.4-161.el8.src.rpm&distro=rhel-8.9&package-id=43aa8811f03c3e1e",
      "cpe": "cpe:2.3:a:redhat:glib2:2.56.4-161.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "glib2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glib2:glib2:2.56.4-161.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "161.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "12279824"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "glib2-2.56.4-161.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/glib2@2.56.4-161.el8?arch=x86_64&upstream=glib2-2.56.4-161.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.56.4-161.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/glibc@2.28-236.el8.7?arch=x86_64&upstream=glibc-2.28-236.el8.7.src.rpm&distro=rhel-8.9&package-id=817dd0283d01467e",
      "cpe": "cpe:2.3:a:redhat:glibc:2.28-236.el8.7:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL"
          }
        }
      ],
      "name": "glibc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc:glibc:2.28-236.el8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "236.el8.7"
        },
        {
          "name": "syft:metadata:size",
          "value": "6717056"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "glibc-2.28-236.el8.7.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/glibc@2.28-236.el8.7?arch=x86_64&upstream=glibc-2.28-236.el8.7.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.28-236.el8.7"
    },
    {
      "bom-ref": "pkg:rpm/rhel/glibc@2.28-236.el8_9.12?arch=x86_64&upstream=glibc-2.28-236.el8_9.12.src.rpm&distro=rhel-8.9&package-id=c7f72dcbb591836c",
      "cpe": "cpe:2.3:a:redhat:glibc:2.28-236.el8_9.12:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL"
          }
        }
      ],
      "name": "glibc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc:glibc:2.28-236.el8_9.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "236.el8_9.12"
        },
        {
          "name": "syft:metadata:size",
          "value": "6717712"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "glibc-2.28-236.el8_9.12.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/glibc@2.28-236.el8_9.12?arch=x86_64&upstream=glibc-2.28-236.el8_9.12.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.28-236.el8_9.12"
    },
    {
      "bom-ref": "pkg:rpm/rhel/glibc-common@2.28-236.el8.7?arch=x86_64&upstream=glibc-2.28-236.el8.7.src.rpm&distro=rhel-8.9&package-id=3703ddd7c830a354",
      "cpe": "cpe:2.3:a:glibc-common:glibc-common:2.28-236.el8.7:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL"
          }
        }
      ],
      "name": "glibc-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc-common:glibc_common:2.28-236.el8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc_common:glibc-common:2.28-236.el8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc_common:glibc_common:2.28-236.el8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:glibc-common:2.28-236.el8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:glibc_common:2.28-236.el8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc:glibc-common:2.28-236.el8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc:glibc_common:2.28-236.el8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "236.el8.7"
        },
        {
          "name": "syft:metadata:size",
          "value": "7997052"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "glibc-2.28-236.el8.7.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/glibc-common@2.28-236.el8.7?arch=x86_64&upstream=glibc-2.28-236.el8.7.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.28-236.el8.7"
    },
    {
      "bom-ref": "pkg:rpm/rhel/glibc-common@2.28-236.el8_9.12?arch=x86_64&upstream=glibc-2.28-236.el8_9.12.src.rpm&distro=rhel-8.9&package-id=540a1d0b9b136178",
      "cpe": "cpe:2.3:a:glibc-common:glibc-common:2.28-236.el8_9.12:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL"
          }
        }
      ],
      "name": "glibc-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc-common:glibc_common:2.28-236.el8_9.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc_common:glibc-common:2.28-236.el8_9.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc_common:glibc_common:2.28-236.el8_9.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:glibc-common:2.28-236.el8_9.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:glibc_common:2.28-236.el8_9.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc:glibc-common:2.28-236.el8_9.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc:glibc_common:2.28-236.el8_9.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "236.el8_9.12"
        },
        {
          "name": "syft:metadata:size",
          "value": "7997076"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "glibc-2.28-236.el8_9.12.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/glibc-common@2.28-236.el8_9.12?arch=x86_64&upstream=glibc-2.28-236.el8_9.12.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.28-236.el8_9.12"
    },
    {
      "bom-ref": "pkg:rpm/rhel/glibc-minimal-langpack@2.28-236.el8.7?arch=x86_64&upstream=glibc-2.28-236.el8.7.src.rpm&distro=rhel-8.9&package-id=f7b9d3b0a189b0dc",
      "cpe": "cpe:2.3:a:glibc-minimal-langpack:glibc-minimal-langpack:2.28-236.el8.7:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL"
          }
        }
      ],
      "name": "glibc-minimal-langpack",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc-minimal-langpack:glibc_minimal_langpack:2.28-236.el8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc_minimal_langpack:glibc-minimal-langpack:2.28-236.el8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc_minimal_langpack:glibc_minimal_langpack:2.28-236.el8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc-minimal:glibc-minimal-langpack:2.28-236.el8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc-minimal:glibc_minimal_langpack:2.28-236.el8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc_minimal:glibc-minimal-langpack:2.28-236.el8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc_minimal:glibc_minimal_langpack:2.28-236.el8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:glibc-minimal-langpack:2.28-236.el8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:glibc_minimal_langpack:2.28-236.el8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc:glibc-minimal-langpack:2.28-236.el8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc:glibc_minimal_langpack:2.28-236.el8.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "236.el8.7"
        },
        {
          "name": "syft:metadata:size",
          "value": "0"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "glibc-2.28-236.el8.7.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/glibc-minimal-langpack@2.28-236.el8.7?arch=x86_64&upstream=glibc-2.28-236.el8.7.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.28-236.el8.7"
    },
    {
      "bom-ref": "pkg:rpm/rhel/glibc-minimal-langpack@2.28-236.el8_9.12?arch=x86_64&upstream=glibc-2.28-236.el8_9.12.src.rpm&distro=rhel-8.9&package-id=aaa6c2fac1ccaee6",
      "cpe": "cpe:2.3:a:glibc-minimal-langpack:glibc-minimal-langpack:2.28-236.el8_9.12:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net and ISC and Public Domain and GFDL"
          }
        }
      ],
      "name": "glibc-minimal-langpack",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc-minimal-langpack:glibc_minimal_langpack:2.28-236.el8_9.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc_minimal_langpack:glibc-minimal-langpack:2.28-236.el8_9.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc_minimal_langpack:glibc_minimal_langpack:2.28-236.el8_9.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc-minimal:glibc-minimal-langpack:2.28-236.el8_9.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc-minimal:glibc_minimal_langpack:2.28-236.el8_9.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc_minimal:glibc-minimal-langpack:2.28-236.el8_9.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc_minimal:glibc_minimal_langpack:2.28-236.el8_9.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:glibc-minimal-langpack:2.28-236.el8_9.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:glibc_minimal_langpack:2.28-236.el8_9.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc:glibc-minimal-langpack:2.28-236.el8_9.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glibc:glibc_minimal_langpack:2.28-236.el8_9.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "236.el8_9.12"
        },
        {
          "name": "syft:metadata:size",
          "value": "0"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "glibc-2.28-236.el8_9.12.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/glibc-minimal-langpack@2.28-236.el8_9.12?arch=x86_64&upstream=glibc-2.28-236.el8_9.12.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.28-236.el8_9.12"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gmp@6.1.2-10.el8?arch=x86_64&epoch=1&upstream=gmp-6.1.2-10.el8.src.rpm&distro=rhel-8.9&package-id=49434353e007d3ef",
      "cpe": "cpe:2.3:a:redhat:gmp:1\\:6.1.2-10.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv3+ or GPLv2+"
          }
        }
      ],
      "name": "gmp",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gmp:gmp:1\\:6.1.2-10.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "1"
        },
        {
          "name": "syft:metadata:release",
          "value": "10.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "1640340"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gmp-6.1.2-10.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/gmp@6.1.2-10.el8?arch=x86_64&epoch=1&upstream=gmp-6.1.2-10.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1:6.1.2-10.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gnupg2@2.2.20-3.el8_6?arch=x86_64&upstream=gnupg2-2.2.20-3.el8_6.src.rpm&distro=rhel-8.9&package-id=7b988ce0217ed708",
      "cpe": "cpe:2.3:a:gnupg2:gnupg2:2.2.20-3.el8_6:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+"
          }
        }
      ],
      "name": "gnupg2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:gnupg2:2.2.20-3.el8_6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el8_6"
        },
        {
          "name": "syft:metadata:size",
          "value": "9919371"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gnupg2-2.2.20-3.el8_6.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/gnupg2@2.2.20-3.el8_6?arch=x86_64&upstream=gnupg2-2.2.20-3.el8_6.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.2.20-3.el8_6"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gnutls@3.6.16-7.el8?arch=x86_64&upstream=gnutls-3.6.16-7.el8.src.rpm&distro=rhel-8.9&package-id=636a89d3fb92e1d5",
      "cpe": "cpe:2.3:a:gnutls:gnutls:3.6.16-7.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+ and LGPLv2+"
          }
        }
      ],
      "name": "gnutls",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:gnutls:3.6.16-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "3007935"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gnutls-3.6.16-7.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/gnutls@3.6.16-7.el8?arch=x86_64&upstream=gnutls-3.6.16-7.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.6.16-7.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gnutls@3.6.16-8.el8_9.1?arch=x86_64&upstream=gnutls-3.6.16-8.el8_9.1.src.rpm&distro=rhel-8.9&package-id=d16220f2aa88c781",
      "cpe": "cpe:2.3:a:gnutls:gnutls:3.6.16-8.el8_9.1:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+ and LGPLv2+"
          }
        }
      ],
      "name": "gnutls",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:gnutls:3.6.16-8.el8_9.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "8.el8_9.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "3008159"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gnutls-3.6.16-8.el8_9.1.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/gnutls@3.6.16-8.el8_9.1?arch=x86_64&upstream=gnutls-3.6.16-8.el8_9.1.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.6.16-8.el8_9.1"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gobject-introspection@1.56.1-1.el8?arch=x86_64&upstream=gobject-introspection-1.56.1-1.el8.src.rpm&distro=rhel-8.9&package-id=63ee1031ab5cbe5f",
      "cpe": "cpe:2.3:a:gobject-introspection:gobject-introspection:1.56.1-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+, LGPLv2+, MIT"
          }
        }
      ],
      "name": "gobject-introspection",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gobject-introspection:gobject_introspection:1.56.1-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gobject_introspection:gobject-introspection:1.56.1-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gobject_introspection:gobject_introspection:1.56.1-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gobject:gobject-introspection:1.56.1-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gobject:gobject_introspection:1.56.1-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:gobject-introspection:1.56.1-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:gobject_introspection:1.56.1-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "876479"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gobject-introspection-1.56.1-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/gobject-introspection@1.56.1-1.el8?arch=x86_64&upstream=gobject-introspection-1.56.1-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.56.1-1.el8"
    },
    {
      "bom-ref": "pkg:maven/com.google.api-client/google-api-client@1.26.0?package-id=1a5da88bb82a1ee7",
      "cpe": "cpe:2.3:a:google-api-client:google-api-client:1.26.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "87019438eb0db88025cfb6cd61cc992b7dfd0306"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.api-client",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "google-api-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-client:google_api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_client:google-api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_client:google_api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api-client:google-api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api-client:google_api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api_client:google-api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api_client:google_api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-client:api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-client:api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api:google-api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api:google_api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api:google-api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api:google_api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_client:api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_client:api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:googleapis:google-api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:googleapis:google_api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:google-api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:google_api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google-api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google_api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api-client:api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api-client:api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api:google-api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api:google_api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api_client:api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api_client:api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api:api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api:api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api:api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api:api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:googleapis:api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:googleapis:api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api:api-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:api:api_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/google-api-client-1.26.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "google-api-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.api-client"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/google-api-client-1.26.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.api-client/google-api-client@1.26.0",
      "type": "library",
      "version": "1.26.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.apis/google-api-services-storage@v1-rev20190523-1.26.0?package-id=0a6dc41047642517",
      "cpe": "cpe:2.3:a:google-api-services-storage:google-api-services-storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*",
      "group": "com.google.apis",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "google-api-services-storage",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-services-storage:google_api_services_storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services_storage:google-api-services-storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services_storage:google_api_services_storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-services:google-api-services-storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-services:google_api_services_storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services:google-api-services-storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services:google_api_services_storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api:google-api-services-storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api:google_api_services_storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api:google-api-services-storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api:google_api_services_storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sonatype:google-api-services-storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sonatype:google_api_services_storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google-api-services-storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google_api_services_storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apis:google-api-services-storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apis:google_api_services_storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oss:google-api-services-storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oss:google_api_services_storage:v1-rev20190523-1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-google-extensions/google-api-services-storage-v1-rev20190523-1.26.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "google-api-services-storage"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.apis"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-google-extensions/google-api-services-storage-v1-rev20190523-1.26.0.jar:com.google.apis:google-api-services-storage"
        }
      ],
      "purl": "pkg:maven/com.google.apis/google-api-services-storage@v1-rev20190523-1.26.0",
      "type": "library",
      "version": "v1-rev20190523-1.26.0"
    },
    {
      "bom-ref": "pkg:maven/google-api-services-storage-v1-rev20190523/google-api-services-storage-v1-rev20190523@1.26.0?package-id=0a6c46b023c59c8f",
      "cpe": "cpe:2.3:a:google-api-services-storage-v1-rev20190523:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "fb8da304ec52a8a4b0d9bf3d39edbbeb0671fb79"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "google-api-services-storage-v1-rev20190523",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-services-storage-v1-rev20190523:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services_storage_v1_rev20190523:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services_storage_v1_rev20190523:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-services-storage-v1:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-services-storage-v1:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services_storage_v1:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services_storage_v1:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-services-storage:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-services-storage:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services_storage:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services_storage:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-services:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api-services:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api_services:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-api:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_api:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google-api-services-storage-v1-rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google_api_services_storage_v1_rev20190523:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-google-extensions/google-api-services-storage-v1-rev20190523-1.26.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-google-extensions/google-api-services-storage-v1-rev20190523-1.26.0.jar"
        }
      ],
      "purl": "pkg:maven/google-api-services-storage-v1-rev20190523/google-api-services-storage-v1-rev20190523@1.26.0",
      "type": "library",
      "version": "1.26.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client@1.26.0?package-id=9e44b2cf0bc1b34f",
      "cpe": "cpe:2.3:a:google-http-client:google-http-client:1.26.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "56b37604d200c1c58af9c5836fab44be685e1f6a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.http-client",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "google-http-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http-client:google_http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http_client:google-http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http_client:google_http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http-client:http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http-client:http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http:google-http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http:google_http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http:google-http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http:google_http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http_client:http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http_client:http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-client:google-http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-client:google_http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_client:google-http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_client:google_http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google-http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google_http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http:http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http:http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http:http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http:http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-client:http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-client:http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:google-http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:google_http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_client:http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_client:http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:http-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:http_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/google-http-client-1.26.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "google-http-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.http-client"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/google-http-client-1.26.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client@1.26.0",
      "type": "library",
      "version": "1.26.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-jackson2@1.26.0?package-id=c38603998c721cb5",
      "cpe": "cpe:2.3:a:google-http-client-jackson2:google-http-client-jackson2:1.26.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "05566e38726feeb9a29d0149818424d1b1a8b970"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.http-client",
      "name": "google-http-client-jackson2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http-client-jackson2:google_http_client_jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http_client_jackson2:google-http-client-jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http_client_jackson2:google_http_client_jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http-client:google-http-client-jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http-client:google_http_client_jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http_client:google-http-client-jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http_client:google_http_client_jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http:google-http-client-jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-http:google_http_client_jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http:google-http-client-jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_http:google_http_client_jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-client:google-http-client-jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http-client:google_http_client_jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_client:google-http-client-jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http_client:google_http_client_jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google-http-client-jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google_http_client_jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:google-http-client-jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:google_http_client_jackson2:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/google-http-client-jackson2-1.26.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "google-http-client-jackson2"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.http-client"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/google-http-client-jackson2-1.26.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-jackson2@1.26.0",
      "type": "library",
      "version": "1.26.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.oauth-client/google-oauth-client@1.26.0?package-id=8f3bf9a90d089837",
      "cpe": "cpe:2.3:a:google-oauth-client:google-oauth-client:1.26.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a4efb7949a9176e2313a98ab5419173939c9ae1b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.oauth-client",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "google-oauth-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-oauth-client:google_oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_oauth_client:google-oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_oauth_client:google_oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-oauth-client:oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-oauth-client:oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-oauth:google-oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-oauth:google_oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_oauth:google-oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_oauth:google_oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_oauth_client:oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_oauth_client:oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth-client:google-oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth-client:google_oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth_client:google-oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth_client:google_oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google-oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:google_oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-oauth:oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google-oauth:oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_oauth:oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google_oauth:oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth-client:oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth-client:oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth:google-oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth:google_oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth_client:oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth_client:oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth:oauth-client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth:oauth_client:1.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/google-oauth-client-1.26.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "google-oauth-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.oauth-client"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/google-oauth-client-1.26.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.oauth-client/google-oauth-client@1.26.0",
      "type": "library",
      "version": "1.26.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gpg-pubkey@d4082792-5b32db75?distro=rhel-8.9&package-id=26d519a4039bf231",
      "cpe": "cpe:2.3:a:gpg-pubkey:gpg-pubkey:d4082792-5b32db75:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "pubkey"
          }
        }
      ],
      "name": "gpg-pubkey",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpg-pubkey:gpg_pubkey:d4082792-5b32db75:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpg_pubkey:gpg-pubkey:d4082792-5b32db75:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpg_pubkey:gpg_pubkey:d4082792-5b32db75:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpg:gpg-pubkey:d4082792-5b32db75:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpg:gpg_pubkey:d4082792-5b32db75:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "5b32db75"
        },
        {
          "name": "syft:metadata:size",
          "value": "0"
        }
      ],
      "purl": "pkg:rpm/rhel/gpg-pubkey@d4082792-5b32db75?distro=rhel-8.9",
      "type": "library",
      "version": "d4082792-5b32db75"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gpg-pubkey@fd431d51-4ae0493b?distro=rhel-8.9&package-id=301b53342b40547c",
      "cpe": "cpe:2.3:a:gpg-pubkey:gpg-pubkey:fd431d51-4ae0493b:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "pubkey"
          }
        }
      ],
      "name": "gpg-pubkey",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpg-pubkey:gpg_pubkey:fd431d51-4ae0493b:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpg_pubkey:gpg-pubkey:fd431d51-4ae0493b:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpg_pubkey:gpg_pubkey:fd431d51-4ae0493b:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpg:gpg-pubkey:fd431d51-4ae0493b:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpg:gpg_pubkey:fd431d51-4ae0493b:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "4ae0493b"
        },
        {
          "name": "syft:metadata:size",
          "value": "0"
        }
      ],
      "purl": "pkg:rpm/rhel/gpg-pubkey@fd431d51-4ae0493b?distro=rhel-8.9",
      "type": "library",
      "version": "fd431d51-4ae0493b"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gpgme@1.13.1-11.el8?arch=x86_64&upstream=gpgme-1.13.1-11.el8.src.rpm&distro=rhel-8.9&package-id=c63da2672a51616a",
      "cpe": "cpe:2.3:a:redhat:gpgme:1.13.1-11.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+ and GPLv3+"
          }
        }
      ],
      "name": "gpgme",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gpgme:gpgme:1.13.1-11.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "11.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "1005040"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gpgme-1.13.1-11.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/gpgme@1.13.1-11.el8?arch=x86_64&upstream=gpgme-1.13.1-11.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.13.1-11.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/grep@3.1-6.el8?arch=x86_64&upstream=grep-3.1-6.el8.src.rpm&distro=rhel-8.9&package-id=716741c8965cdac4",
      "cpe": "cpe:2.3:a:redhat:grep:3.1-6.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+"
          }
        }
      ],
      "name": "grep",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:grep:grep:3.1-6.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "830693"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "grep-3.1-6.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/grep@3.1-6.el8?arch=x86_64&upstream=grep-3.1-6.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.1-6.el8"
    },
    {
      "bom-ref": "pkg:maven/com.google.gson/gson@2.2.4?package-id=221a1b2823b442af",
      "cpe": "cpe:2.3:a:google:gson:2.2.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a60a5e993c98c864010053cb901b7eab25306568"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "gson",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gson:gson:2.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/gson-2.2.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/gson-2.2.4.jar"
        }
      ],
      "purl": "pkg:maven/com.google.gson/gson@2.2.4",
      "type": "library",
      "version": "2.2.4"
    },
    {
      "bom-ref": "pkg:maven/com.google.gson/gson@2.2.4?package-id=1e93779893723538",
      "cpe": "cpe:2.3:a:google:gson:2.2.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a60a5e993c98c864010053cb901b7eab25306568"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "gson",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gson:gson:2.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/gson-2.2.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/gson-2.2.4.jar"
        }
      ],
      "purl": "pkg:maven/com.google.gson/gson@2.2.4",
      "type": "library",
      "version": "2.2.4"
    },
    {
      "bom-ref": "pkg:maven/com.google.gson/gson@2.2.4?package-id=4f0fd2fa07a9c631",
      "cpe": "cpe:2.3:a:google:gson:2.2.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a60a5e993c98c864010053cb901b7eab25306568"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "gson",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gson:gson:2.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/gson-2.2.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/gson-2.2.4.jar"
        }
      ],
      "purl": "pkg:maven/com.google.gson/gson@2.2.4",
      "type": "library",
      "version": "2.2.4"
    },
    {
      "bom-ref": "pkg:maven/com.google.gson/gson@2.3.1?package-id=6cc9fc57153d536c",
      "cpe": "cpe:2.3:a:google:gson:2.3.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ecb6e1f8e4b0e84c4b886c2f14a1500caf309757"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "gson",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gson:gson:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/gson-2.3.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/gson-2.3.1.jar"
        }
      ],
      "purl": "pkg:maven/com.google.gson/gson@2.3.1",
      "type": "library",
      "version": "2.3.1"
    },
    {
      "bom-ref": "pkg:maven/com.google.code.gson/gson@2.8.6?package-id=68f667b67ef7a031",
      "cpe": "cpe:2.3:a:google:gson:2.8.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9180733b7df8542621dc12e21e87557e8c99b8cb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.code.gson",
      "name": "gson",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:code:gson:2.8.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gson:gson:2.8.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/gson-2.8.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "gson"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.code.gson"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/gson-2.8.6.jar"
        }
      ],
      "purl": "pkg:maven/com.google.code.gson/gson@2.8.6",
      "type": "library",
      "version": "2.8.6"
    },
    {
      "bom-ref": "pkg:maven/com.google.code.gson/gson@2.8.9?package-id=1bf354ecf9224e14",
      "cpe": "cpe:2.3:a:google:gson:2.8.9:*:*:*:*:*:*:*",
      "group": "com.google.code.gson",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "gson",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:code:gson:2.8.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gson:gson:2.8.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "gson"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.code.gson"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:com.google.code.gson:gson"
        }
      ],
      "purl": "pkg:maven/com.google.code.gson/gson@2.8.9",
      "type": "library",
      "version": "2.8.9"
    },
    {
      "bom-ref": "pkg:maven/io.gsonfire/gson-fire@1.8.5?package-id=b7d5318f1c165b4e",
      "cpe": "cpe:2.3:a:gson-fire:gson-fire:1.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "907df2bf39d70510951b7bafbf661f286eed90a5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.gsonfire",
      "licenses": [
        {
          "license": {
            "name": "\"Apache-2.0\";link=\"https://www.apache.org/licenses/LICENSE-2.0.txt\""
          }
        }
      ],
      "name": "gson-fire",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gson-fire:gson_fire:1.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gson_fire:gson-fire:1.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gson_fire:gson_fire:1.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gsonfire:gson-fire:1.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gsonfire:gson_fire:1.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gson:gson-fire:1.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gson:gson_fire:1.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/gson-fire-1.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "gson-fire"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.gsonfire"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/gson-fire-1.8.5.jar"
        }
      ],
      "purl": "pkg:maven/io.gsonfire/gson-fire@1.8.5",
      "type": "library",
      "version": "1.8.5"
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/guava@11.0.2?package-id=6d157d0ffcaddc83",
      "cpe": "cpe:2.3:a:google:guava:11.0.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "35a3c69e19d72743cac83778aecbee68680f63eb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.guava",
      "name": "guava",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:guava:11.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/guava-11.0.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "guava"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/guava-11.0.2.jar"
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@11.0.2",
      "type": "library",
      "version": "11.0.2"
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/guava@16.0.1?package-id=699a1fab10a347c4",
      "cpe": "cpe:2.3:a:google:guava:16.0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5fa98cd1a63c99a44dd8d3b77e4762b066a5d0c5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.guava",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guava",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:guava:16.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/guava-16.0.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "guava"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/guava-16.0.1.jar"
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@16.0.1",
      "type": "library",
      "version": "16.0.1"
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/guava@16.0.1?package-id=3f168c0979aaa31c",
      "cpe": "cpe:2.3:a:google:guava:16.0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5fa98cd1a63c99a44dd8d3b77e4762b066a5d0c5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.guava",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guava",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:guava:16.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/guava-16.0.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "guava"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/guava-16.0.1.jar"
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@16.0.1",
      "type": "library",
      "version": "16.0.1"
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/guava@16.0.1?package-id=fb99ef2b0ef1eed3",
      "cpe": "cpe:2.3:a:google:guava:16.0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5fa98cd1a63c99a44dd8d3b77e4762b066a5d0c5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.guava",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guava",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:guava:16.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/guava-16.0.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "guava"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/guava-16.0.1.jar"
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@16.0.1",
      "type": "library",
      "version": "16.0.1"
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/guava@16.0.1?package-id=ee3e6a286d388441",
      "cpe": "cpe:2.3:a:google:guava:16.0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5fa98cd1a63c99a44dd8d3b77e4762b066a5d0c5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.guava",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guava",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:guava:16.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/guava-16.0.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "guava"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/guava-16.0.1.jar"
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@16.0.1",
      "type": "library",
      "version": "16.0.1"
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/guava@30.1.1-jre?package-id=e237a4d1e046f9d2",
      "cpe": "cpe:2.3:a:google:guava:30.1.1-jre:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "87e0fd1df874ea3cbe577702fe6f17068b790fd8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.guava",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guava",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:guava:30.1.1-jre:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/guava-30.1.1-jre.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "guava"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/guava-30.1.1-jre.jar"
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@30.1.1-jre",
      "type": "library",
      "version": "30.1.1-jre"
    },
    {
      "bom-ref": "pkg:maven/com.google.inject/guice@4.1.0?package-id=21b4eca1a7b26457",
      "cpe": "cpe:2.3:a:google:inject:4.1.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "eeb69005da379a10071aa4948c48d89250febb07"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guice",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guice:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:guice:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:guice:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/guice-4.1.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/guice-4.1.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.inject/guice@4.1.0",
      "type": "library",
      "version": "4.1.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.inject/guice@4.1.0?package-id=732ae47ad0274d3a",
      "cpe": "cpe:2.3:a:google:inject:4.1.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "eeb69005da379a10071aa4948c48d89250febb07"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guice",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guice:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:guice:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:guice:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/guice-4.1.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/guice-4.1.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.inject/guice@4.1.0",
      "type": "library",
      "version": "4.1.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.inject.assistedinject/guice-assistedinject@4.1.0?package-id=41dae0b29e2a357b",
      "cpe": "cpe:2.3:a:guice-assistedinject:guice-assistedinject:4.1.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "af799dd7e23e6fe8c988da12314582072b07edcb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guice-assistedinject",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-assistedinject:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_assistedinject:guice-assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_assistedinject:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:assistedinject:guice-assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:assistedinject:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-assistedinject:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_assistedinject:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:assistedinject:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guice-assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-assistedinject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_assistedinject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:guice-assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:guice-assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:assistedinject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/guice-assistedinject-4.1.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-azure-extensions/guice-assistedinject-4.1.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.inject.assistedinject/guice-assistedinject@4.1.0",
      "type": "library",
      "version": "4.1.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.inject.assistedinject/guice-assistedinject@4.1.0?package-id=a941719edec4091a",
      "cpe": "cpe:2.3:a:guice-assistedinject:guice-assistedinject:4.1.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "af799dd7e23e6fe8c988da12314582072b07edcb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guice-assistedinject",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-assistedinject:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_assistedinject:guice-assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_assistedinject:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:assistedinject:guice-assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:assistedinject:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-assistedinject:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_assistedinject:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:assistedinject:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guice-assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-assistedinject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_assistedinject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:guice-assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:guice-assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:guice_assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:assistedinject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:assistedinject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/guice-assistedinject-4.1.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/guice-assistedinject-4.1.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.inject.assistedinject/guice-assistedinject@4.1.0",
      "type": "library",
      "version": "4.1.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.inject.multibindings/guice-multibindings@4.1.0?package-id=01ceecc70b80f51a",
      "cpe": "cpe:2.3:a:guice-multibindings:guice-multibindings:4.1.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3b27257997ac51b0f8d19676f1ea170427e86d51"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guice-multibindings",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-multibindings:guice_multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_multibindings:guice-multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_multibindings:guice_multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-multibindings:multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_multibindings:multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:multibindings:guice-multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:multibindings:guice_multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:multibindings:multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guice-multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guice_multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-multibindings:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_multibindings:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:guice-multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:guice_multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:guice-multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:guice_multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:multibindings:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:multibindings:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/guice-multibindings-4.1.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/guice-multibindings-4.1.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.inject.multibindings/guice-multibindings@4.1.0",
      "type": "library",
      "version": "4.1.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.inject.servlet/guice-servlet@4.1.0?package-id=20c15f1bec0b0396",
      "cpe": "cpe:2.3:a:guice-servlet:guice-servlet:4.1.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "90ac2db772d9b85e2b05417b74f7464bcc061dcb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "guice-servlet",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-servlet:guice_servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_servlet:guice-servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_servlet:guice_servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-servlet:servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_servlet:servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:guice-servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:guice_servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guice-servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guice_servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice-servlet:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice_servlet:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:guice-servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:guice_servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:guice-servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:guice_servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:servlet:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guice:inject:4.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/guice-servlet-4.1.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/guice-servlet-4.1.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.inject.servlet/guice-servlet@4.1.0",
      "type": "library",
      "version": "4.1.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/gzip@1.9-13.el8_5?arch=x86_64&upstream=gzip-1.9-13.el8_5.src.rpm&distro=rhel-8.9&package-id=646f1cc4285def10",
      "cpe": "cpe:2.3:a:redhat:gzip:1.9-13.el8_5:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+ and GFDL"
          }
        }
      ],
      "name": "gzip",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gzip:gzip:1.9-13.el8_5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "13.el8_5"
        },
        {
          "name": "syft:metadata:size",
          "value": "352922"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gzip-1.9-13.el8_5.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/gzip@1.9-13.el8_5?arch=x86_64&upstream=gzip-1.9-13.el8_5.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.9-13.el8_5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-annotations@2.8.5?package-id=f4596011de2e41d2",
      "cpe": "cpe:2.3:a:apache:hadoop-annotations:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3a301159daf9368b05364577c985498857b5c48f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_annotations:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-annotations-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-annotations-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-annotations@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-annotations@2.8.5?package-id=4a2b46a92a8a6aea",
      "cpe": "cpe:2.3:a:apache:hadoop-annotations:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3a301159daf9368b05364577c985498857b5c48f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_annotations:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hadoop-annotations-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hadoop-annotations-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-annotations@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-annotations@2.8.5?package-id=d293bc7cb5aea155",
      "cpe": "cpe:2.3:a:apache:hadoop-annotations:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3a301159daf9368b05364577c985498857b5c48f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_annotations:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/hadoop-annotations-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/hadoop-annotations-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-annotations@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-annotations@2.8.5?package-id=f59e5610b751011d",
      "cpe": "cpe:2.3:a:apache:hadoop-annotations:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3a301159daf9368b05364577c985498857b5c48f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_annotations:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-annotations-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-annotations-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-annotations@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-annotations@2.8.5?package-id=898148378301ad94",
      "cpe": "cpe:2.3:a:apache:hadoop-annotations:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3a301159daf9368b05364577c985498857b5c48f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_annotations:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-annotations-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-annotations-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-annotations@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5?package-id=7cffc0a5eb23852f",
      "cpe": "cpe:2.3:a:apache:hadoop-auth:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63fe1f9d9ef6bdf2cb52dfeb28ed8faf78e4b85c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-auth",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_auth:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-auth-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-auth"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-auth-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5?package-id=c97af91c37a0b4fd",
      "cpe": "cpe:2.3:a:apache:hadoop-auth:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63fe1f9d9ef6bdf2cb52dfeb28ed8faf78e4b85c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-auth",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_auth:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/hadoop-auth-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-auth"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/hadoop-auth-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5?package-id=ce914a19e91e2231",
      "cpe": "cpe:2.3:a:apache:hadoop-auth:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63fe1f9d9ef6bdf2cb52dfeb28ed8faf78e4b85c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-auth",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_auth:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hadoop-auth-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-auth"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hadoop-auth-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5?package-id=f1c6e78a437838a2",
      "cpe": "cpe:2.3:a:apache:hadoop-auth:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63fe1f9d9ef6bdf2cb52dfeb28ed8faf78e4b85c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-auth",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_auth:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/hadoop-auth-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-auth"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/hadoop-auth-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5?package-id=4185b3ad3aacdf8b",
      "cpe": "cpe:2.3:a:apache:hadoop-auth:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63fe1f9d9ef6bdf2cb52dfeb28ed8faf78e4b85c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-auth",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_auth:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-auth-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-auth"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-auth-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5?package-id=388b3454e7fc249f",
      "cpe": "cpe:2.3:a:apache:hadoop-auth:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63fe1f9d9ef6bdf2cb52dfeb28ed8faf78e4b85c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-auth",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_auth:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-auth-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-auth"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-auth-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-auth@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-aws@2.8.5?package-id=d06f637c6f07ef02",
      "cpe": "cpe:2.3:a:apache:hadoop-aws:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ad0b3accf16d34e759af01e0a7349b55b6a649cf"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-aws",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_aws:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-aws-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-aws"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-aws-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-aws@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-client@2.8.5?package-id=b5a3a1467a95c1a6",
      "cpe": "cpe:2.3:a:apache:hadoop-client:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "45e11f6004581e53959bc3d38c4d01dbeb5f4b22"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_client:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-client-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-client-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-client@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-client@2.8.5?package-id=b7de2827d312a96b",
      "cpe": "cpe:2.3:a:apache:hadoop-client:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "45e11f6004581e53959bc3d38c4d01dbeb5f4b22"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_client:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-client-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-client-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-client@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-client@2.8.5?package-id=8b3ffe8b0d7337a4",
      "cpe": "cpe:2.3:a:apache:hadoop-client:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "45e11f6004581e53959bc3d38c4d01dbeb5f4b22"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_client:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-client-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-client-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-client@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5?package-id=bc5430029d7fc497",
      "cpe": "cpe:2.3:a:apache:hadoop-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "376e807b4f9df627b03aeaf85999cd1ffe496f05"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5?package-id=3ce81eab8689cc00",
      "cpe": "cpe:2.3:a:apache:hadoop-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "376e807b4f9df627b03aeaf85999cd1ffe496f05"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/hadoop-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/hadoop-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5?package-id=9f8de9a0019efcfc",
      "cpe": "cpe:2.3:a:apache:hadoop-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "376e807b4f9df627b03aeaf85999cd1ffe496f05"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hadoop-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hadoop-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5?package-id=677d9eec7683adb4",
      "cpe": "cpe:2.3:a:apache:hadoop-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "376e807b4f9df627b03aeaf85999cd1ffe496f05"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/hadoop-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/hadoop-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5?package-id=87f01c4d4dcb9c56",
      "cpe": "cpe:2.3:a:apache:hadoop-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "376e807b4f9df627b03aeaf85999cd1ffe496f05"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5?package-id=b2c63081711f97e9",
      "cpe": "cpe:2.3:a:apache:hadoop-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "376e807b4f9df627b03aeaf85999cd1ffe496f05"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.8.5?package-id=ee9b6ebb4a11dceb",
      "cpe": "cpe:2.3:a:apache:hadoop-hdfs-client:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9d72fa62b01c32f1c0587d53c5005fc49f2bd11c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-hdfs-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_hdfs_client:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-hdfs-client-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-hdfs-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-hdfs-client-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.8.5?package-id=5c8f8dd5b8992ce1",
      "cpe": "cpe:2.3:a:apache:hadoop-hdfs-client:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9d72fa62b01c32f1c0587d53c5005fc49f2bd11c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-hdfs-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_hdfs_client:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hadoop-hdfs-client-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-hdfs-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hadoop-hdfs-client-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.8.5?package-id=472ae483e6186310",
      "cpe": "cpe:2.3:a:apache:hadoop-hdfs-client:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9d72fa62b01c32f1c0587d53c5005fc49f2bd11c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-hdfs-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_hdfs_client:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/hadoop-hdfs-client-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-hdfs-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/hadoop-hdfs-client-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.8.5?package-id=08da5baeee2f1c0b",
      "cpe": "cpe:2.3:a:apache:hadoop-hdfs-client:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9d72fa62b01c32f1c0587d53c5005fc49f2bd11c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-hdfs-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_hdfs_client:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-hdfs-client-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-hdfs-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-hdfs-client-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-hdfs-client@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-app@2.8.5?package-id=fb30e8d2a68ea4c5",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-app:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4d4c3514f45942cd576e8daae07f11239f5627f9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-app",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_app:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-mapreduce-client-app-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-app"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-mapreduce-client-app-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-app@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-app@2.8.5?package-id=581b56f0995e2deb",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-app:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4d4c3514f45942cd576e8daae07f11239f5627f9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-app",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_app:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-mapreduce-client-app-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-app"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-mapreduce-client-app-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-app@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-app@2.8.5?package-id=49a9448fd0d1fd2d",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-app:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4d4c3514f45942cd576e8daae07f11239f5627f9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-app",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_app:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-mapreduce-client-app-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-app"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-mapreduce-client-app-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-app@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-common@2.8.5?package-id=6aa30f8c8892758c",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "41ae839f4c21c04ca46392a5af2b13a2dd6eeec9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-mapreduce-client-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-mapreduce-client-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-common@2.8.5?package-id=0abe8ccb8ecd6e35",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "41ae839f4c21c04ca46392a5af2b13a2dd6eeec9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-mapreduce-client-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-mapreduce-client-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-common@2.8.5?package-id=ae225d74e5ea571a",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "41ae839f4c21c04ca46392a5af2b13a2dd6eeec9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-mapreduce-client-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-mapreduce-client-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.8.5?package-id=6bc0558af15a8ac7",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-core:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c8fd0834b1f10fbebbe8e0e477a4055dc0997f9a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_core:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-mapreduce-client-core-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-mapreduce-client-core-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.8.5?package-id=8f564073c7cc55e4",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-core:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c8fd0834b1f10fbebbe8e0e477a4055dc0997f9a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_core:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hadoop-mapreduce-client-core-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hadoop-mapreduce-client-core-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.8.5?package-id=9d1e01f13fb56d1b",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-core:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c8fd0834b1f10fbebbe8e0e477a4055dc0997f9a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_core:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/hadoop-mapreduce-client-core-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/hadoop-mapreduce-client-core-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.8.5?package-id=79600221c14f50e0",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-core:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c8fd0834b1f10fbebbe8e0e477a4055dc0997f9a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_core:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-mapreduce-client-core-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-mapreduce-client-core-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-jobclient@2.8.5?package-id=2931940a5f12ecc7",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-jobclient:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a01c7f515227979efc96ccbfbc1c8978bc0cbabb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-jobclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_jobclient:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-mapreduce-client-jobclient-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-jobclient"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-mapreduce-client-jobclient-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-jobclient@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-jobclient@2.8.5?package-id=c383ff771e2b3c9b",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-jobclient:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a01c7f515227979efc96ccbfbc1c8978bc0cbabb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-jobclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_jobclient:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-mapreduce-client-jobclient-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-jobclient"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-mapreduce-client-jobclient-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-jobclient@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-jobclient@2.8.5?package-id=5d5ce65a556b2c0b",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-jobclient:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a01c7f515227979efc96ccbfbc1c8978bc0cbabb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-jobclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_jobclient:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-mapreduce-client-jobclient-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-jobclient"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-mapreduce-client-jobclient-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-jobclient@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-shuffle@2.8.5?package-id=864382dcf466e7d4",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-shuffle:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6ce759a7079e2943b641347da618239f0dbe1fe5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-shuffle",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_shuffle:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-mapreduce-client-shuffle-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-shuffle"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-mapreduce-client-shuffle-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-shuffle@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-shuffle@2.8.5?package-id=03e82a30f24580aa",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-shuffle:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6ce759a7079e2943b641347da618239f0dbe1fe5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-shuffle",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_shuffle:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-mapreduce-client-shuffle-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-shuffle"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-mapreduce-client-shuffle-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-shuffle@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-shuffle@2.8.5?package-id=8ddd1b9d73810a1f",
      "cpe": "cpe:2.3:a:apache:hadoop-mapreduce-client-shuffle:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6ce759a7079e2943b641347da618239f0dbe1fe5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-mapreduce-client-shuffle",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_mapreduce_client_shuffle:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-mapreduce-client-shuffle-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-mapreduce-client-shuffle"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-mapreduce-client-shuffle-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-shuffle@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.8.5?package-id=f5331ddf3f69ef7a",
      "cpe": "cpe:2.3:a:apache:hadoop-yarn-api:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "db973263bfdc8c0bb974616898b5e15ecca7df27"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-yarn-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_yarn_api:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-yarn-api-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-yarn-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-yarn-api-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.8.5?package-id=fdb81e8637282a64",
      "cpe": "cpe:2.3:a:apache:hadoop-yarn-api:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "db973263bfdc8c0bb974616898b5e15ecca7df27"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-yarn-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_yarn_api:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-yarn-api-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-yarn-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-yarn-api-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.8.5?package-id=3e158d888b7ea53a",
      "cpe": "cpe:2.3:a:apache:hadoop-yarn-api:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "db973263bfdc8c0bb974616898b5e15ecca7df27"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-yarn-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_yarn_api:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-yarn-api-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-yarn-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-yarn-api-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.8.5?package-id=d5ae9d215b5b521b",
      "cpe": "cpe:2.3:a:apache:hadoop-yarn-client:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e727aab328356525b05bf43e2f1cb6940955a28f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-yarn-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_yarn_client:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-yarn-client-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-yarn-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-yarn-client-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.8.5?package-id=6d5d9a2e599aa469",
      "cpe": "cpe:2.3:a:apache:hadoop-yarn-client:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e727aab328356525b05bf43e2f1cb6940955a28f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-yarn-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_yarn_client:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-yarn-client-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-yarn-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-yarn-client-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.8.5?package-id=9837174caa11c796",
      "cpe": "cpe:2.3:a:apache:hadoop-yarn-client:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e727aab328356525b05bf43e2f1cb6940955a28f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-yarn-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_yarn_client:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-yarn-client-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-yarn-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-yarn-client-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.8.5?package-id=e763c941ac69ed82",
      "cpe": "cpe:2.3:a:apache:hadoop-yarn-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8b98829ab9e688a168629d20504f0a352e81e9fb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-yarn-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_yarn_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-yarn-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-yarn-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-yarn-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-yarn-server-common@2.8.5?package-id=d759be690c432080",
      "cpe": "cpe:2.3:a:apache:hadoop-yarn-server-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bcfe2a6fb2d7a1674c1058e97c943cdbe43c3d71"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-yarn-server-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_yarn_server_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-yarn-server-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-yarn-server-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/hadoop-yarn-server-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-yarn-server-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-yarn-server-common@2.8.5?package-id=dc9783dc0767a0e8",
      "cpe": "cpe:2.3:a:apache:hadoop-yarn-server-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bcfe2a6fb2d7a1674c1058e97c943cdbe43c3d71"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-yarn-server-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_yarn_server_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-yarn-server-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-yarn-server-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/hadoop-yarn-server-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-yarn-server-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-yarn-server-common@2.8.5?package-id=155dc695394fd99b",
      "cpe": "cpe:2.3:a:apache:hadoop-yarn-server-common:2.8.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bcfe2a6fb2d7a1674c1058e97c943cdbe43c3d71"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hadoop",
      "name": "hadoop-yarn-server-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop_yarn_server_common:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hadoop:2.8.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-yarn-server-common-2.8.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hadoop-yarn-server-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hadoop"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/hadoop-yarn-server-common-2.8.5.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hadoop/hadoop-yarn-server-common@2.8.5",
      "type": "library",
      "version": "2.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.hibernate/hibernate-validator@5.2.5.Final?package-id=81398d117bf6ee48",
      "cpe": "cpe:2.3:a:hibernate-validator:hibernate-validator:5.2.5.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c7e539ab701705d82276a599cb1ba222e1433bd8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.hibernate",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "hibernate-validator",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hibernate-validator:hibernate_validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hibernate_validator:hibernate-validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hibernate_validator:hibernate_validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hibernate-validator:validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hibernate:hibernate-validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hibernate:hibernate_validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hibernate_validator:validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validator:hibernate-validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validator:hibernate_validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hibernate:validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validator:validator:5.2.5.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/hibernate-validator-5.2.5.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hibernate-validator"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.hibernate"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/hibernate-validator-5.2.5.Final.jar"
        }
      ],
      "purl": "pkg:maven/org.hibernate/hibernate-validator@5.2.5.Final",
      "type": "library",
      "version": "5.2.5.Final"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?package-id=23b39e343fc95669",
      "cpe": "cpe:2.3:a:apache:hive-storage-api:2.8.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4b151bcdfe290542f27a442ed09be99f815f88e8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hive",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "hive-storage-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hive_storage_api:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hive:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-bloom-filter/hive-storage-api-2.8.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hive-storage-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hive"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-bloom-filter/hive-storage-api-2.8.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hive/hive-storage-api@2.8.1",
      "type": "library",
      "version": "2.8.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?package-id=7cec2ace5aad4558",
      "cpe": "cpe:2.3:a:apache:hive-storage-api:2.8.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4b151bcdfe290542f27a442ed09be99f815f88e8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.hive",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "hive-storage-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hive_storage_api:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:hive:2.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hive-storage-api-2.8.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "hive-storage-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.hive"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/hive-storage-api-2.8.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.hive/hive-storage-api@2.8.1",
      "type": "library",
      "version": "2.8.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.htrace/htrace-core4@4.0.1-incubating?package-id=4cea65a41eb7e9a4",
      "cpe": "cpe:2.3:a:apache:htrace-core4:4.0.1-incubating:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f4ef727cb4675788ac66f48e217020acc1690960"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.htrace",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "htrace-core4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:htrace_core4:4.0.1-incubating:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:htrace:4.0.1-incubating:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "htrace-core4"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.htrace"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/htrace-core4-4.0.1-incubating.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.htrace/htrace-core4@4.0.1-incubating",
      "type": "library",
      "version": "4.0.1-incubating"
    },
    {
      "bom-ref": "pkg:maven/org.apache.htrace/htrace-core4@4.0.1-incubating?package-id=834b3ffa8e71138f",
      "cpe": "cpe:2.3:a:apache:htrace-core4:4.0.1-incubating:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f4ef727cb4675788ac66f48e217020acc1690960"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.htrace",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "htrace-core4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:htrace_core4:4.0.1-incubating:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:htrace:4.0.1-incubating:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "htrace-core4"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.htrace"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/htrace-core4-4.0.1-incubating.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.htrace/htrace-core4@4.0.1-incubating",
      "type": "library",
      "version": "4.0.1-incubating"
    },
    {
      "bom-ref": "pkg:maven/org.apache.htrace/htrace-core4@4.0.1-incubating?package-id=a7dcb44cc8a8ad19",
      "cpe": "cpe:2.3:a:apache:htrace-core4:4.0.1-incubating:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f4ef727cb4675788ac66f48e217020acc1690960"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.htrace",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "htrace-core4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:htrace_core4:4.0.1-incubating:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:htrace:4.0.1-incubating:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "htrace-core4"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.htrace"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/htrace-core4-4.0.1-incubating.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.htrace/htrace-core4@4.0.1-incubating",
      "type": "library",
      "version": "4.0.1-incubating"
    },
    {
      "bom-ref": "pkg:maven/org.apache.htrace/htrace-core4@4.0.1-incubating?package-id=332cf15029114cf4",
      "cpe": "cpe:2.3:a:apache:htrace-core4:4.0.1-incubating:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f4ef727cb4675788ac66f48e217020acc1690960"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.htrace",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "htrace-core4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:htrace_core4:4.0.1-incubating:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:htrace:4.0.1-incubating:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "htrace-core4"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.htrace"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/htrace-core4-4.0.1-incubating.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.htrace/htrace-core4@4.0.1-incubating",
      "type": "library",
      "version": "4.0.1-incubating"
    },
    {
      "bom-ref": "pkg:maven/org.apache.htrace/htrace-core4@4.0.1-incubating?package-id=80a3c10cd81da7c8",
      "cpe": "cpe:2.3:a:apache:htrace-core4:4.0.1-incubating:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f4ef727cb4675788ac66f48e217020acc1690960"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.htrace",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "htrace-core4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:htrace_core4:4.0.1-incubating:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:htrace:4.0.1-incubating:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "htrace-core4"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.htrace"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/htrace-core4-4.0.1-incubating.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.htrace/htrace-core4@4.0.1-incubating",
      "type": "library",
      "version": "4.0.1-incubating"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?package-id=f3ef7288092125cb",
      "cpe": "cpe:2.3:a:apache:httpclient:4.5.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "httpclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/httpclient-4.5.13.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpclient"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/httpclient-4.5.13.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13",
      "type": "library",
      "version": "4.5.13"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?package-id=377abdb9113289db",
      "cpe": "cpe:2.3:a:apache:httpclient:4.5.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "httpclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/httpclient-4.5.13.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpclient"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/httpclient-4.5.13.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13",
      "type": "library",
      "version": "4.5.13"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?package-id=90dcfff8af1154e6",
      "cpe": "cpe:2.3:a:apache:httpclient:4.5.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "httpclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/httpclient-4.5.13.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpclient"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/httpclient-4.5.13.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13",
      "type": "library",
      "version": "4.5.13"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?package-id=4338a4da6199f4bb",
      "cpe": "cpe:2.3:a:apache:httpclient:4.5.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "httpclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/httpclient-4.5.13.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpclient"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/httpclient-4.5.13.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13",
      "type": "library",
      "version": "4.5.13"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?package-id=24c08637e78f0135",
      "cpe": "cpe:2.3:a:apache:httpclient:4.5.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "httpclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/httpclient-4.5.13.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpclient"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/httpclient-4.5.13.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13",
      "type": "library",
      "version": "4.5.13"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.2?package-id=fdb63cf7cdf7d8dc",
      "cpe": "cpe:2.3:a:apache:httpclient:4.5.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "733db77aa8d9b2d68015189df76ab06304406e50"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "httpclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/httpclient-4.5.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpclient"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/httpclient-4.5.2.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.2",
      "type": "library",
      "version": "4.5.2"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11?package-id=10a49e556f16b30d",
      "cpe": "cpe:2.3:a:apache:httpcore:4.4.11:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "de748cf874e4e193b42eceea9fe5574fabb9d4df"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "httpcore",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/httpcore-4.4.11.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpcore"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/httpcore-4.4.11.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11",
      "type": "library",
      "version": "4.4.11"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11?package-id=c9ebd5c6acee8572",
      "cpe": "cpe:2.3:a:apache:httpcore:4.4.11:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "de748cf874e4e193b42eceea9fe5574fabb9d4df"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "httpcore",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/httpcore-4.4.11.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpcore"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/httpcore-4.4.11.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11",
      "type": "library",
      "version": "4.4.11"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11?package-id=80427095d86d41c4",
      "cpe": "cpe:2.3:a:apache:httpcore:4.4.11:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "de748cf874e4e193b42eceea9fe5574fabb9d4df"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "httpcore",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/httpcore-4.4.11.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpcore"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/httpcore-4.4.11.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11",
      "type": "library",
      "version": "4.4.11"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11?package-id=bdd1da65e23363ab",
      "cpe": "cpe:2.3:a:apache:httpcore:4.4.11:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "de748cf874e4e193b42eceea9fe5574fabb9d4df"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "httpcore",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/httpcore-4.4.11.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpcore"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/httpcore-4.4.11.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11",
      "type": "library",
      "version": "4.4.11"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11?package-id=40391b05cfc10da6",
      "cpe": "cpe:2.3:a:apache:httpcore:4.4.11:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "de748cf874e4e193b42eceea9fe5574fabb9d4df"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "httpcore",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/httpcore-4.4.11.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpcore"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/httpcore-4.4.11.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.11",
      "type": "library",
      "version": "4.4.11"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.4?package-id=6c703b5b143fbd53",
      "cpe": "cpe:2.3:a:apache:httpcore:4.4.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b31526a230871fbe285fbcbe2813f9c0839ae9b0"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "name": "httpcore",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/httpcore-4.4.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpcore"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/httpcore-4.4.4.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.4",
      "type": "library",
      "version": "4.4.4"
    },
    {
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.3?package-id=404abce8064d8556",
      "cpe": "cpe:2.3:a:apache:httpmime:4.5.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "889fd6d061bb63b99dd5c6aba35a555ae863de52"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.httpcomponents",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "httpmime",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/httpmime-4.5.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "httpmime"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.httpcomponents"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/httpmime-4.5.3.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.3",
      "type": "library",
      "version": "4.5.3"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.server/i18n@2.0.0-M15?package-id=783e46d2d6e50105",
      "cpe": "cpe:2.3:a:apache:directory:2.0.0-M15:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "71c61c84683152ec2a6a65f3f96fe534e304fa22"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "i18n",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:server:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:i18n:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/apacheds-i18n-2.0.0-M15.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/apacheds-i18n-2.0.0-M15.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.server/i18n@2.0.0-M15",
      "type": "library",
      "version": "2.0.0-M15"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.server/i18n@2.0.0-M15?package-id=123922b4500ee21d",
      "cpe": "cpe:2.3:a:apache:directory:2.0.0-M15:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "71c61c84683152ec2a6a65f3f96fe534e304fa22"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "i18n",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:server:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:i18n:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/apacheds-i18n-2.0.0-M15.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/apacheds-i18n-2.0.0-M15.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.server/i18n@2.0.0-M15",
      "type": "library",
      "version": "2.0.0-M15"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.server/i18n@2.0.0-M15?package-id=e1728a6ec1408c0a",
      "cpe": "cpe:2.3:a:apache:directory:2.0.0-M15:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "71c61c84683152ec2a6a65f3f96fe534e304fa22"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "i18n",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:server:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:i18n:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/apacheds-i18n-2.0.0-M15.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/apacheds-i18n-2.0.0-M15.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.server/i18n@2.0.0-M15",
      "type": "library",
      "version": "2.0.0-M15"
    },
    {
      "bom-ref": "pkg:maven/org.apache.directory.server/i18n@2.0.0-M15?package-id=6e8a5b0d67bea2fd",
      "cpe": "cpe:2.3:a:apache:directory:2.0.0-M15:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "71c61c84683152ec2a6a65f3f96fe534e304fa22"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "i18n",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:server:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:i18n:2.0.0-M15:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/apacheds-i18n-2.0.0-M15.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/apacheds-i18n-2.0.0-M15.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.directory.server/i18n@2.0.0-M15",
      "type": "library",
      "version": "2.0.0-M15"
    },
    {
      "bom-ref": "pkg:maven/com.ibm/icu4j@55.1?package-id=ae66980d48ddcf80",
      "cpe": "cpe:2.3:a:ibm-corporation:icu4j:55.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "670e165010677d0ae8ffaba6f3135895042b63b9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "icu4j",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ibm_corporation:icu4j:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu-project-org:icu4j:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu_project_org:icu4j:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ibm-corporation:icu:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ibm_corporation:icu:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu-project-org:icu:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu_project_org:icu:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu4j:icu4j:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ibm:icu4j:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu4j:icu:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu:icu4j:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ibm:icu:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:icu:icu:55.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/icu4j-55.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/icu4j-55.1.jar"
        }
      ],
      "purl": "pkg:maven/com.ibm/icu4j@55.1",
      "type": "library",
      "version": "55.1"
    },
    {
      "bom-ref": "pkg:rpm/rhel/info@6.5-7.el8?arch=x86_64&upstream=texinfo-6.5-7.el8.src.rpm&distro=rhel-8.9&package-id=0de0ff759c18c1c0",
      "cpe": "cpe:2.3:a:redhat:info:6.5-7.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+"
          }
        }
      ],
      "name": "info",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:info:info:6.5-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "386126"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "texinfo-6.5-7.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/info@6.5-7.el8?arch=x86_64&upstream=texinfo-6.5-7.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "6.5-7.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/inotify-tools@3.14-19.el8?arch=x86_64&upstream=inotify-tools-3.14-19.el8.src.rpm&distro=rhel-8.9&package-id=c9c39e73ba352fc6",
      "cpe": "cpe:2.3:a:fedoraproject:inotify-tools:3.14-19.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2"
          }
        }
      ],
      "name": "inotify-tools",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fedoraproject:inotify_tools:3.14-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inotify-tools:inotify-tools:3.14-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inotify-tools:inotify_tools:3.14-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inotify_tools:inotify-tools:3.14-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inotify_tools:inotify_tools:3.14-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inotify:inotify-tools:3.14-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inotify:inotify_tools:3.14-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "19.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "122996"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "inotify-tools-3.14-19.el8.src.rpm"
        }
      ],
      "publisher": "Fedora Project",
      "purl": "pkg:rpm/rhel/inotify-tools@3.14-19.el8?arch=x86_64&upstream=inotify-tools-3.14-19.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.14-19.el8"
    },
    {
      "bom-ref": "pkg:maven/software.amazon.ion/ion-java@1.0.2?package-id=89271ec68f198a15",
      "cpe": "cpe:2.3:a:ion-java:ion-java:1.0.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ee9dacea7726e495f8352b81c12c23834ffbc564"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "software.amazon.ion",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "ion-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ion-java:ion_java:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ion_java:ion-java:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ion_java:ion_java:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ion:ion-java:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ion:ion_java:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/ion-java-1.0.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "ion-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "software.amazon.ion"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/ion-java-1.0.2.jar"
        }
      ],
      "purl": "pkg:maven/software.amazon.ion/ion-java@1.0.2",
      "type": "library",
      "version": "1.0.2"
    },
    {
      "bom-ref": "pkg:maven/software.amazon.ion/ion-java@1.0.2?package-id=911b3f4d07de59af",
      "cpe": "cpe:2.3:a:ion-java:ion-java:1.0.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ee9dacea7726e495f8352b81c12c23834ffbc564"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "software.amazon.ion",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "ion-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ion-java:ion_java:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ion_java:ion-java:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ion_java:ion_java:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ion:ion-java:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ion:ion_java:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/ion-java-1.0.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "ion-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "software.amazon.ion"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/ion-java-1.0.2.jar"
        }
      ],
      "purl": "pkg:maven/software.amazon.ion/ion-java@1.0.2",
      "type": "library",
      "version": "1.0.2"
    },
    {
      "bom-ref": "pkg:maven/software.amazon.ion/ion-java@1.0.2?package-id=9775e6652cc58f1f",
      "cpe": "cpe:2.3:a:ion-java:ion-java:1.0.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ee9dacea7726e495f8352b81c12c23834ffbc564"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "software.amazon.ion",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "ion-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ion-java:ion_java:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ion_java:ion-java:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ion_java:ion_java:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ion:ion-java:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ion:ion_java:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/ion-java-1.0.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "ion-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "software.amazon.ion"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/ion-java-1.0.2.jar"
        }
      ],
      "purl": "pkg:maven/software.amazon.ion/ion-java@1.0.2",
      "type": "library",
      "version": "1.0.2"
    },
    {
      "bom-ref": "pkg:maven/software.amazon.ion/ion-java@1.0.2?package-id=30239c394df99e7a",
      "cpe": "cpe:2.3:a:ion-java:ion-java:1.0.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ee9dacea7726e495f8352b81c12c23834ffbc564"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "software.amazon.ion",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "ion-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ion-java:ion_java:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ion_java:ion-java:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ion_java:ion_java:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ion:ion-java:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ion:ion_java:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/ion-java-1.0.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "ion-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "software.amazon.ion"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/ion-java-1.0.2.jar"
        }
      ],
      "purl": "pkg:maven/software.amazon.ion/ion-java@1.0.2",
      "type": "library",
      "version": "1.0.2"
    },
    {
      "bom-ref": "pkg:maven/com.github.seancfoley.ipaddress/ipaddress@5.3.4?package-id=6e95e2d090af5291",
      "cpe": "cpe:2.3:a:seancfoley:seancfoley:5.3.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "67613a3a83092588b85b163b9aeb3e87ec46b4ea"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "ipaddress",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ipaddress:seancfoley:5.3.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:seancfoley:ipaddress:5.3.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ipaddress:ipaddress:5.3.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:seancfoley:5.3.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:ipaddress:5.3.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/ipaddress-5.3.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/ipaddress-5.3.4.jar"
        }
      ],
      "purl": "pkg:maven/com.github.seancfoley.ipaddress/ipaddress@5.3.4",
      "type": "library",
      "version": "5.3.4"
    },
    {
      "bom-ref": "pkg:maven/com.sun.xml.bind.jaxb/isorelax@20090621?package-id=fa2db1f7de4d7e03",
      "cpe": "cpe:2.3:a:isorelax:isorelax:20090621:*:*:*:*:*:*:*",
      "group": "com.sun.xml.bind.jaxb",
      "name": "isorelax",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bind:isorelax:20090621:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:isorelax:20090621:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb:isorelax:20090621:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:isorelax:20090621:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xml:isorelax:20090621:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/woodstox-core-6.2.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "isorelax"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.xml.bind.jaxb"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/woodstox-core-6.2.1.jar:com.sun.xml.bind.jaxb:isorelax"
        }
      ],
      "purl": "pkg:maven/com.sun.xml.bind.jaxb/isorelax@20090621",
      "type": "library",
      "version": "20090621"
    },
    {
      "bom-ref": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.7?package-id=409967ff2aedd297",
      "cpe": "cpe:2.3:a:istack-commons-runtime:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c197c86ceec7318b1284bffb49b54226ca774003"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.istack",
      "licenses": [
        {
          "license": {
            "name": "https://glassfish.java.net/public/CDDL+GPL_1_1.html, https://glassfish.java.net/public/CDDL+GPL_1_1.html"
          }
        }
      ],
      "name": "istack-commons-runtime",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack-commons-runtime:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack_commons_runtime:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack_commons_runtime:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-runtime:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-runtime:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_runtime:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_runtime:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack-commons-runtime:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack-commons-runtime:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack_commons_runtime:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack_commons_runtime:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack-commons:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack-commons:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack_commons:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack_commons:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-runtime:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-runtime:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_runtime:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_runtime:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack-commons:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack-commons:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack_commons:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack_commons:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack-commons-runtime:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack_commons_runtime:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:istack-commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:istack_commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons-runtime:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons_runtime:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack-commons:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack_commons:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:commons-runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:commons_runtime:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:commons:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:istack:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:istack:3.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/istack-commons-runtime-3.0.7.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "istack-commons-runtime"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.istack"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/istack-commons-runtime-3.0.7.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.7",
      "type": "library",
      "version": "3.0.7"
    },
    {
      "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@1.1?package-id=ae96c2ae610931d7",
      "cpe": "cpe:2.3:a:j2objc-annotations:j2objc-annotations:1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ed28ded51a8b1c6b112568def5f4b455e6809019"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.j2objc",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "j2objc-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc-annotations:j2objc_annotations:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc_annotations:j2objc-annotations:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc_annotations:j2objc_annotations:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:j2objc-annotations:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:j2objc_annotations:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc-annotations:j2objc:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc:j2objc-annotations:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc:j2objc_annotations:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc_annotations:j2objc:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:j2objc:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc:j2objc:1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/j2objc-annotations-1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "j2objc-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.j2objc"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/j2objc-annotations-1.1.jar"
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@1.1",
      "type": "library",
      "version": "1.1"
    },
    {
      "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?package-id=414c08165356ca12",
      "cpe": "cpe:2.3:a:j2objc-annotations:j2objc-annotations:1.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ba035118bc8bac37d7eff77700720999acd9986d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.j2objc",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "j2objc-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc-annotations:j2objc_annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc_annotations:j2objc-annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc_annotations:j2objc_annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:j2objc-annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:j2objc_annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc-annotations:j2objc:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc:j2objc-annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc:j2objc_annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc_annotations:j2objc:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:j2objc:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc:j2objc:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/j2objc-annotations-1.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "j2objc-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.j2objc"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/j2objc-annotations-1.3.jar"
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@1.3",
      "type": "library",
      "version": "1.3"
    },
    {
      "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?package-id=b445d79a98e02bfd",
      "cpe": "cpe:2.3:a:j2objc-annotations:j2objc-annotations:1.3:*:*:*:*:*:*:*",
      "group": "com.google.j2objc",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "j2objc-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc-annotations:j2objc_annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc_annotations:j2objc-annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc_annotations:j2objc_annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sonatype:j2objc-annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sonatype:j2objc_annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:j2objc-annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:j2objc_annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc-annotations:j2objc:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc:j2objc-annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc:j2objc_annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc_annotations:j2objc:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oss:j2objc-annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oss:j2objc_annotations:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sonatype:j2objc:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:j2objc:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:j2objc:j2objc:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oss:j2objc:1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "j2objc-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.j2objc"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:com.google.j2objc:j2objc-annotations"
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@1.3",
      "type": "library",
      "version": "1.3"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.10.5?package-id=13fa3b7b4b3002e2",
      "cpe": "cpe:2.3:a:jackson-annotations:jackson-annotations:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "33298de8da86f92f8ccd61ced214d3b16f8c531e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.core",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-annotations-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-annotations-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.11.4?package-id=3cd258eb8e73db18",
      "cpe": "cpe:2.3:a:jackson-annotations:jackson-annotations:2.11.4:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson_annotations:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson-annotations:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson_annotations:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-annotations:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_annotations:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-annotations:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_annotations:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-annotations:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_annotations:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-jackson-1.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-jackson-1.12.0.jar:com.fasterxml.jackson.core:jackson-annotations"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.11.4",
      "type": "library",
      "version": "2.11.4"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.3?package-id=c0a0ccd5b0197d75",
      "cpe": "cpe:2.3:a:jackson-annotations:jackson-annotations:2.13.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7198b3aac15285a49e218e08441c5f70af00fc51"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.core",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson_annotations:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson-annotations:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson_annotations:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-annotations:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_annotations:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-annotations:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_annotations:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-annotations:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_annotations:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/jackson-annotations-2.13.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/jackson-annotations-2.13.3.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.3",
      "type": "library",
      "version": "2.13.3"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.4.0?package-id=d7a6faf2b159e933",
      "cpe": "cpe:2.3:a:jackson-annotations:jackson-annotations:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-annotations"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.4.0?package-id=256a43a85ae24f30",
      "cpe": "cpe:2.3:a:jackson-annotations:jackson-annotations:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-annotations"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.4.0?package-id=bec962eef989aa27",
      "cpe": "cpe:2.3:a:jackson-annotations:jackson-annotations:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-annotations"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.4.0?package-id=f6d6a5fa2ae943d0",
      "cpe": "cpe:2.3:a:jackson-annotations:jackson-annotations:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-annotations"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.4.0?package-id=2f5fa1cb91519b97",
      "cpe": "cpe:2.3:a:jackson-annotations:jackson-annotations:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-annotations:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_annotations:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_annotations:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-annotations"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.5?package-id=91ca8f2f8ed13083",
      "cpe": "cpe:2.3:a:jackson-core:jackson-core:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "db2ba27938de7f2d478a97d6abcdaa17cbbd3cea"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.core",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-core-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-core-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.11.4?package-id=64b5c71fbfd94488",
      "cpe": "cpe:2.3:a:jackson-core:jackson-core:2.11.4:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-core:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_core:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-core:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_core:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:core:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:core:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:core:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:core:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-jackson-1.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-jackson-1.12.0.jar:com.fasterxml.jackson.core:jackson-core"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.11.4",
      "type": "library",
      "version": "2.11.4"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3?package-id=96c525a97b01e5f7",
      "cpe": "cpe:2.3:a:jackson-core:jackson-core:2.13.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a27014716e4421684416e5fa83d896ddb87002da"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.core",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/jackson-core-2.13.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/jackson-core-2.13.3.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3",
      "type": "library",
      "version": "2.13.3"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.4.0?package-id=72d62a649872be57",
      "cpe": "cpe:2.3:a:jackson-core:jackson-core:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-core"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.4.0?package-id=a883f4f7acac602a",
      "cpe": "cpe:2.3:a:jackson-core:jackson-core:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-core"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.4.0?package-id=a21cff68164a22fc",
      "cpe": "cpe:2.3:a:jackson-core:jackson-core:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-core"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.4.0?package-id=2bb25ae3f8ff632b",
      "cpe": "cpe:2.3:a:jackson-core:jackson-core:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-core"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.4.0?package-id=b9673a91d0eddbaf",
      "cpe": "cpe:2.3:a:jackson-core:jackson-core:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-core"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/jackson-core-asl/jackson-core-asl@1.9.13?package-id=98db2ebd15e09476",
      "cpe": "cpe:2.3:a:http\\:\\/\\/www-ietf-org\\/rfc\\/rfc4627-txt:jackson-core-asl:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3c304d70f42f832e0a86d45bd437f692129299a4"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-core-asl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www-ietf-org\\/rfc\\/rfc4627-txt:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www_ietf_org\\/rfc\\/rfc4627_txt:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www_ietf_org\\/rfc\\/rfc4627_txt:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core-asl:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core-asl:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core_asl:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core_asl:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jackson-core-asl-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jackson-core-asl-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-core-asl/jackson-core-asl@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/jackson-core-asl/jackson-core-asl@1.9.13?package-id=57d8684157f157ef",
      "cpe": "cpe:2.3:a:http\\:\\/\\/www-ietf-org\\/rfc\\/rfc4627-txt:jackson-core-asl:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3c304d70f42f832e0a86d45bd437f692129299a4"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-core-asl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www-ietf-org\\/rfc\\/rfc4627-txt:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www_ietf_org\\/rfc\\/rfc4627_txt:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www_ietf_org\\/rfc\\/rfc4627_txt:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core-asl:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core-asl:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core_asl:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core_asl:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/jackson-core-asl-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/jackson-core-asl-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-core-asl/jackson-core-asl@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/jackson-core-asl/jackson-core-asl@1.9.13?package-id=f0d4ab45ef87ccea",
      "cpe": "cpe:2.3:a:http\\:\\/\\/www-ietf-org\\/rfc\\/rfc4627-txt:jackson-core-asl:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3c304d70f42f832e0a86d45bd437f692129299a4"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-core-asl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www-ietf-org\\/rfc\\/rfc4627-txt:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www_ietf_org\\/rfc\\/rfc4627_txt:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www_ietf_org\\/rfc\\/rfc4627_txt:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core-asl:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core-asl:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core_asl:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core_asl:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/jackson-core-asl-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/jackson-core-asl-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-core-asl/jackson-core-asl@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/jackson-core-asl/jackson-core-asl@1.9.13?package-id=5c4a669571b0492c",
      "cpe": "cpe:2.3:a:http\\:\\/\\/www-ietf-org\\/rfc\\/rfc4627-txt:jackson-core-asl:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3c304d70f42f832e0a86d45bd437f692129299a4"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-core-asl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www-ietf-org\\/rfc\\/rfc4627-txt:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www_ietf_org\\/rfc\\/rfc4627_txt:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www_ietf_org\\/rfc\\/rfc4627_txt:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core-asl:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core-asl:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core_asl:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core_asl:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jackson-core-asl-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jackson-core-asl-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-core-asl/jackson-core-asl@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/jackson-core-asl/jackson-core-asl@1.9.13?package-id=e37aa02f17375fe1",
      "cpe": "cpe:2.3:a:http\\:\\/\\/www-ietf-org\\/rfc\\/rfc4627-txt:jackson-core-asl:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3c304d70f42f832e0a86d45bd437f692129299a4"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-core-asl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www-ietf-org\\/rfc\\/rfc4627-txt:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www_ietf_org\\/rfc\\/rfc4627_txt:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/www_ietf_org\\/rfc\\/rfc4627_txt:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core-asl:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core-asl:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core_asl:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core_asl:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jackson-core-asl-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jackson-core-asl-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-core-asl/jackson-core-asl@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.5.1?package-id=b42c3e718016ccba",
      "cpe": "cpe:2.3:a:jackson-databind:jackson-databind:2.10.5.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7ff756c3af1fe95cb3cddba9158fc3289ca06387"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.core",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-databind",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson_databind:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson-databind:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson_databind:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-databind:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_databind:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-databind:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_databind:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-databind:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_databind:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.10.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-databind-2.10.5.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-databind"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-databind-2.10.5.1.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.5.1",
      "type": "library",
      "version": "2.10.5.1"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.11.4?package-id=ea2b347f438c58db",
      "cpe": "cpe:2.3:a:jackson-databind:jackson-databind:2.11.4:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-databind",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson_databind:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson-databind:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson_databind:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-databind:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_databind:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-databind:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_databind:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-databind:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_databind:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.11.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-jackson-1.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-databind"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-jackson-1.12.0.jar:com.fasterxml.jackson.core:jackson-databind"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.11.4",
      "type": "library",
      "version": "2.11.4"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3?package-id=011d31d59113dedd",
      "cpe": "cpe:2.3:a:jackson-databind:jackson-databind:2.13.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "56deb9ea2c93a7a556b3afbedd616d342963464e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.core",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-databind",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson_databind:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson-databind:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson_databind:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-databind:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_databind:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-databind:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_databind:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-databind:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_databind:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.13.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/jackson-databind-2.13.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-databind"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/jackson-databind-2.13.3.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3",
      "type": "library",
      "version": "2.13.3"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.0?package-id=7f17540cda3e07a8",
      "cpe": "cpe:2.3:a:jackson-databind:jackson-databind:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-databind"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-databind"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.0?package-id=e711ee70a242de3b",
      "cpe": "cpe:2.3:a:jackson-databind:jackson-databind:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-databind"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-databind"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.0?package-id=af55958ae8bf6a75",
      "cpe": "cpe:2.3:a:jackson-databind:jackson-databind:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-databind"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-databind"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.0?package-id=e78e742510031d2e",
      "cpe": "cpe:2.3:a:jackson-databind:jackson-databind:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-databind"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-databind"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.0?package-id=ddadd9d9afeb7fe2",
      "cpe": "cpe:2.3:a:jackson-databind:jackson-databind:2.4.0:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_databind:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/htrace-core4-4.0.1-incubating.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-databind"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/htrace-core4-4.0.1-incubating.jar:com.fasterxml.jackson.core:jackson-databind"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.0",
      "type": "library",
      "version": "2.4.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.10.5?package-id=9f04db2f21a367a0",
      "cpe": "cpe:2.3:a:jackson-dataformat-cbor:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7aff753250d1f7b93fcf3c17090ec575a03aa0ee"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.dataformat",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-dataformat-cbor",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-cbor:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-cbor:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/jackson-dataformat-cbor-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-dataformat-cbor"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.dataformat"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/jackson-dataformat-cbor-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.10.5?package-id=2c0ca8085e92a680",
      "cpe": "cpe:2.3:a:jackson-dataformat-cbor:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7aff753250d1f7b93fcf3c17090ec575a03aa0ee"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.dataformat",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-dataformat-cbor",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-cbor:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-cbor:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jackson-dataformat-cbor-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-dataformat-cbor"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.dataformat"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jackson-dataformat-cbor-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.10.5?package-id=3e16322aeebf0dcc",
      "cpe": "cpe:2.3:a:jackson-dataformat-cbor:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7aff753250d1f7b93fcf3c17090ec575a03aa0ee"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.dataformat",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-dataformat-cbor",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-cbor:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-cbor:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/jackson-dataformat-cbor-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-dataformat-cbor"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.dataformat"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/jackson-dataformat-cbor-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.10.5?package-id=e61d3df0d7b97302",
      "cpe": "cpe:2.3:a:jackson-dataformat-cbor:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7aff753250d1f7b93fcf3c17090ec575a03aa0ee"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.dataformat",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-dataformat-cbor",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-cbor:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-cbor:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-dataformat-cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_dataformat_cbor:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_cbor:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-dataformat-cbor-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-dataformat-cbor"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.dataformat"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-dataformat-cbor-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-smile@2.10.5?package-id=1856d5c4b29e9cbe",
      "cpe": "cpe:2.3:a:jackson-dataformat-smile:jackson-dataformat-smile:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1b56a4febe8a3d2a2c20f4074ba9385a28d49fb6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.dataformat",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-dataformat-smile",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-smile:jackson_dataformat_smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_smile:jackson-dataformat-smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_smile:jackson_dataformat_smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson-dataformat-smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson_dataformat_smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson-dataformat-smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson_dataformat_smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson-dataformat-smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson_dataformat_smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-dataformat-smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_dataformat_smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-smile:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-dataformat-smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_dataformat_smile:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_smile:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-dataformat-smile-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-dataformat-smile"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.dataformat"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-dataformat-smile-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-smile@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.10.5?package-id=b55a2450ebf7a6b7",
      "cpe": "cpe:2.3:a:jackson-dataformat-xml:jackson-dataformat-xml:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "eb44e5de7ba75ef1b6e2c8caa09b0d5e153cb24f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.dataformat",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-dataformat-xml",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-xml:jackson_dataformat_xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_xml:jackson-dataformat-xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_xml:jackson_dataformat_xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson-dataformat-xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson_dataformat_xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson-dataformat-xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson_dataformat_xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson-dataformat-xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson_dataformat_xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-dataformat-xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_dataformat_xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat-xml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-dataformat-xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_dataformat_xml:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat_xml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dataformat:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-dataformat-xml-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-dataformat-xml"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.dataformat"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-dataformat-xml-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-guava@2.10.5?package-id=7726a83ba46a3439",
      "cpe": "cpe:2.3:a:jackson-datatype-guava:jackson-datatype-guava:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a8b0a978c18ab51006a0ef03ba2b2c156b92b1d8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.datatype",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-datatype-guava",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-datatype-guava:jackson_datatype_guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype_guava:jackson-datatype-guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype_guava:jackson_datatype_guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-datatype:jackson-datatype-guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-datatype:jackson_datatype_guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype:jackson-datatype-guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype:jackson_datatype_guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-datatype-guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_datatype_guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:datatype:jackson-datatype-guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:datatype:jackson_datatype_guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-datatype-guava:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-datatype-guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_datatype_guava:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype_guava:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-datatype:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:datatype:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-datatype-guava-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-datatype-guava"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.datatype"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-datatype-guava-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-guava@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.10.5?package-id=27e787885cb3b569",
      "cpe": "cpe:2.3:a:jackson-datatype-joda:jackson-datatype-joda:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b6ad58040fe4987b8abbdb7a22114382c8df5dda"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.datatype",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-datatype-joda",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-datatype-joda:jackson_datatype_joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype_joda:jackson-datatype-joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype_joda:jackson_datatype_joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-datatype:jackson-datatype-joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-datatype:jackson_datatype_joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype:jackson-datatype-joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype:jackson_datatype_joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-datatype-joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_datatype_joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:datatype:jackson-datatype-joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:datatype:jackson_datatype_joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-datatype-joda:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-datatype-joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_datatype_joda:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype_joda:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-datatype:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_datatype:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:datatype:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-datatype-joda-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-datatype-joda"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.datatype"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-datatype-joda-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/jackson-jaxrs/jackson-jaxrs@1.9.13?package-id=720e0359c4bd2f54",
      "cpe": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-jaxrs:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "534d72d2b9d6199dd531dfb27083dd4844082bba"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-jaxrs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson-jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson_jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson-jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson_jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jackson-jaxrs-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jackson-jaxrs-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-jaxrs/jackson-jaxrs@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/jackson-jaxrs/jackson-jaxrs@1.9.13?package-id=7cac73cdc6ada258",
      "cpe": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-jaxrs:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "534d72d2b9d6199dd531dfb27083dd4844082bba"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-jaxrs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson-jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson_jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson-jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson_jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_jaxrs:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jackson-jaxrs-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jackson-jaxrs-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-jaxrs/jackson-jaxrs@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.10.5?package-id=7f46e5296fcc6a5c",
      "cpe": "cpe:2.3:a:jackson-jaxrs-base:jackson-jaxrs-base:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2c0c330f121ca5396560a692113c8339f7aac9b5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.jaxrs",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-jaxrs-base",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-base:jackson_jaxrs_base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_base:jackson-jaxrs-base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_base:jackson_jaxrs_base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson-jaxrs-base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson_jaxrs_base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson-jaxrs-base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson_jaxrs_base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-jaxrs-base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_jaxrs_base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-base:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-jaxrs-base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_jaxrs_base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_base:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxrs:jackson-jaxrs-base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxrs:jackson_jaxrs_base:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxrs:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-jaxrs-base-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-jaxrs-base"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.jaxrs"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-jaxrs-base-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.10.5?package-id=9aba71100f99f3a4",
      "cpe": "cpe:2.3:a:jackson-jaxrs-json-provider:jackson-jaxrs-json-provider:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e7be01e92f7ef9361118eef78f1974c5f778dd6a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.jaxrs",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-jaxrs-json-provider",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-json-provider:jackson_jaxrs_json_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_json_provider:jackson-jaxrs-json-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_json_provider:jackson_jaxrs_json_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-json:jackson-jaxrs-json-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-json:jackson_jaxrs_json_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_json:jackson-jaxrs-json-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_json:jackson_jaxrs_json_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson-jaxrs-json-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson_jaxrs_json_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson-jaxrs-json-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson_jaxrs_json_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-jaxrs-json-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_jaxrs_json_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-json-provider:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-jaxrs-json-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_jaxrs_json_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_json_provider:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxrs:jackson-jaxrs-json-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxrs:jackson_jaxrs_json_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-json:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_json:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxrs:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-jaxrs-json-provider-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-jaxrs-json-provider"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.jaxrs"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-jaxrs-json-provider-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-smile-provider@2.10.5?package-id=4d927e8de6f7fadb",
      "cpe": "cpe:2.3:a:jackson-jaxrs-smile-provider:jackson-jaxrs-smile-provider:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4999ac1c1afaeec678d8ca0b220378a2e0e34d5b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.jaxrs",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-jaxrs-smile-provider",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-smile-provider:jackson_jaxrs_smile_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_smile_provider:jackson-jaxrs-smile-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_smile_provider:jackson_jaxrs_smile_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-smile:jackson-jaxrs-smile-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-smile:jackson_jaxrs_smile_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_smile:jackson-jaxrs-smile-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_smile:jackson_jaxrs_smile_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson-jaxrs-smile-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson_jaxrs_smile_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson-jaxrs-smile-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson_jaxrs_smile_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-jaxrs-smile-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_jaxrs_smile_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-smile-provider:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-jaxrs-smile-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_jaxrs_smile_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_smile_provider:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxrs:jackson-jaxrs-smile-provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxrs:jackson_jaxrs_smile_provider:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs-smile:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs_smile:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jaxrs:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jaxrs:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxrs:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-jaxrs-smile-provider-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-jaxrs-smile-provider"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.jaxrs"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-jaxrs-smile-provider-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-smile-provider@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/net.thisptr/jackson-jq@0.0.10?package-id=621d06018a50573e",
      "cpe": "cpe:2.3:a:jackson-jq:jackson-jq:0.0.10:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "46cb8029e744ac128d4ce58c944ab21ab7ef3e25"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.thisptr",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-jq",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-jq:jackson_jq:0.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jq:jackson-jq:0.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_jq:jackson_jq:0.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-jq:0.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_jq:0.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:thisptr:jackson-jq:0.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:thisptr:jackson_jq:0.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-jq-0.0.10.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-jq"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.thisptr"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-jq-0.0.10.jar"
        }
      ],
      "purl": "pkg:maven/net.thisptr/jackson-jq@0.0.10",
      "type": "library",
      "version": "0.0.10"
    },
    {
      "bom-ref": "pkg:maven/jackson-mapper-asl/jackson-mapper-asl@1.9.13?package-id=bb1147cf2bd6d954",
      "cpe": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-mapper-asl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper-asl:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper-asl:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper_asl:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper_asl:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jackson-mapper-asl-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jackson-mapper-asl-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-mapper-asl/jackson-mapper-asl@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/jackson-mapper-asl/jackson-mapper-asl@1.9.13?package-id=fac3ba0da95c3723",
      "cpe": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-mapper-asl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper-asl:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper-asl:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper_asl:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper_asl:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/jackson-mapper-asl-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/jackson-mapper-asl-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-mapper-asl/jackson-mapper-asl@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/jackson-mapper-asl/jackson-mapper-asl@1.9.13?package-id=5217569dfd9c2e47",
      "cpe": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-mapper-asl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper-asl:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper-asl:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper_asl:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper_asl:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/jackson-mapper-asl-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/jackson-mapper-asl-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-mapper-asl/jackson-mapper-asl@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/jackson-mapper-asl/jackson-mapper-asl@1.9.13?package-id=9cca5f55029ebc14",
      "cpe": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-mapper-asl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper-asl:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper-asl:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper_asl:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper_asl:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jackson-mapper-asl-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jackson-mapper-asl-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-mapper-asl/jackson-mapper-asl@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/jackson-mapper-asl/jackson-mapper-asl@1.9.13?package-id=4f5b0f86f5a18a90",
      "cpe": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-mapper-asl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper-asl:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper-asl:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper_asl:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper_asl:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-mapper:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_mapper:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_mapper_asl:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jackson-mapper-asl-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jackson-mapper-asl-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-mapper-asl/jackson-mapper-asl@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-guice@2.10.5?package-id=ae48fa6470ad8cfa",
      "cpe": "cpe:2.3:a:jackson-module-guice:jackson-module-guice:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "164b0b57c10aca54da56db811e965e8b22679af2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.module",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-module-guice",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module-guice:jackson_module_guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module_guice:jackson-module-guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module_guice:jackson_module_guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module:jackson-module-guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module:jackson_module_guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module:jackson-module-guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module:jackson_module_guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-module-guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_module_guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module-guice:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-module-guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_module_guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module_guice:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:module:jackson-module-guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:module:jackson_module_guice:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:module:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-module-guice-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-module-guice"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.module"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-module-guice-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-guice@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.10.5?package-id=889ca5a3edea1137",
      "cpe": "cpe:2.3:a:jackson-module-jaxb-annotations:jackson-module-jaxb-annotations:2.10.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f438b5eb66d15cbffca1497408b4cb379af9b068"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.jackson.module",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-module-jaxb-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module-jaxb-annotations:jackson_module_jaxb_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module_jaxb_annotations:jackson-module-jaxb-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module_jaxb_annotations:jackson_module_jaxb_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module-jaxb:jackson-module-jaxb-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module-jaxb:jackson_module_jaxb_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module_jaxb:jackson-module-jaxb-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module_jaxb:jackson_module_jaxb_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module:jackson-module-jaxb-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module:jackson_module_jaxb_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module:jackson-module-jaxb-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module:jackson_module_jaxb_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-module-jaxb-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_module_jaxb_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module-jaxb-annotations:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-module-jaxb-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_module_jaxb_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module_jaxb_annotations:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:module:jackson-module-jaxb-annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:module:jackson_module_jaxb_annotations:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module-jaxb:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module_jaxb:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-module:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_module:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:module:jackson:2.10.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-module-jaxb-annotations-2.10.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-module-jaxb-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.module"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jackson-module-jaxb-annotations-2.10.5.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.10.5",
      "type": "library",
      "version": "2.10.5"
    },
    {
      "bom-ref": "pkg:maven/jackson-xc/jackson-xc@1.9.13?package-id=83de77297d30f36d",
      "cpe": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson-xc:1.9.13:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e3480072bc95c202476ffa1de99ff7ee9149f29c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jackson-xc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml-com:jackson_xc:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson-xc:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/fasterxml_com:jackson_xc:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-xc:jackson-xc:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-xc:jackson_xc:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_xc:jackson-xc:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_xc:jackson_xc:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-xc:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_xc:1.9.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jackson-xc-1.9.13.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jackson-xc-1.9.13.jar"
        }
      ],
      "purl": "pkg:maven/jackson-xc/jackson-xc@1.9.13",
      "type": "library",
      "version": "1.9.13"
    },
    {
      "bom-ref": "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?package-id=45f20386026ffe57",
      "cpe": "cpe:2.3:a:jakarta.activation-api:jakarta.activation-api:1.2.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "562a587face36ec7eff2db7f2fc95425c6602bc1"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "jakarta.activation",
      "licenses": [
        {
          "license": {
            "name": "http://www.eclipse.org/org/documents/edl-v10.php"
          }
        }
      ],
      "name": "jakarta.activation-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.activation-api:jakarta.activation_api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.activation_api:jakarta.activation-api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.activation_api:jakarta.activation_api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-foundation:jakarta.activation-api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-foundation:jakarta.activation_api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_foundation:jakarta.activation-api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_foundation:jakarta.activation_api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.activation:jakarta.activation-api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.activation:jakarta.activation_api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jakarta.activation-api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jakarta.activation_api:1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jakarta.activation-api-1.2.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jakarta.activation-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "jakarta.activation"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jakarta.activation-api-1.2.1.jar"
        }
      ],
      "purl": "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1",
      "type": "library",
      "version": "1.2.1"
    },
    {
      "bom-ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?package-id=0f12dc480bb276f0",
      "cpe": "cpe:2.3:a:jakarta.annotation-api:jakarta.annotation-api:1.3.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "59eb84ee0d616332ff44aba065f3888cf002cd2d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "jakarta.annotation",
      "licenses": [
        {
          "license": {
            "name": "http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "name": "jakarta.annotation-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.annotation-api:jakarta.annotation_api:1.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.annotation_api:jakarta.annotation-api:1.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.annotation_api:jakarta.annotation_api:1.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-foundation:jakarta.annotation-api:1.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-foundation:jakarta.annotation_api:1.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_foundation:jakarta.annotation-api:1.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_foundation:jakarta.annotation_api:1.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.annotation:jakarta.annotation-api:1.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.annotation:jakarta.annotation_api:1.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:jakarta.annotation-api:1.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:jakarta.annotation_api:1.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/jakarta.annotation-api-1.3.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jakarta.annotation-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "jakarta.annotation"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/jakarta.annotation-api-1.3.5.jar"
        }
      ],
      "purl": "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5",
      "type": "library",
      "version": "1.3.5"
    },
    {
      "bom-ref": "pkg:maven/org.glassfish/jakarta.el@3.0.4?package-id=f926f2792307e598",
      "cpe": "cpe:2.3:a:oracle-corporation:jakarta.el:3.0.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f48473482c0e3e714f87186d9305bcae30b7f5cb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.glassfish",
      "licenses": [
        {
          "license": {
            "name": "http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "name": "jakarta.el",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jakarta.el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:javax:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:javax:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.el:jakarta.el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:jakarta.el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.el:javax:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:jakarta.el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:javax:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jakarta.el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:el:jakarta.el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.el:el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:javax:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:javax:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:el:javax:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:el:el:3.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jakarta.el-3.0.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jakarta.el"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.glassfish"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jakarta.el-3.0.4.jar"
        }
      ],
      "purl": "pkg:maven/org.glassfish/jakarta.el@3.0.4",
      "type": "library",
      "version": "3.0.4"
    },
    {
      "bom-ref": "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?package-id=c7f63541e16afbc4",
      "cpe": "cpe:2.3:a:jakarta.inject:jakarta.inject:2.6.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8096ebf722902e75fbd4f532a751e514f02e1eb7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.glassfish.hk2.external",
      "licenses": [
        {
          "license": {
            "name": "http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "name": "jakarta.inject",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:jakarta.inject:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:external:jakarta.inject:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.inject:external:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.inject:jakarta:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta:jakarta.inject:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:jakarta.inject:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.inject:inject:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:external:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hk2:jakarta.inject:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.inject:hk2:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:external:external:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:jakarta:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:external:jakarta:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:inject:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta:external:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:external:inject:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:external:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta:jakarta:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:jakarta:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta:inject:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:hk2:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:inject:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:external:hk2:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hk2:external:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hk2:jakarta:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta:hk2:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hk2:inject:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inject:hk2:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hk2:hk2:2.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/jakarta.inject-2.6.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jakarta.inject"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.glassfish.hk2.external"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/jakarta.inject-2.6.1.jar"
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1",
      "type": "library",
      "version": "2.6.1"
    },
    {
      "bom-ref": "pkg:maven/jakarta.inject/jakarta.inject-api@1.0.3?package-id=fa89195a69fb1bf7",
      "cpe": "cpe:2.3:a:jakarta.inject-api:jakarta.inject-api:1.0.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "288f60226c596849c3c57926e8421c83b5abbe87"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "jakarta.inject",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jakarta.inject-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.inject-api:jakarta.inject_api:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.inject_api:jakarta.inject-api:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.inject_api:jakarta.inject_api:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.inject:jakarta.inject-api:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.inject:jakarta.inject_api:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jakarta.inject-api-1.0.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jakarta.inject-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "jakarta.inject"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jakarta.inject-api-1.0.3.jar"
        }
      ],
      "purl": "pkg:maven/jakarta.inject/jakarta.inject-api@1.0.3",
      "type": "library",
      "version": "1.0.3"
    },
    {
      "bom-ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.2?package-id=4227cecf4d95d21a",
      "cpe": "cpe:2.3:a:jakarta.xml.bind-api:jakarta.xml.bind-api:2.3.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8d49996a4338670764d7ca4b85a1c4ccf7fe665d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "jakarta.xml.bind",
      "licenses": [
        {
          "license": {
            "name": "http://www.eclipse.org/org/documents/edl-v10.php"
          }
        }
      ],
      "name": "jakarta.xml.bind-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.xml.bind-api:jakarta.xml.bind_api:2.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.xml.bind_api:jakarta.xml.bind-api:2.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.xml.bind_api:jakarta.xml.bind_api:2.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jakarta.xml.bind-api:2.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jakarta.xml.bind_api:2.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jakarta.xml.bind-api:2.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jakarta.xml.bind_api:2.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.xml.bind:jakarta.xml.bind-api:2.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jakarta.xml.bind:jakarta.xml.bind_api:2.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jakarta.xml.bind-api-2.3.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jakarta.xml.bind-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "jakarta.xml.bind"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jakarta.xml.bind-api-2.3.2.jar"
        }
      ],
      "purl": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.2",
      "type": "library",
      "version": "2.3.2"
    },
    {
      "bom-ref": "pkg:maven/org.codehaus.janino/janino@3.0.11?package-id=9e3e96911398eb6a",
      "cpe": "cpe:2.3:a:codehaus:janino:3.0.11:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e699e368095379ba0402ea1780a87fcaea16e68f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.codehaus.janino",
      "licenses": [
        {
          "license": {
            "name": "https://raw.githubusercontent.com/janino-compiler/janino/master/LICENSE"
          }
        }
      ],
      "name": "janino",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:janino:janino:3.0.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/janino-3.0.11.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "janino"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.codehaus.janino"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/janino-3.0.11.jar"
        }
      ],
      "purl": "pkg:maven/org.codehaus.janino/janino@3.0.11",
      "type": "library",
      "version": "3.0.11"
    },
    {
      "bom-ref": "pkg:rpm/rhel/java-11-openjdk@11.0.22.0.7-2.el8?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.22.0.7-2.el8.src.rpm&distro=rhel-8.9&package-id=7e986043fc0e9df8",
      "cpe": "cpe:2.3:a:java-11-openjdk:java-11-openjdk:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA"
          }
        }
      ],
      "name": "java-11-openjdk",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java-11-openjdk:java_11_openjdk:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11_openjdk:java-11-openjdk:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11_openjdk:java_11_openjdk:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java-11:java-11-openjdk:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java-11:java_11_openjdk:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11:java-11-openjdk:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11:java_11_openjdk:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:java-11-openjdk:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:java_11_openjdk:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:java-11-openjdk:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:java_11_openjdk:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "1"
        },
        {
          "name": "syft:metadata:release",
          "value": "2.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "1282405"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "java-11-openjdk-11.0.22.0.7-2.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/java-11-openjdk@11.0.22.0.7-2.el8?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.22.0.7-2.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1:11.0.22.0.7-2.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/java-11-openjdk-devel@11.0.22.0.7-2.el8?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.22.0.7-2.el8.src.rpm&distro=rhel-8.9&package-id=703287fcb5060fea",
      "cpe": "cpe:2.3:a:java-11-openjdk-devel:java-11-openjdk-devel:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA"
          }
        }
      ],
      "name": "java-11-openjdk-devel",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java-11-openjdk-devel:java_11_openjdk_devel:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11_openjdk_devel:java-11-openjdk-devel:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11_openjdk_devel:java_11_openjdk_devel:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java-11-openjdk:java-11-openjdk-devel:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java-11-openjdk:java_11_openjdk_devel:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11_openjdk:java-11-openjdk-devel:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11_openjdk:java_11_openjdk_devel:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java-11:java-11-openjdk-devel:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java-11:java_11_openjdk_devel:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11:java-11-openjdk-devel:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11:java_11_openjdk_devel:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:java-11-openjdk-devel:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:java_11_openjdk_devel:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:java-11-openjdk-devel:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:java_11_openjdk_devel:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "1"
        },
        {
          "name": "syft:metadata:release",
          "value": "2.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "5483417"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "java-11-openjdk-11.0.22.0.7-2.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/java-11-openjdk-devel@11.0.22.0.7-2.el8?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.22.0.7-2.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1:11.0.22.0.7-2.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/java-11-openjdk-headless@11.0.22.0.7-2.el8?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.22.0.7-2.el8.src.rpm&distro=rhel-8.9&package-id=f9794a773a3d1735",
      "cpe": "cpe:2.3:a:java-11-openjdk-headless:java-11-openjdk-headless:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "ASL 1.1 and ASL 2.0 and BSD and BSD with advertising and GPL+ and GPLv2 and GPLv2 with exceptions and IJG and LGPLv2+ and MIT and MPLv2.0 and Public Domain and W3C and zlib and ISC and FTL and RSA"
          }
        }
      ],
      "name": "java-11-openjdk-headless",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java-11-openjdk-headless:java_11_openjdk_headless:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11_openjdk_headless:java-11-openjdk-headless:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11_openjdk_headless:java_11_openjdk_headless:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java-11-openjdk:java-11-openjdk-headless:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java-11-openjdk:java_11_openjdk_headless:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11_openjdk:java-11-openjdk-headless:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11_openjdk:java_11_openjdk_headless:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java-11:java-11-openjdk-headless:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java-11:java_11_openjdk_headless:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11:java-11-openjdk-headless:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java_11:java_11_openjdk_headless:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:java-11-openjdk-headless:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:java_11_openjdk_headless:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:java-11-openjdk-headless:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:java_11_openjdk_headless:1\\:11.0.22.0.7-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "1"
        },
        {
          "name": "syft:metadata:release",
          "value": "2.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "186399553"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "java-11-openjdk-11.0.22.0.7-2.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/java-11-openjdk-headless@11.0.22.0.7-2.el8?arch=x86_64&epoch=1&upstream=java-11-openjdk-11.0.22.0.7-2.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1:11.0.22.0.7-2.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/javapackages-filesystem@5.3.0-1.module+el8+2447+6f56d9a6?arch=noarch&upstream=javapackages-tools-5.3.0-1.module+el8+2447+6f56d9a6.src.rpm&distro=rhel-8.9&package-id=3436565bd56969f4",
      "cpe": "cpe:2.3:a:javapackages-filesystem:javapackages-filesystem:5.3.0-1.module\\+el8\\+2447\\+6f56d9a6:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "javapackages-filesystem",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javapackages-filesystem:javapackages_filesystem:5.3.0-1.module\\+el8\\+2447\\+6f56d9a6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javapackages_filesystem:javapackages-filesystem:5.3.0-1.module\\+el8\\+2447\\+6f56d9a6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javapackages_filesystem:javapackages_filesystem:5.3.0-1.module\\+el8\\+2447\\+6f56d9a6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javapackages:javapackages-filesystem:5.3.0-1.module\\+el8\\+2447\\+6f56d9a6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javapackages:javapackages_filesystem:5.3.0-1.module\\+el8\\+2447\\+6f56d9a6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:javapackages-filesystem:5.3.0-1.module\\+el8\\+2447\\+6f56d9a6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:javapackages_filesystem:5.3.0-1.module\\+el8\\+2447\\+6f56d9a6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.module+el8+2447+6f56d9a6"
        },
        {
          "name": "syft:metadata:size",
          "value": "1935"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "javapackages-tools-5.3.0-1.module+el8+2447+6f56d9a6.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/javapackages-filesystem@5.3.0-1.module+el8+2447+6f56d9a6?arch=noarch&upstream=javapackages-tools-5.3.0-1.module+el8+2447+6f56d9a6.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "5.3.0-1.module+el8+2447+6f56d9a6"
    },
    {
      "bom-ref": "pkg:maven/com.sun.activation/javax.activation@1.2.0?package-id=825f12b7dbfe539d",
      "cpe": "cpe:2.3:a:javax.activation:javax.activation:1.2.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bf744c1e2776ed1de3c55c8dac1057ec331ef744"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.activation",
      "licenses": [
        {
          "license": {
            "name": "https://github.com/javaee/activation/blob/master/LICENSE.txt"
          }
        }
      ],
      "name": "javax.activation",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:activation:javax.activation:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.activation:activation:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:javax.activation:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.activation:javax:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:javax.activation:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:activation:activation:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:javax.activation:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:activation:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:activation:javax:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:activation:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:activation:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:javax:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:javax:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:javax:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/javax.activation-1.2.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "javax.activation"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.activation"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/javax.activation-1.2.0.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.activation/javax.activation@1.2.0",
      "type": "library",
      "version": "1.2.0"
    },
    {
      "bom-ref": "pkg:maven/javax.activation/javax.activation-api@1.2.0?package-id=7997bcfed3d2acd3",
      "cpe": "cpe:2.3:a:javax.activation-api:javax.activation-api:1.2.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "85262acf3ca9816f9537ca47d5adeabaead7cb16"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "javax.activation",
      "licenses": [
        {
          "license": {
            "name": "https://github.com/javaee/activation/blob/master/LICENSE.txt"
          }
        }
      ],
      "name": "javax.activation-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.activation-api:javax.activation_api:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.activation_api:javax.activation-api:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.activation_api:javax.activation_api:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.activation:javax.activation-api:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.activation:javax.activation_api:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:javax.activation-api:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:javax.activation_api:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:javax.activation-api:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:javax.activation_api:1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/javax.activation-api-1.2.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "javax.activation-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "javax.activation"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/javax.activation-api-1.2.0.jar"
        }
      ],
      "purl": "pkg:maven/javax.activation/javax.activation-api@1.2.0",
      "type": "library",
      "version": "1.2.0"
    },
    {
      "bom-ref": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?package-id=f7b8a5fa55c38bc7",
      "cpe": "cpe:2.3:a:javax.annotation-api:javax.annotation-api:1.3.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "934c04d3cfef185a8008e7bf34331b79730a9d43"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "javax.annotation",
      "licenses": [
        {
          "license": {
            "name": "https://github.com/javaee/javax.annotation/blob/master/LICENSE"
          }
        }
      ],
      "name": "javax.annotation-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation-api:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation_api:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation_api:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish-community:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish-community:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish_community:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish_community:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/javax.annotation-api-1.3.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "javax.annotation-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "javax.annotation"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/javax.annotation-api-1.3.2.jar"
        }
      ],
      "purl": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2",
      "type": "library",
      "version": "1.3.2"
    },
    {
      "bom-ref": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?package-id=4c854cd167a62e17",
      "cpe": "cpe:2.3:a:javax.annotation-api:javax.annotation-api:1.3.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "934c04d3cfef185a8008e7bf34331b79730a9d43"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "javax.annotation",
      "licenses": [
        {
          "license": {
            "name": "https://github.com/javaee/javax.annotation/blob/master/LICENSE"
          }
        }
      ],
      "name": "javax.annotation-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation-api:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation_api:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation_api:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish-community:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish-community:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish_community:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish_community:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/javax.annotation-api-1.3.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "javax.annotation-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "javax.annotation"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/javax.annotation-api-1.3.2.jar"
        }
      ],
      "purl": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2",
      "type": "library",
      "version": "1.3.2"
    },
    {
      "bom-ref": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?package-id=5fc3bbf53f501ec9",
      "cpe": "cpe:2.3:a:javax.annotation-api:javax.annotation-api:1.3.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "934c04d3cfef185a8008e7bf34331b79730a9d43"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "javax.annotation",
      "licenses": [
        {
          "license": {
            "name": "https://github.com/javaee/javax.annotation/blob/master/LICENSE"
          }
        }
      ],
      "name": "javax.annotation-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation-api:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation_api:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation_api:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish-community:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish-community:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish_community:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish_community:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.annotation:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:javax.annotation-api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:javax.annotation_api:1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/javax.annotation-api-1.3.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "javax.annotation-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "javax.annotation"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/javax.annotation-api-1.3.2.jar"
        }
      ],
      "purl": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2",
      "type": "library",
      "version": "1.3.2"
    },
    {
      "bom-ref": "pkg:maven/javax.el/javax.el-api@3.0.0?package-id=37814888ca54d647",
      "cpe": "cpe:2.3:a:oracle-corporation:javax.el-api:3.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "60a59edc89f93d57541da31ee1c83428ab1cdcb3"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "javax.el",
      "licenses": [
        {
          "license": {
            "name": "https://glassfish.dev.java.net/nonav/public/CDDL+GPL.html"
          }
        }
      ],
      "name": "javax.el-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:javax.el_api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:javax.el-api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:javax.el_api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.el-api:javax.el-api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.el-api:javax.el_api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.el_api:javax.el-api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.el_api:javax.el_api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.el:javax.el-api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.el:javax.el_api:3.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/javax.el-api-3.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "javax.el-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "javax.el"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/javax.el-api-3.0.0.jar"
        }
      ],
      "purl": "pkg:maven/javax.el/javax.el-api@3.0.0",
      "type": "library",
      "version": "3.0.0"
    },
    {
      "bom-ref": "pkg:maven/com.sun.mail/javax.mail@1.6.1?package-id=e35ecaf6ad0983e5",
      "cpe": "cpe:2.3:a:javax.mail:javax.mail:1.6.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "757ba4630692bb2a1ec2d9d57a616b63f15e947e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.mail",
      "licenses": [
        {
          "license": {
            "name": "https://javaee.github.io/javamail/LICENSE"
          }
        }
      ],
      "name": "javax.mail",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:javax.mail:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.mail:javax:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:javax.mail:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.mail:mail:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mail:javax.mail:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:javax.mail:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:javax:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:javax:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:mail:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:mail:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mail:javax:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mail:mail:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:javax:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:mail:1.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/javax.mail-1.6.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "javax.mail"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.mail"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/javax.mail-1.6.1.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.mail/javax.mail@1.6.1",
      "type": "library",
      "version": "1.6.1"
    },
    {
      "bom-ref": "pkg:maven/javax.servlet/javax.servlet-api@3.1.0?package-id=eaa537d8cd131730",
      "cpe": "cpe:2.3:a:glassfish-community:javax.servlet-api:3.1.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3cd63d075497751784b2fa84be59432f4905bf7c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "javax.servlet",
      "licenses": [
        {
          "license": {
            "name": "https://glassfish.dev.java.net/nonav/public/CDDL+GPL.html"
          }
        }
      ],
      "name": "javax.servlet-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish-community:javax.servlet_api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish_community:javax.servlet-api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish_community:javax.servlet_api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:javax.servlet-api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:javax.servlet_api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:javax.servlet-api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:javax.servlet_api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.servlet-api:javax.servlet-api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.servlet-api:javax.servlet_api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.servlet_api:javax.servlet-api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.servlet_api:javax.servlet_api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.servlet:javax.servlet-api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax.servlet:javax.servlet_api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:javax.servlet-api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:javax.servlet_api:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/javax.servlet-api-3.1.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "javax.servlet-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "javax.servlet"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/javax.servlet-api-3.1.0.jar"
        }
      ],
      "purl": "pkg:maven/javax.servlet/javax.servlet-api@3.1.0",
      "type": "library",
      "version": "3.1.0"
    },
    {
      "bom-ref": "pkg:maven/jaxb-api/jaxb-api@2.2.2?package-id=76ac0fb212cb4daf",
      "cpe": "cpe:2.3:a:sun-microsystems\\,-inc-:jaxb-api:2.2.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "aeb3021ca93dde265796d82015beecdcff95bf09"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CDDL-1.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-only"
          }
        }
      ],
      "name": "jaxb-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun-microsystems\\,-inc-:jaxb_api:2.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun_microsystems\\,_inc_:jaxb-api:2.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun_microsystems\\,_inc_:jaxb_api:2.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb-api:jaxb-api:2.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb-api:jaxb_api:2.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb_api:jaxb-api:2.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb_api:jaxb_api:2.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb:jaxb-api:2.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb:jaxb_api:2.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jaxb-api-2.2.2.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jaxb-api-2.2.2.jar"
        }
      ],
      "purl": "pkg:maven/jaxb-api/jaxb-api@2.2.2",
      "type": "library",
      "version": "2.2.2"
    },
    {
      "bom-ref": "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?package-id=7b8eba4233e341f6",
      "cpe": "cpe:2.3:a:oracle-corporation:jaxb-api:2.3.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8531ad5ac454cc2deb9d4d32c40c4d7451939b5d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "javax.xml.bind",
      "licenses": [
        {
          "license": {
            "name": "https://oss.oracle.com/licenses/CDDL+GPL-1.1, https://oss.oracle.com/licenses/CDDL+GPL-1.1"
          }
        }
      ],
      "name": "jaxb-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jaxb_api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jaxb-api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jaxb_api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:jaxb-api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:jaxb_api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb-api:jaxb-api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb-api:jaxb_api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb_api:jaxb-api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb_api:jaxb_api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb:jaxb-api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb:jaxb_api:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jaxb-api-2.3.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jaxb-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "javax.xml.bind"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jaxb-api-2.3.1.jar"
        }
      ],
      "purl": "pkg:maven/javax.xml.bind/jaxb-api@2.3.1",
      "type": "library",
      "version": "2.3.1"
    },
    {
      "bom-ref": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.1?package-id=78c3a5daa713097d",
      "cpe": "cpe:2.3:a:jaxb-runtime:jaxb-runtime:2.3.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "dd6dda9da676a54c5b36ca2806ff95ee017d8738"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.glassfish.jaxb",
      "name": "jaxb-runtime",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb-runtime:jaxb_runtime:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb_runtime:jaxb-runtime:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb_runtime:jaxb_runtime:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:jaxb-runtime:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:jaxb_runtime:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:jaxb-runtime:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:jaxb_runtime:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb-runtime:jaxb:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb:jaxb-runtime:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb:jaxb_runtime:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb_runtime:jaxb:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:jaxb:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:jaxb:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb:jaxb:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jaxb-runtime-2.3.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jaxb-runtime"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.glassfish.jaxb"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jaxb-runtime-2.3.1.jar"
        }
      ],
      "purl": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.1",
      "type": "library",
      "version": "2.3.1"
    },
    {
      "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.2.1.Final?package-id=8ccf2e7f652ae519",
      "cpe": "cpe:2.3:a:jboss-by-red-hat:jboss-logging:3.2.1.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "fedf11b3d4665a434b554a5891fe7f208f029f45"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.jboss.logging",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jboss-logging",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss-by-red-hat:jboss_logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss_by_red_hat:jboss-logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss_by_red_hat:jboss_logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss-logging:jboss-logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss-logging:jboss_logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss_logging:jboss-logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss_logging:jboss_logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss-by-red-hat:logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss_by_red_hat:logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss-logging:logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss_logging:logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:logging:jboss-logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:logging:jboss_logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss:jboss-logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss:jboss_logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:logging:logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss:logging:3.2.1.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jboss-logging-3.2.1.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jboss-logging"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.jboss.logging"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jboss-logging-3.2.1.Final.jar"
        }
      ],
      "purl": "pkg:maven/org.jboss.logging/jboss-logging@3.2.1.Final",
      "type": "library",
      "version": "3.2.1.Final"
    },
    {
      "bom-ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?package-id=95a774c6822436ee",
      "cpe": "cpe:2.3:a:jcip-annotations:jcip-annotations:1.0-1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ef31541dd28ae2cefdd17c7ebf352d93e9058c63"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.github.stephenc.jcip",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jcip-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip-annotations:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip_annotations:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip_annotations:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stephenc:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stephenc:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip-annotations:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip_annotations:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stephenc:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jcip-annotations-1.0-1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jcip-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.github.stephenc.jcip"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jcip-annotations-1.0-1.jar"
        }
      ],
      "purl": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1",
      "type": "library",
      "version": "1.0-1"
    },
    {
      "bom-ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?package-id=eec699edb64cd4c7",
      "cpe": "cpe:2.3:a:jcip-annotations:jcip-annotations:1.0-1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ef31541dd28ae2cefdd17c7ebf352d93e9058c63"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.github.stephenc.jcip",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jcip-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip-annotations:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip_annotations:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip_annotations:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stephenc:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stephenc:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip-annotations:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip_annotations:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stephenc:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/jcip-annotations-1.0-1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jcip-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.github.stephenc.jcip"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/jcip-annotations-1.0-1.jar"
        }
      ],
      "purl": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1",
      "type": "library",
      "version": "1.0-1"
    },
    {
      "bom-ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?package-id=4d280b41877f3d93",
      "cpe": "cpe:2.3:a:jcip-annotations:jcip-annotations:1.0-1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ef31541dd28ae2cefdd17c7ebf352d93e9058c63"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.github.stephenc.jcip",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jcip-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip-annotations:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip_annotations:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip_annotations:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stephenc:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stephenc:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip-annotations:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip_annotations:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stephenc:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jcip-annotations-1.0-1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jcip-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.github.stephenc.jcip"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jcip-annotations-1.0-1.jar"
        }
      ],
      "purl": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1",
      "type": "library",
      "version": "1.0-1"
    },
    {
      "bom-ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?package-id=07670ce71c569924",
      "cpe": "cpe:2.3:a:jcip-annotations:jcip-annotations:1.0-1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ef31541dd28ae2cefdd17c7ebf352d93e9058c63"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.github.stephenc.jcip",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jcip-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip-annotations:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip_annotations:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip_annotations:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stephenc:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stephenc:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip-annotations:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip:jcip-annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip:jcip_annotations:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip_annotations:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stephenc:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jcip:jcip:1.0-1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jcip-annotations-1.0-1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jcip-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.github.stephenc.jcip"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jcip-annotations-1.0-1.jar"
        }
      ],
      "purl": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1",
      "type": "library",
      "version": "1.0-1"
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?package-id=e4bd61aba76dcaff",
      "cpe": "cpe:2.3:a:apache:jcl-over-slf4j:1.7.36:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d877e195a05aca4a2f1ad2ff14bfec1393af4b5e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.slf4j",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jcl-over-slf4j",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:jcl_over_slf4j:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jcl-over-slf4j-1.7.36.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jcl-over-slf4j"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jcl-over-slf4j-1.7.36.jar"
        }
      ],
      "purl": "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36",
      "type": "library",
      "version": "1.7.36"
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?package-id=223864536e44a872",
      "cpe": "cpe:2.3:a:apache:jcl-over-slf4j:1.7.36:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d877e195a05aca4a2f1ad2ff14bfec1393af4b5e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.slf4j",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jcl-over-slf4j",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:jcl_over_slf4j:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jcl-over-slf4j-1.7.36.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jcl-over-slf4j"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jcl-over-slf4j-1.7.36.jar"
        }
      ],
      "purl": "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36",
      "type": "library",
      "version": "1.7.36"
    },
    {
      "bom-ref": "pkg:maven/org.jruby.jcodings/jcodings@1.0.43?package-id=9fcc62f4ea5e18ef",
      "cpe": "cpe:2.3:a:jcodings:jcodings:1.0.43:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d60d3f8ccefd848d551d25bcb7f3e9251333648b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.jruby.jcodings",
      "licenses": [
        {
          "license": {
            "name": "MIT License",
            "url": "http://www.opensource.org/licenses/mit-license.php"
          }
        }
      ],
      "name": "jcodings",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jruby:jcodings:1.0.43:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jcodings-1.0.43.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jcodings"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.jruby.jcodings"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jcodings-1.0.43.jar"
        }
      ],
      "purl": "pkg:maven/org.jruby.jcodings/jcodings@1.0.43",
      "type": "library",
      "version": "1.0.43"
    },
    {
      "bom-ref": "pkg:maven/org.jctools/jctools-core@3.1.0?package-id=b4024d2c65899cb1",
      "cpe": "cpe:2.3:a:jctools-core:jctools-core:3.1.0:*:*:*:*:*:*:*",
      "group": "org.jctools",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jctools-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jctools-core:jctools_core:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jctools_core:jctools-core:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jctools_core:jctools_core:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jctools:jctools-core:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jctools:jctools_core:3.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-common-4.1.86.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jctools-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.jctools"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-common-4.1.86.Final.jar:org.jctools:jctools-core"
        }
      ],
      "purl": "pkg:maven/org.jctools/jctools-core@3.1.0",
      "type": "library",
      "version": "3.1.0"
    },
    {
      "bom-ref": "pkg:maven/org.jdbi/jdbi@2.63.1?package-id=34f9fdeb33d25495",
      "cpe": "cpe:2.3:a:jdbi:jdbi:2.63.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e9cb36b5954d1af1593bbc4fecadfa5cb170bd44"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.jdbi",
      "licenses": [
        {
          "license": {
            "name": "Apache License 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "name": "jdbi",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jdbi-2.63.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jdbi"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.jdbi"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jdbi-2.63.1.jar"
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi@2.63.1",
      "type": "library",
      "version": "2.63.1"
    },
    {
      "bom-ref": "pkg:maven/com.sun.jersey/jersey-bundle@1.19.3?package-id=928e4f3d4b8abbdd",
      "cpe": "cpe:2.3:a:oracle-corporation:jersey-bundle:1.19.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7aaae28e06aafe63ac94f7c6dee81135b815db92"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.jersey",
      "licenses": [
        {
          "license": {
            "name": "http://glassfish.java.net/public/CDDL+GPL_1_1.html, http://glassfish.java.net/public/CDDL+GPL_1_1.html"
          }
        }
      ],
      "name": "jersey-bundle",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey_bundle:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey-bundle:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey_bundle:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-bundle:jersey-bundle:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-bundle:jersey_bundle:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_bundle:jersey-bundle:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_bundle:jersey_bundle:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:bundle:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:bundle:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bundle:jersey-bundle:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bundle:jersey_bundle:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-bundle:bundle:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-bundle:jersey:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey-bundle:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey_bundle:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_bundle:bundle:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_bundle:jersey:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey-bundle:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey_bundle:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bundle:bundle:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bundle:jersey:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:bundle:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:bundle:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey:1.19.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jersey-bundle-1.19.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jersey-bundle"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.jersey"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jersey-bundle-1.19.3.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.jersey/jersey-bundle@1.19.3",
      "type": "library",
      "version": "1.19.3"
    },
    {
      "bom-ref": "pkg:maven/com.sun.jersey/jersey-client@1.19.4?package-id=36f0499b1fdb7831",
      "cpe": "cpe:2.3:a:oracle-corporation:jersey-client:1.19.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9b1f3cf3fdd02d313018f1a67c42106e6ce9f60d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.jersey",
      "licenses": [
        {
          "license": {
            "name": "http://glassfish.java.net/public/CDDL+GPL_1_1.html, http://glassfish.java.net/public/CDDL+GPL_1_1.html"
          }
        }
      ],
      "name": "jersey-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey_client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey-client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey_client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-client:jersey-client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-client:jersey_client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_client:jersey-client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_client:jersey_client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:jersey-client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:jersey_client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-client:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey-client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey_client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_client:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey-client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey_client:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/jersey-client-1.19.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jersey-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.jersey"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/jersey-client-1.19.4.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.jersey/jersey-client@1.19.4",
      "type": "library",
      "version": "1.19.4"
    },
    {
      "bom-ref": "pkg:maven/com.sun.jersey/jersey-client@1.9?package-id=56919bd22eb123e8",
      "cpe": "cpe:2.3:a:oracle-corporation:jersey-client:1.9:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d3c4b2b5f89db32c96ceddcb863684821910a7bb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.jersey",
      "licenses": [
        {
          "license": {
            "name": "http://glassfish.java.net/public/CDDL+GPL_1_1.html, http://glassfish.java.net/public/CDDL+GPL_1_1.html"
          }
        }
      ],
      "name": "jersey-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey_client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey-client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey_client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-client:jersey-client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-client:jersey_client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_client:jersey-client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_client:jersey_client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:jersey-client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:jersey_client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:jersey-client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:jersey_client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-client:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey-client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey_client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_client:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:jersey-client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:jersey_client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey-client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey_client:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jersey-client-1.9.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jersey-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.jersey"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jersey-client-1.9.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.jersey/jersey-client@1.9",
      "type": "library",
      "version": "1.9"
    },
    {
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@2.30?package-id=86a3afb542021207",
      "cpe": "cpe:2.3:a:jersey-common:jersey-common:2.30:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "74ce040a9c83036be2d43ea093e51f3c6876848c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.glassfish.jersey.core",
      "licenses": [
        {
          "license": {
            "name": "http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html, http://www.apache.org/licenses/LICENSE-2.0.html, https://creativecommons.org/publicdomain/zero/1.0/"
          }
        }
      ],
      "name": "jersey-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-common:jersey_common:2.30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_common:jersey-common:2.30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_common:jersey_common:2.30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:jersey-common:2.30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:jersey_common:2.30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-common:jersey:2.30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey-common:2.30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey_common:2.30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_common:jersey:2.30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jersey-common:2.30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jersey_common:2.30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:jersey:2.30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey:2.30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jersey:2.30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/jersey-common-2.30.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jersey-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.glassfish.jersey.core"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/jersey-common-2.30.jar"
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-common@2.30",
      "type": "library",
      "version": "2.30"
    },
    {
      "bom-ref": "pkg:maven/com.sun.jersey/jersey-core@1.19.4?package-id=1dbfad19ff3c6776",
      "cpe": "cpe:2.3:a:oracle-corporation:jersey-core:1.19.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "21c5319c82ca29705715b315553a16f11b16655e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.jersey",
      "licenses": [
        {
          "license": {
            "name": "http://glassfish.java.net/public/CDDL+GPL_1_1.html, http://glassfish.java.net/public/CDDL+GPL_1_1.html"
          }
        }
      ],
      "name": "jersey-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey_core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey-core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey_core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-core:jersey-core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-core:jersey_core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_core:jersey-core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_core:jersey_core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:jersey-core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:jersey_core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-core:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey-core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey_core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_core:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jersey-core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jersey_core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-core:core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_core:core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:jersey-core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:jersey_core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey-core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey_core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:core:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jersey-core-1.19.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jersey-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.jersey"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jersey-core-1.19.4.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.jersey/jersey-core@1.19.4",
      "type": "library",
      "version": "1.19.4"
    },
    {
      "bom-ref": "pkg:maven/com.sun.jersey/jersey-core@1.9?package-id=4bd3164e82a165c5",
      "cpe": "cpe:2.3:a:oracle-corporation:jersey-core:1.9:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8341846f18187013bb9e27e46b7ee00a6395daf4"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.jersey",
      "licenses": [
        {
          "license": {
            "name": "http://glassfish.java.net/public/CDDL+GPL_1_1.html, http://glassfish.java.net/public/CDDL+GPL_1_1.html"
          }
        }
      ],
      "name": "jersey-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey_core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey-core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey_core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-core:jersey-core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-core:jersey_core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_core:jersey-core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_core:jersey_core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:jersey-core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:jersey_core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-core:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey-core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey_core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_core:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jersey-core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jersey_core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-core:core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_core:core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:jersey-core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:jersey_core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey-core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey_core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:core:1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jersey-core-1.9.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jersey-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.jersey"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jersey-core-1.9.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.jersey/jersey-core@1.9",
      "type": "library",
      "version": "1.9"
    },
    {
      "bom-ref": "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.19.4?package-id=29664037a5cff8bf",
      "cpe": "cpe:2.3:a:oracle-corporation:jersey-guice:1.19.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "fc5cdccdeeedb067b8b2a3c7df2907dfb7e8a1b9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.jersey.contribs",
      "licenses": [
        {
          "license": {
            "name": "http://glassfish.java.net/public/CDDL+GPL_1_1.html, http://glassfish.java.net/public/CDDL+GPL_1_1.html"
          }
        }
      ],
      "name": "jersey-guice",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey_guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey-guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey_guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-guice:jersey-guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-guice:jersey_guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_guice:jersey-guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_guice:jersey_guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:contribs:jersey-guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:contribs:jersey_guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-guice:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey-guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey_guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_guice:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey-guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey_guice:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:contribs:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jersey-guice-1.19.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jersey-guice"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.jersey.contribs"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jersey-guice-1.19.4.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.19.4",
      "type": "library",
      "version": "1.19.4"
    },
    {
      "bom-ref": "pkg:maven/com.sun.jersey/jersey-server@1.19.4?package-id=01fa2339806868ef",
      "cpe": "cpe:2.3:a:oracle-corporation:jersey-server:1.19.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "44df9a1310c1278b62658509aca3ca53978e8822"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.jersey",
      "licenses": [
        {
          "license": {
            "name": "http://glassfish.java.net/public/CDDL+GPL_1_1.html, http://glassfish.java.net/public/CDDL+GPL_1_1.html"
          }
        }
      ],
      "name": "jersey-server",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey_server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey-server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey_server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-server:jersey-server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-server:jersey_server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_server:jersey-server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_server:jersey_server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-server:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey-server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey_server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_server:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey-server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey_server:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jersey-server-1.19.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jersey-server"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.jersey"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jersey-server-1.19.4.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.jersey/jersey-server@1.19.4",
      "type": "library",
      "version": "1.19.4"
    },
    {
      "bom-ref": "pkg:maven/com.sun.jersey/jersey-servlet@1.19.4?package-id=15a641d433bfc75f",
      "cpe": "cpe:2.3:a:oracle-corporation:jersey-servlet:1.19.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "fbdcb39db6a6976944a621fe11bf1d2ff048d7c2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.sun.jersey",
      "licenses": [
        {
          "license": {
            "name": "http://glassfish.java.net/public/CDDL+GPL_1_1.html, http://glassfish.java.net/public/CDDL+GPL_1_1.html"
          }
        }
      ],
      "name": "jersey-servlet",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey_servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey-servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey_servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-servlet:jersey-servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-servlet:jersey_servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_servlet:jersey-servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_servlet:jersey_servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-servlet:servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_servlet:servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:jersey-servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:jersey_servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey-servlet:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey-servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey_servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey_servlet:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey-servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey_servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jersey:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:servlet:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jersey:1.19.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jersey-servlet-1.19.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jersey-servlet"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.sun.jersey"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jersey-servlet-1.19.4.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.jersey/jersey-servlet@1.19.4",
      "type": "library",
      "version": "1.19.4"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622?package-id=6314504bf499eb12",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-client:9.4.48.v20220622:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "fc2e953a7030045e1ca467d57e200856a170848e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_client:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-client:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_client:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-client:jetty-client:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-client:jetty_client:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_client:jetty-client:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_client:jetty_client:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-client:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_client:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:jetty-client:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:jetty_client:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-client:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-client:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_client:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_client:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:client:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-client-9.4.48.v20220622.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-client-9.4.48.v20220622.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-client@9.4.48.v20220622",
      "type": "library",
      "version": "9.4.48.v20220622"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.48.v20220622?package-id=098f836d6de6a08d",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-continuation:9.4.48.v20220622:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2da1287dfc76d01418cc4b716d20154941b841ed"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-continuation",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_continuation:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-continuation:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_continuation:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-continuation:jetty-continuation:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-continuation:jetty_continuation:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_continuation:jetty-continuation:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_continuation:jetty_continuation:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:continuation:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:continuation:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:continuation:jetty-continuation:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:continuation:jetty_continuation:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-continuation:continuation:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_continuation:continuation:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-continuation:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_continuation:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:continuation:continuation:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-continuation:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-continuation:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_continuation:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_continuation:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:continuation:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:continuation:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:continuation:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-continuation-9.4.48.v20220622.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-continuation"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-continuation-9.4.48.v20220622.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.48.v20220622",
      "type": "library",
      "version": "9.4.48.v20220622"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-http@9.4.48.v20220622?package-id=f0dd91d2cce082cc",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-http:9.4.48.v20220622:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8cb235e70bda0c5e97a41e7ee0ea33ee7f5bcc6a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-http",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_http:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-http:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_http:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:http:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:http:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-http:jetty-http:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-http:jetty_http:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_http:jetty-http:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_http:jetty_http:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-http:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_http:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-http:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-http:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_http:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_http:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:jetty-http:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:jetty_http:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-http:http:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_http:http:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:http:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:http:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http:http:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-http-9.4.48.v20220622.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-http"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-http-9.4.48.v20220622.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-http@9.4.48.v20220622",
      "type": "library",
      "version": "9.4.48.v20220622"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-io@9.4.48.v20220622?package-id=fc06c5d068e28dc9",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-io:9.4.48.v20220622:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b09b55209d0a304e542f779750a01f6914dc55e7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-io",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_io:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-io:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_io:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:io:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:io:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-io:jetty-io:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-io:jetty_io:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_io:jetty-io:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_io:jetty_io:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-io:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_io:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-io:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-io:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_io:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_io:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io:jetty-io:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io:jetty_io:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-io:io:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_io:io:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:io:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:io:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:io:io:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-io-9.4.48.v20220622.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-io"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-io-9.4.48.v20220622.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-io@9.4.48.v20220622",
      "type": "library",
      "version": "9.4.48.v20220622"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.48.v20220622?package-id=02739a913f17315f",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-proxy:9.4.48.v20220622:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "24f87898684147dc6838a0ddb7e319ac8e526d1c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-proxy",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_proxy:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-proxy:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_proxy:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:proxy:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:proxy:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-proxy:jetty-proxy:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-proxy:jetty_proxy:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_proxy:jetty-proxy:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_proxy:jetty_proxy:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-proxy:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_proxy:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-proxy:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-proxy:proxy:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-proxy:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_proxy:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_proxy:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_proxy:proxy:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy:jetty-proxy:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy:jetty_proxy:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:proxy:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:proxy:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proxy:proxy:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-proxy-9.4.48.v20220622.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-proxy"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-proxy-9.4.48.v20220622.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.48.v20220622",
      "type": "library",
      "version": "9.4.48.v20220622"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-rewrite@9.4.48.v20220622?package-id=017e62038d22ff22",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-rewrite:9.4.48.v20220622:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d07d2acccf6626e23e2583c51067cd3cbb54ac27"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-rewrite",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_rewrite:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-rewrite:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_rewrite:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:rewrite:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:rewrite:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-rewrite:jetty-rewrite:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-rewrite:jetty_rewrite:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_rewrite:jetty-rewrite:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_rewrite:jetty_rewrite:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-rewrite:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_rewrite:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-rewrite:rewrite:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_rewrite:rewrite:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rewrite:jetty-rewrite:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rewrite:jetty_rewrite:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-rewrite:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-rewrite:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_rewrite:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_rewrite:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:rewrite:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rewrite:rewrite:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:rewrite:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rewrite:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-rewrite-9.4.48.v20220622.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-rewrite"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-rewrite-9.4.48.v20220622.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-rewrite@9.4.48.v20220622",
      "type": "library",
      "version": "9.4.48.v20220622"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-security@9.4.48.v20220622?package-id=976335b11f59c351",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-security:9.4.48.v20220622:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6114f92529e9cff489528e6be77b48526a92d577"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-security",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_security:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-security:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_security:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:security:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:security:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-security:jetty-security:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-security:jetty_security:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_security:jetty-security:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_security:jetty_security:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-security:security:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_security:security:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:jetty-security:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:jetty_security:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-security:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_security:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-security:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-security:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_security:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_security:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:security:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:security:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:security:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-security-9.4.48.v20220622.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-security"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-security-9.4.48.v20220622.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-security@9.4.48.v20220622",
      "type": "library",
      "version": "9.4.48.v20220622"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.48.v20220622?package-id=5c6245a0219378dc",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-server:9.4.48.v20220622:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b91a0641cda31c93962503b88f783602d2bd8093"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-server",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_server:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-server:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_server:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:server:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:server:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-server:jetty-server:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-server:jetty_server:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_server:jetty-server:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_server:jetty_server:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-server:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_server:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-server:server:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_server:server:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:server:jetty-server:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:server:jetty_server:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-server:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-server:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_server:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_server:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:server:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:server:server:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:server:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:server:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-server-9.4.48.v20220622.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-server"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-server-9.4.48.v20220622.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.48.v20220622",
      "type": "library",
      "version": "9.4.48.v20220622"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.48.v20220622?package-id=4f203d2d368768cf",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-servlet:9.4.48.v20220622:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8a9a53e0aad3f194a4cc9940f7e9d5619254bf62"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-servlet",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_servlet:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-servlet:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_servlet:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:servlet:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:servlet:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-servlet:jetty-servlet:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-servlet:jetty_servlet:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_servlet:jetty-servlet:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_servlet:jetty_servlet:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-servlet:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_servlet:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-servlet:servlet:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_servlet:servlet:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:jetty-servlet:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:jetty_servlet:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-servlet:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-servlet:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_servlet:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_servlet:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:servlet:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:servlet:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:servlet:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-servlet-9.4.48.v20220622.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-servlet"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-servlet-9.4.48.v20220622.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.48.v20220622",
      "type": "library",
      "version": "9.4.48.v20220622"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.48.v20220622?package-id=d3b98821c42d4b2f",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-servlets:9.4.48.v20220622:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b113da58158c96d6dd8df440bb79c1c0b5e2056e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-servlets",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_servlets:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-servlets:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_servlets:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:servlets:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:servlets:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-servlets:jetty-servlets:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-servlets:jetty_servlets:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_servlets:jetty-servlets:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_servlets:jetty_servlets:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-servlets:servlets:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_servlets:servlets:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlets:jetty-servlets:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlets:jetty_servlets:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-servlets:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_servlets:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-servlets:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-servlets:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_servlets:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_servlets:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlets:servlets:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:servlets:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:servlets:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlets:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-servlets-9.4.48.v20220622.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-servlets"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-servlets-9.4.48.v20220622.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.48.v20220622",
      "type": "library",
      "version": "9.4.48.v20220622"
    },
    {
      "bom-ref": "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?package-id=5ab84dffa631c89a",
      "cpe": "cpe:2.3:a:jetty-sslengine:jetty-sslengine:6.1.26:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "60367999cee49a3b09fa86bdcb52310b6c896014"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.mortbay.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "jetty-sslengine",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-sslengine:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_sslengine:jetty-sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_sslengine:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:jetty-sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:jetty-sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-sslengine:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_sslengine:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jetty-sslengine-6.1.26.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-sslengine"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.mortbay.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jetty-sslengine-6.1.26.jar"
        }
      ],
      "purl": "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26",
      "type": "library",
      "version": "6.1.26"
    },
    {
      "bom-ref": "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?package-id=4e48c4018ec59925",
      "cpe": "cpe:2.3:a:jetty-sslengine:jetty-sslengine:6.1.26:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "60367999cee49a3b09fa86bdcb52310b6c896014"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.mortbay.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "jetty-sslengine",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-sslengine:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_sslengine:jetty-sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_sslengine:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:jetty-sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:jetty-sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-sslengine:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_sslengine:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jetty-sslengine-6.1.26.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-sslengine"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.mortbay.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jetty-sslengine-6.1.26.jar"
        }
      ],
      "purl": "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26",
      "type": "library",
      "version": "6.1.26"
    },
    {
      "bom-ref": "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?package-id=cc9cd396326c1f96",
      "cpe": "cpe:2.3:a:jetty-sslengine:jetty-sslengine:6.1.26:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "60367999cee49a3b09fa86bdcb52310b6c896014"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.mortbay.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "jetty-sslengine",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-sslengine:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_sslengine:jetty-sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_sslengine:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:jetty-sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:jetty-sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-sslengine:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_sslengine:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_sslengine:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:security:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jetty-sslengine-6.1.26.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-sslengine"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.mortbay.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jetty-sslengine-6.1.26.jar"
        }
      ],
      "purl": "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26",
      "type": "library",
      "version": "6.1.26"
    },
    {
      "bom-ref": "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?package-id=1dea753687b19362",
      "cpe": "cpe:2.3:a:jetty-util:jetty-util:6.1.26:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e5642fe0399814e1687d55a3862aa5a3417226a9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.mortbay.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, http://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-util",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:jetty_util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:jetty-util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:jetty_util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:jetty-util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:jetty_util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:jetty-util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:jetty_util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mortbay:util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:jetty:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:util:6.1.26:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jetty-util-6.1.26.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-util"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.mortbay.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jetty-util-6.1.26.jar"
        }
      ],
      "purl": "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26",
      "type": "library",
      "version": "6.1.26"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-util@9.4.48.v20220622?package-id=9fa250778d530d57",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-util:9.4.48.v20220622:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7efc06f7ec0ff33d8c219bcc8c7415280c103669"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-util",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_util:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-util:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_util:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:util:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:util:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:jetty-util:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:jetty_util:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:jetty-util:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:jetty_util:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-util:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_util:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-util:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_util:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:util:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:util:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:jetty-util:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:jetty_util:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:util:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:util:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:util:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-util-9.4.48.v20220622.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-util"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-util-9.4.48.v20220622.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-util@9.4.48.v20220622",
      "type": "library",
      "version": "9.4.48.v20220622"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.48.v20220622?package-id=05f6e2cde95dace6",
      "cpe": "cpe:2.3:a:eclipse-jetty-project:jetty-util-ajax:9.4.48.v20220622:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "def39454993d094df10b1689592d235e636d7dde"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.eclipse.jetty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php"
          }
        }
      ],
      "name": "jetty-util-ajax",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty_util_ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty-util-ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty_util_ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util-ajax:jetty-util-ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util-ajax:jetty_util_ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util_ajax:jetty-util-ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util_ajax:jetty_util_ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-jetty-project:ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_jetty_project:ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:jetty-util-ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:jetty_util_ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:jetty-util-ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:jetty_util_ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty-util-ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty_util_ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util-ajax:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty-util-ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty_util_ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util_ajax:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajax:jetty-util-ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajax:jetty_util_ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util-ajax:ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util_ajax:ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:jetty-util-ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:jetty_util_ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty-util:ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty_util:ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajax:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetty:ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:jetty:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ajax:ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:util:ajax:9.4.48.v20220622:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-util-ajax-9.4.48.v20220622.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jetty-util-ajax"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.eclipse.jetty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jetty-util-ajax-9.4.48.v20220622.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.48.v20220622",
      "type": "library",
      "version": "9.4.48.v20220622"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/jmespath-java@1.12.317?package-id=5e4370ad33b5bf27",
      "cpe": "cpe:2.3:a:jmespath-java:jmespath-java:1.12.317:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3e5c681b0c1c7b6c02dc29fe960acd017fbed1b2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "https://aws.amazon.com/apache2.0"
          }
        }
      ],
      "name": "jmespath-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath-java:jmespath_java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath_java:jmespath-java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath_java:jmespath_java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:jmespath-java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:jmespath_java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath:jmespath-java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath:jmespath_java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/jmespath-java-1.12.317.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jmespath-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/jmespath-java-1.12.317.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/jmespath-java@1.12.317",
      "type": "library",
      "version": "1.12.317"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/jmespath-java@1.12.317?package-id=0f19349d8eef70d7",
      "cpe": "cpe:2.3:a:jmespath-java:jmespath-java:1.12.317:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3e5c681b0c1c7b6c02dc29fe960acd017fbed1b2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "https://aws.amazon.com/apache2.0"
          }
        }
      ],
      "name": "jmespath-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath-java:jmespath_java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath_java:jmespath-java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath_java:jmespath_java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:jmespath-java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:jmespath_java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath:jmespath-java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath:jmespath_java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jmespath-java-1.12.317.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jmespath-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jmespath-java-1.12.317.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/jmespath-java@1.12.317",
      "type": "library",
      "version": "1.12.317"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/jmespath-java@1.12.317?package-id=cefdf3bc747f4af5",
      "cpe": "cpe:2.3:a:jmespath-java:jmespath-java:1.12.317:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3e5c681b0c1c7b6c02dc29fe960acd017fbed1b2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "https://aws.amazon.com/apache2.0"
          }
        }
      ],
      "name": "jmespath-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath-java:jmespath_java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath_java:jmespath-java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath_java:jmespath_java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:jmespath-java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:jmespath_java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath:jmespath-java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath:jmespath_java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/jmespath-java-1.12.317.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jmespath-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/jmespath-java-1.12.317.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/jmespath-java@1.12.317",
      "type": "library",
      "version": "1.12.317"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/jmespath-java@1.12.317?package-id=69f0587046c499dc",
      "cpe": "cpe:2.3:a:jmespath-java:jmespath-java:1.12.317:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3e5c681b0c1c7b6c02dc29fe960acd017fbed1b2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "https://aws.amazon.com/apache2.0"
          }
        }
      ],
      "name": "jmespath-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath-java:jmespath_java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath_java:jmespath-java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath_java:jmespath_java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:jmespath-java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:jmespath_java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath:jmespath-java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath:jmespath_java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/jmespath-java-1.12.317.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jmespath-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/jmespath-java-1.12.317.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/jmespath-java@1.12.317",
      "type": "library",
      "version": "1.12.317"
    },
    {
      "bom-ref": "pkg:maven/com.amazonaws/jmespath-java@1.12.317?package-id=d906ed912ffbc907",
      "cpe": "cpe:2.3:a:jmespath-java:jmespath-java:1.12.317:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3e5c681b0c1c7b6c02dc29fe960acd017fbed1b2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.amazonaws",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "https://aws.amazon.com/apache2.0"
          }
        }
      ],
      "name": "jmespath-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath-java:jmespath_java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath_java:jmespath-java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath_java:jmespath_java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:jmespath-java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amazonaws:jmespath_java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath:jmespath-java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jmespath:jmespath_java:1.12.317:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jmespath-java-1.12.317.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jmespath-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.amazonaws"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jmespath-java-1.12.317.jar"
        }
      ],
      "purl": "pkg:maven/com.amazonaws/jmespath-java@1.12.317",
      "type": "library",
      "version": "1.12.317"
    },
    {
      "bom-ref": "pkg:maven/com.sun.jna/jna@4.5.1?package-id=e00c5b428b9a4790",
      "cpe": "cpe:2.3:a:jna-development-team:jna:4.5.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "65bd0cacc9c79a21c6ed8e9f588577cd3c2f85b9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "jna",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna_development_team:jna:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna:jna:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jna:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jna-4.5.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jna-4.5.1.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.jna/jna@4.5.1",
      "type": "library",
      "version": "4.5.1"
    },
    {
      "bom-ref": "pkg:maven/com.sun.jna/jna@4.5.1?package-id=cefa1f6c44097ef3",
      "cpe": "cpe:2.3:a:jna-development-team:jna:4.5.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "65bd0cacc9c79a21c6ed8e9f588577cd3c2f85b9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "jna",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna_development_team:jna:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna:jna:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jna:4.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jna-4.5.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jna-4.5.1.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.jna/jna@4.5.1",
      "type": "library",
      "version": "4.5.1"
    },
    {
      "bom-ref": "pkg:maven/com.sun.jna.platform/jna-platform@5.2.0?package-id=56773e6791200b52",
      "cpe": "cpe:2.3:a:jna-development-team:jna-platform:5.2.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5520c6f3382801576547dd20854225ae2899b649"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "jna-platform",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna-development-team:jna_platform:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna_development_team:jna-platform:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna_development_team:jna_platform:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna-development-team:platform:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna_development_team:platform:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna-platform:jna-platform:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna-platform:jna_platform:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna_platform:jna-platform:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna_platform:jna_platform:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna-development-team:jna:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna_development_team:jna:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna-platform:platform:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna_platform:platform:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform:jna-platform:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform:jna_platform:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform:platform:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna-platform:jna:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna:jna-platform:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna:jna_platform:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna_platform:jna:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jna-platform:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jna_platform:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna:platform:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform:jna:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:platform:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jna:jna:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun:jna:5.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jna-platform-5.2.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jna-platform-5.2.0.jar"
        }
      ],
      "purl": "pkg:maven/com.sun.jna.platform/jna-platform@5.2.0",
      "type": "library",
      "version": "5.2.0"
    },
    {
      "bom-ref": "pkg:maven/org.joda/joda-convert@2.2.1?package-id=7d43aeaa16211486",
      "cpe": "cpe:2.3:a:joda-convert:joda-convert:2.2.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f19f779c1f545d8a67f1a0dcfcacc385112370ca"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.joda",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "joda-convert",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-convert:joda_convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_convert:joda-convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_convert:joda_convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda-convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda_convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda-convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda_convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:convert:joda-convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:convert:joda_convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-convert:convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_convert:convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda-convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda_convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:convert:convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:convert:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/joda-convert-2.2.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "joda-convert"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.joda"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/joda-convert-2.2.1.jar"
        }
      ],
      "purl": "pkg:maven/org.joda/joda-convert@2.2.1",
      "type": "library",
      "version": "2.2.1"
    },
    {
      "bom-ref": "pkg:maven/joda-time/joda-time@2.12.4?package-id=87de1e062c98ee1d",
      "cpe": "cpe:2.3:a:joda-time:joda-time:2.12.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "41cd821f32bd91b228da19eba162ae75d6404219"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "joda-time",
      "licenses": [
        {
          "license": {
            "name": "Apache 2.0"
          }
        }
      ],
      "name": "joda-time",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/joda-time-2.12.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "joda-time"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "joda-time"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-aws-rds-extensions/joda-time-2.12.4.jar"
        }
      ],
      "purl": "pkg:maven/joda-time/joda-time@2.12.4",
      "type": "library",
      "version": "2.12.4"
    },
    {
      "bom-ref": "pkg:maven/joda-time/joda-time@2.12.4?package-id=a311b3be4090c82b",
      "cpe": "cpe:2.3:a:joda-time:joda-time:2.12.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "41cd821f32bd91b228da19eba162ae75d6404219"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "joda-time",
      "licenses": [
        {
          "license": {
            "name": "Apache 2.0"
          }
        }
      ],
      "name": "joda-time",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/joda-time-2.12.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "joda-time"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "joda-time"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/joda-time-2.12.4.jar"
        }
      ],
      "purl": "pkg:maven/joda-time/joda-time@2.12.4",
      "type": "library",
      "version": "2.12.4"
    },
    {
      "bom-ref": "pkg:maven/joda-time/joda-time@2.12.4?package-id=87c8026ada7c3578",
      "cpe": "cpe:2.3:a:joda-time:joda-time:2.12.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "41cd821f32bd91b228da19eba162ae75d6404219"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "joda-time",
      "licenses": [
        {
          "license": {
            "name": "Apache 2.0"
          }
        }
      ],
      "name": "joda-time",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/joda-time-2.12.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "joda-time"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "joda-time"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/joda-time-2.12.4.jar"
        }
      ],
      "purl": "pkg:maven/joda-time/joda-time@2.12.4",
      "type": "library",
      "version": "2.12.4"
    },
    {
      "bom-ref": "pkg:maven/joda-time/joda-time@2.12.4?package-id=a9194a1aee2890be",
      "cpe": "cpe:2.3:a:joda-time:joda-time:2.12.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "41cd821f32bd91b228da19eba162ae75d6404219"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "joda-time",
      "licenses": [
        {
          "license": {
            "name": "Apache 2.0"
          }
        }
      ],
      "name": "joda-time",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/joda-time-2.12.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "joda-time"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "joda-time"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-s3-extensions/joda-time-2.12.4.jar"
        }
      ],
      "purl": "pkg:maven/joda-time/joda-time@2.12.4",
      "type": "library",
      "version": "2.12.4"
    },
    {
      "bom-ref": "pkg:maven/joda-time/joda-time@2.12.4?package-id=7cbc343121ba3561",
      "cpe": "cpe:2.3:a:joda-time:joda-time:2.12.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "41cd821f32bd91b228da19eba162ae75d6404219"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "joda-time",
      "licenses": [
        {
          "license": {
            "name": "Apache 2.0"
          }
        }
      ],
      "name": "joda-time",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:joda-time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:joda_time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda-org:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda_org:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joda:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:time:time:2.12.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/joda-time-2.12.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "joda-time"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "joda-time"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/joda-time-2.12.4.jar"
        }
      ],
      "purl": "pkg:maven/joda-time/joda-time@2.12.4",
      "type": "library",
      "version": "2.12.4"
    },
    {
      "bom-ref": "pkg:maven/org.jruby.joni/joni@2.1.27?package-id=3e198bd4f632c352",
      "cpe": "cpe:2.3:a:jruby:joni:2.1.27:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a698fd936b13588c6747b182bcfdc13885a8ca43"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.jruby.joni",
      "licenses": [
        {
          "license": {
            "name": "MIT License",
            "url": "http://www.opensource.org/licenses/mit-license.php"
          }
        }
      ],
      "name": "joni",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joni:joni:2.1.27:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/joni-2.1.27.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "joni"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.jruby.joni"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/joni-2.1.27.jar"
        }
      ],
      "purl": "pkg:maven/org.jruby.joni/joni@2.1.27",
      "type": "library",
      "version": "2.1.27"
    },
    {
      "bom-ref": "pkg:maven/net.sf.jopt-simple/jopt-simple@5.0.4?package-id=4b51dc6b84112c06",
      "cpe": "cpe:2.3:a:jopt-simple:jopt-simple:5.0.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4fdac2fbe92dfad86aa6e9301736f6b4342a3f5c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.sf.jopt-simple",
      "licenses": [
        {
          "license": {
            "name": "http://www.opensource.org/licenses/mit-license.php"
          }
        }
      ],
      "name": "jopt-simple",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jopt-simple:jopt_simple:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jopt_simple:jopt-simple:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jopt_simple:jopt_simple:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jopt:jopt-simple:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jopt:jopt_simple:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sf:jopt-simple:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sf:jopt_simple:5.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jopt-simple-5.0.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jopt-simple"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.sf.jopt-simple"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jopt-simple-5.0.4.jar"
        }
      ],
      "purl": "pkg:maven/net.sf.jopt-simple/jopt-simple@5.0.4",
      "type": "library",
      "version": "5.0.4"
    },
    {
      "bom-ref": "pkg:maven/org.bitbucket.b_c/jose4j@0.7.3?package-id=cdcad916c6bccf44",
      "cpe": "cpe:2.3:a:bitbucket:jose4j:0.7.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a42ffebfb2325fd15f87a9afc56bbefd8a3db0bf"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.bitbucket.b_c",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jose4j",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jose4j:jose4j:0.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:b-c:jose4j:0.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:b_c:jose4j:0.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:b:jose4j:0.7.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/jose4j-0.7.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jose4j"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.bitbucket.b_c"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/jose4j-0.7.3.jar"
        }
      ],
      "purl": "pkg:maven/org.bitbucket.b_c/jose4j@0.7.3",
      "type": "library",
      "version": "0.7.3"
    },
    {
      "bom-ref": "pkg:maven/jrt-fs/jrt-fs@11.0.22?package-id=6e8f250c72b007d7",
      "cpe": "cpe:2.3:a:oracle-corporation:jrt-fs:11.0.22:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bf0ef7d976eb202e83553a5956c7239c5b321fd3"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "jrt-fs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jrt_fs:11.0.22:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jrt-fs:11.0.22:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jrt_fs:11.0.22:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:red-hat\\,-inc-:jrt-fs:11.0.22:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:red-hat\\,-inc-:jrt_fs:11.0.22:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:red_hat\\,_inc_:jrt-fs:11.0.22:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:red_hat\\,_inc_:jrt_fs:11.0.22:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jrt-fs:jrt-fs:11.0.22:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jrt-fs:jrt_fs:11.0.22:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jrt_fs:jrt-fs:11.0.22:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jrt_fs:jrt_fs:11.0.22:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jrt:jrt-fs:11.0.22:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jrt:jrt_fs:11.0.22:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/jvm/java-11-openjdk-11.0.22.0.7-2.el8.x86_64/lib/jrt-fs.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/usr/lib/jvm/java-11-openjdk-11.0.22.0.7-2.el8.x86_64/lib/jrt-fs.jar"
        }
      ],
      "purl": "pkg:maven/jrt-fs/jrt-fs@11.0.22",
      "type": "library",
      "version": "11.0.22"
    },
    {
      "bom-ref": "pkg:rpm/rhel/json-c@0.13.1-3.el8?arch=x86_64&upstream=json-c-0.13.1-3.el8.src.rpm&distro=rhel-8.9&package-id=56e0e6d8769b9156",
      "cpe": "cpe:2.3:a:json-c:json-c:0.13.1-3.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "json-c",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-c:json_c:0.13.1-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_c:json-c:0.13.1-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_c:json_c:0.13.1-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:json-c:0.13.1-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:json_c:0.13.1-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-c:0.13.1-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_c:0.13.1-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "69282"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "json-c-0.13.1-3.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/json-c@0.13.1-3.el8?arch=x86_64&upstream=json-c-0.13.1-3.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "0.13.1-3.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/json-glib@1.4.4-1.el8?arch=x86_64&upstream=json-glib-1.4.4-1.el8.src.rpm&distro=rhel-8.9&package-id=ad85f72ac187e58c",
      "cpe": "cpe:2.3:a:json-glib:json-glib:1.4.4-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "json-glib",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-glib:json_glib:1.4.4-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_glib:json-glib:1.4.4-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_glib:json_glib:1.4.4-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:json-glib:1.4.4-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:json_glib:1.4.4-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-glib:1.4.4-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_glib:1.4.4-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "530243"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "json-glib-1.4.4-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/json-glib@1.4.4-1.el8?arch=x86_64&upstream=json-glib-1.4.4-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.4.4-1.el8"
    },
    {
      "bom-ref": "pkg:maven/com.jayway.jsonpath.json-path/json-path@2.3.0?package-id=2be8244b1e49459a",
      "cpe": "cpe:2.3:a:json-path:json-path:2.3.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "032602ed60bc48f2a7dbe8aceacf5882556eab54"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "json-path",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-path:json_path:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_path:json-path:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_path:json_path:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-path:jsonpath:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_path:jsonpath:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsonpath:json-path:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsonpath:json_path:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsonpath:jsonpath:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jayway:json-path:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jayway:json_path:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jayway:jsonpath:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-path:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_path:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:jsonpath:2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/json-path-2.3.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/json-path-2.3.0.jar"
        }
      ],
      "purl": "pkg:maven/com.jayway.jsonpath.json-path/json-path@2.3.0",
      "type": "library",
      "version": "2.3.0"
    },
    {
      "bom-ref": "pkg:maven/net.minidev/json-smart@1.3.1?package-id=132adfe4737e3f10",
      "cpe": "cpe:2.3:a:json-smart:json-smart:1.3.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "69b3835e96d282ec85fc2e1517b8164c45ed639e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.minidev",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "json-smart",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-smart:json_smart:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_smart:json-smart:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_smart:json_smart:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:json-smart:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:json_smart:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-smart:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_smart:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/json-smart-1.3.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "json-smart"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.minidev"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/json-smart-1.3.1.jar"
        }
      ],
      "purl": "pkg:maven/net.minidev/json-smart@1.3.1",
      "type": "library",
      "version": "1.3.1"
    },
    {
      "bom-ref": "pkg:maven/net.minidev/json-smart@2.3?package-id=eb45a9b4381a9676",
      "cpe": "cpe:2.3:a:json-smart:json-smart:2.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "007396407491352ce4fa30de92efb158adb76b5b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.minidev",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "json-smart",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-smart:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_smart:json-smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_smart:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:json-smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/json-smart-2.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "json-smart"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.minidev"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/json-smart-2.3.jar"
        }
      ],
      "purl": "pkg:maven/net.minidev/json-smart@2.3",
      "type": "library",
      "version": "2.3"
    },
    {
      "bom-ref": "pkg:maven/net.minidev/json-smart@2.3?package-id=f1d1210ddd0554a0",
      "cpe": "cpe:2.3:a:json-smart:json-smart:2.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "007396407491352ce4fa30de92efb158adb76b5b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.minidev",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "json-smart",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-smart:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_smart:json-smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_smart:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:json-smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/json-smart-2.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "json-smart"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.minidev"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/json-smart-2.3.jar"
        }
      ],
      "purl": "pkg:maven/net.minidev/json-smart@2.3",
      "type": "library",
      "version": "2.3"
    },
    {
      "bom-ref": "pkg:maven/net.minidev/json-smart@2.3?package-id=db95d39ba8a1044b",
      "cpe": "cpe:2.3:a:json-smart:json-smart:2.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "007396407491352ce4fa30de92efb158adb76b5b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.minidev",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "json-smart",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-smart:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_smart:json-smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_smart:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:json-smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/json-smart-2.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "json-smart"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.minidev"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/json-smart-2.3.jar"
        }
      ],
      "purl": "pkg:maven/net.minidev/json-smart@2.3",
      "type": "library",
      "version": "2.3"
    },
    {
      "bom-ref": "pkg:maven/net.minidev/json-smart@2.3?package-id=9571d7443dc053ba",
      "cpe": "cpe:2.3:a:json-smart:json-smart:2.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "007396407491352ce4fa30de92efb158adb76b5b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "net.minidev",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "json-smart",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json-smart:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_smart:json-smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_smart:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:json-smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minidev:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json-smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:json_smart:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/json-smart-2.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "json-smart"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.minidev"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/json-smart-2.3.jar"
        }
      ],
      "purl": "pkg:maven/net.minidev/json-smart@2.3",
      "type": "library",
      "version": "2.3"
    },
    {
      "bom-ref": "pkg:maven/org.apache/jsp-api@2.1?package-id=83eb1c6f0c28aaef",
      "cpe": "cpe:2.3:a:apache:jsp-api:2.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63f943103f250ef1f3a4d5e94d145a0f961f5316"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "jsp-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:jsp_api:2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jsp-api-2.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/jsp-api-2.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache/jsp-api@2.1",
      "type": "library",
      "version": "2.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache/jsp-api@2.1?package-id=47dcf06c7853eb3d",
      "cpe": "cpe:2.3:a:apache:jsp-api:2.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63f943103f250ef1f3a4d5e94d145a0f961f5316"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "jsp-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:jsp_api:2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/jsp-api-2.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kerberos/jsp-api-2.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache/jsp-api@2.1",
      "type": "library",
      "version": "2.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache/jsp-api@2.1?package-id=318ebfa51623c312",
      "cpe": "cpe:2.3:a:apache:jsp-api:2.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63f943103f250ef1f3a4d5e94d145a0f961f5316"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "jsp-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:jsp_api:2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jsp-api-2.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jsp-api-2.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache/jsp-api@2.1",
      "type": "library",
      "version": "2.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache/jsp-api@2.1?package-id=8dadab8fc144a568",
      "cpe": "cpe:2.3:a:apache:jsp-api:2.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63f943103f250ef1f3a4d5e94d145a0f961f5316"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "jsp-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:jsp_api:2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jsp-api-2.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jsp-api-2.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache/jsp-api@2.1",
      "type": "library",
      "version": "2.1"
    },
    {
      "bom-ref": "pkg:maven/jsr305/jsr305@2.0.1?package-id=123bad3e5e299a58",
      "cpe": "cpe:2.3:a:jsr305:jsr305:2.0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "516c03b21d50a644d538de0f0369c620989cd8f0"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "jsr305",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/jsr305-2.0.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/jsr305-2.0.1.jar"
        }
      ],
      "purl": "pkg:maven/jsr305/jsr305@2.0.1",
      "type": "library",
      "version": "2.0.1"
    },
    {
      "bom-ref": "pkg:maven/jsr305/jsr305@2.0.1?package-id=767b137347044ec3",
      "cpe": "cpe:2.3:a:jsr305:jsr305:2.0.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "516c03b21d50a644d538de0f0369c620989cd8f0"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "jsr305",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jsr305-2.0.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jsr305-2.0.1.jar"
        }
      ],
      "purl": "pkg:maven/jsr305/jsr305@2.0.1",
      "type": "library",
      "version": "2.0.1"
    },
    {
      "bom-ref": "pkg:maven/jsr305/jsr305@3.0.0?package-id=bb19ea42b857d716",
      "cpe": "cpe:2.3:a:jsr305:jsr305:3.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5871fb60dc68d67da54a663c3fd636a10a532948"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "jsr305",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jsr305-3.0.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/jsr305-3.0.0.jar"
        }
      ],
      "purl": "pkg:maven/jsr305/jsr305@3.0.0",
      "type": "library",
      "version": "3.0.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?package-id=cc51c2dbd931d2e8",
      "cpe": "cpe:2.3:a:findbugs:jsr305:3.0.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.code.findbugs",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "jsr305",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr-305:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr_305:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr305:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:code:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/jsr305-3.0.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jsr305"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.code.findbugs"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/jsr305-3.0.2.jar"
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
      "type": "library",
      "version": "3.0.2"
    },
    {
      "bom-ref": "pkg:maven/javax.ws.rs/jsr311-api@1.1.1?package-id=48ef649c34f8ec3c",
      "cpe": "cpe:2.3:a:sun-microsystems\\,-inc-:jsr311-api:1.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "59033da2a1afd56af1ac576750a8d0b1830d59e6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "javax.ws.rs",
      "licenses": [
        {
          "license": {
            "name": "http://www.opensource.org/licenses/cddl1.php"
          }
        }
      ],
      "name": "jsr311-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun-microsystems\\,-inc-:jsr311_api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun_microsystems\\,_inc_:jsr311-api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun_microsystems\\,_inc_:jsr311_api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr311-api:jsr311-api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr311-api:jsr311_api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr311_api:jsr311-api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr311_api:jsr311_api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr311:jsr311-api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr311:jsr311_api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jsr311-api-1.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jsr311-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "javax.ws.rs"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/jsr311-api-1.1.1.jar"
        }
      ],
      "purl": "pkg:maven/javax.ws.rs/jsr311-api@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/javax.ws.rs/jsr311-api@1.1.1?package-id=4715dbd26b6492b1",
      "cpe": "cpe:2.3:a:sun-microsystems\\,-inc-:jsr311-api:1.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "59033da2a1afd56af1ac576750a8d0b1830d59e6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "javax.ws.rs",
      "licenses": [
        {
          "license": {
            "name": "http://www.opensource.org/licenses/cddl1.php"
          }
        }
      ],
      "name": "jsr311-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun-microsystems\\,-inc-:jsr311_api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun_microsystems\\,_inc_:jsr311-api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun_microsystems\\,_inc_:jsr311_api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr311-api:jsr311-api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr311-api:jsr311_api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr311_api:jsr311-api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr311_api:jsr311_api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr311:jsr311-api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr311:jsr311_api:1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/jsr311-api-1.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jsr311-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "javax.ws.rs"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/jsr311-api-1.1.1.jar"
        }
      ],
      "purl": "pkg:maven/javax.ws.rs/jsr311-api@1.1.1",
      "type": "library",
      "version": "1.1.1"
    },
    {
      "bom-ref": "pkg:maven/kafka-clients/kafka-clients@2.0.0?package-id=1f2eb1b6f53f35a0",
      "cpe": "cpe:2.3:a:kafka-clients:kafka-clients:2.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "48bcf5ebb6effdaffbc2f725aae954f764d25341"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "CDDL-1.1"
          }
        }
      ],
      "name": "kafka-clients",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-clients:kafka_clients:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_clients:kafka-clients:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_clients:kafka_clients:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka:kafka-clients:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka:kafka_clients:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/kafka-clients-2.0.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/kafka-clients-2.0.0.jar"
        }
      ],
      "purl": "pkg:maven/kafka-clients/kafka-clients@2.0.0",
      "type": "library",
      "version": "2.0.0"
    },
    {
      "bom-ref": "pkg:maven/kafka-clients/kafka-clients@3.4.0?package-id=236638e6e71baea5",
      "cpe": "cpe:2.3:a:kafka-clients:kafka-clients:3.4.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "69aebfca9da335f6617f9e5e7a4b45f16e8c86b5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "kafka-clients",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-clients:kafka_clients:3.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_clients:kafka-clients:3.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_clients:kafka_clients:3.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka:kafka-clients:3.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka:kafka_clients:3.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/kafka-clients-3.4.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/kafka-clients-3.4.0.jar"
        }
      ],
      "purl": "pkg:maven/kafka-clients/kafka-clients@3.4.0",
      "type": "library",
      "version": "3.4.0"
    },
    {
      "bom-ref": "pkg:maven/kafka-clients/kafka-clients@3.4.0?package-id=910089c415e67f66",
      "cpe": "cpe:2.3:a:kafka-clients:kafka-clients:3.4.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "69aebfca9da335f6617f9e5e7a4b45f16e8c86b5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "kafka-clients",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-clients:kafka_clients:3.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_clients:kafka-clients:3.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_clients:kafka_clients:3.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka:kafka-clients:3.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka:kafka_clients:3.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-indexing-service/kafka-clients-3.4.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-indexing-service/kafka-clients-3.4.0.jar"
        }
      ],
      "purl": "pkg:maven/kafka-clients/kafka-clients@3.4.0",
      "type": "library",
      "version": "3.4.0"
    },
    {
      "bom-ref": "pkg:maven/kafka-clients/kafka-clients@5.5.1-ccs?package-id=1b7f2fcb83fdd5bb",
      "cpe": "cpe:2.3:a:kafka-clients:kafka-clients:5.5.1-ccs:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3ac1cbc72db4b0c57038a7a196d5f413d767ae68"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "CDDL-1.1"
          }
        }
      ],
      "name": "kafka-clients",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-clients:kafka_clients:5.5.1-ccs:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_clients:kafka-clients:5.5.1-ccs:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_clients:kafka_clients:5.5.1-ccs:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka:kafka-clients:5.5.1-ccs:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka:kafka_clients:5.5.1-ccs:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/kafka-clients-5.5.1-ccs.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/kafka-clients-5.5.1-ccs.jar"
        }
      ],
      "purl": "pkg:maven/kafka-clients/kafka-clients@5.5.1-ccs",
      "type": "library",
      "version": "5.5.1-ccs"
    },
    {
      "bom-ref": "pkg:maven/io.confluent/kafka-schema-registry-client@5.5.1?package-id=2a51f9db218e47d2",
      "cpe": "cpe:2.3:a:kafka-schema-registry-client:kafka-schema-registry-client:5.5.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a0583bbe64968928d20cbf6bebff44259ea810ec"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.confluent",
      "licenses": [
        {
          "license": {
            "name": "Apache License 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "name": "kafka-schema-registry-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-schema-registry-client:kafka_schema_registry_client:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema_registry_client:kafka-schema-registry-client:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema_registry_client:kafka_schema_registry_client:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-schema-registry:kafka-schema-registry-client:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-schema-registry:kafka_schema_registry_client:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema_registry:kafka-schema-registry-client:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema_registry:kafka_schema_registry_client:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-schema:kafka-schema-registry-client:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-schema:kafka_schema_registry_client:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema:kafka-schema-registry-client:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema:kafka_schema_registry_client:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:confluent:kafka-schema-registry-client:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:confluent:kafka_schema_registry_client:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka:kafka-schema-registry-client:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka:kafka_schema_registry_client:5.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/kafka-schema-registry-client-5.5.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "kafka-schema-registry-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.confluent"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/kafka-schema-registry-client-5.5.1.jar"
        }
      ],
      "purl": "pkg:maven/io.confluent/kafka-schema-registry-client@5.5.1",
      "type": "library",
      "version": "5.5.1"
    },
    {
      "bom-ref": "pkg:maven/io.confluent/kafka-schema-registry-client@6.0.1?package-id=820b12efaffe0887",
      "cpe": "cpe:2.3:a:kafka-schema-registry-client:kafka-schema-registry-client:6.0.1:*:*:*:*:*:*:*",
      "group": "io.confluent",
      "licenses": [
        {
          "license": {
            "name": "Apache License 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "name": "kafka-schema-registry-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-schema-registry-client:kafka_schema_registry_client:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema_registry_client:kafka-schema-registry-client:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema_registry_client:kafka_schema_registry_client:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-schema-registry:kafka-schema-registry-client:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-schema-registry:kafka_schema_registry_client:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema_registry:kafka-schema-registry-client:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema_registry:kafka_schema_registry_client:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-schema:kafka-schema-registry-client:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka-schema:kafka_schema_registry_client:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema:kafka-schema-registry-client:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka_schema:kafka_schema_registry_client:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:confluent:kafka-schema-registry-client:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:confluent:kafka_schema_registry_client:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka:kafka-schema-registry-client:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kafka:kafka_schema_registry_client:6.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "kafka-schema-registry-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.confluent"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:io.confluent:kafka-schema-registry-client"
        }
      ],
      "purl": "pkg:maven/io.confluent/kafka-schema-registry-client@6.0.1",
      "type": "library",
      "version": "6.0.1"
    },
    {
      "bom-ref": "pkg:rpm/rhel/keyutils-libs@1.5.10-9.el8?arch=x86_64&upstream=keyutils-1.5.10-9.el8.src.rpm&distro=rhel-8.9&package-id=f881b72711e1d79b",
      "cpe": "cpe:2.3:a:keyutils-libs:keyutils-libs:1.5.10-9.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+ and LGPLv2+"
          }
        }
      ],
      "name": "keyutils-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:keyutils-libs:keyutils_libs:1.5.10-9.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:keyutils_libs:keyutils-libs:1.5.10-9.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:keyutils_libs:keyutils_libs:1.5.10-9.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:keyutils:keyutils-libs:1.5.10-9.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:keyutils:keyutils_libs:1.5.10-9.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:keyutils-libs:1.5.10-9.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:keyutils_libs:1.5.10-9.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "9.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "43798"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "keyutils-1.5.10-9.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/keyutils-libs@1.5.10-9.el8?arch=x86_64&upstream=keyutils-1.5.10-9.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.5.10-9.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/krb5-libs@1.18.2-26.el8_9?arch=x86_64&upstream=krb5-1.18.2-26.el8_9.src.rpm&distro=rhel-8.9&package-id=7a1779a12244245b",
      "cpe": "cpe:2.3:a:krb5-libs:krb5-libs:1.18.2-26.el8_9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "krb5-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5-libs:krb5_libs:1.18.2-26.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5_libs:krb5-libs:1.18.2-26.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5_libs:krb5_libs:1.18.2-26.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:krb5-libs:1.18.2-26.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:krb5_libs:1.18.2-26.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5:krb5-libs:1.18.2-26.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5:krb5_libs:1.18.2-26.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "26.el8_9"
        },
        {
          "name": "syft:metadata:size",
          "value": "2242251"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "krb5-1.18.2-26.el8_9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/krb5-libs@1.18.2-26.el8_9?arch=x86_64&upstream=krb5-1.18.2-26.el8_9.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.18.2-26.el8_9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/krb5-workstation@1.18.2-26.el8_9?arch=x86_64&upstream=krb5-1.18.2-26.el8_9.src.rpm&distro=rhel-8.9&package-id=b69b1b4cba375e3b",
      "cpe": "cpe:2.3:a:krb5-workstation:krb5-workstation:1.18.2-26.el8_9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "krb5-workstation",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5-workstation:krb5_workstation:1.18.2-26.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5_workstation:krb5-workstation:1.18.2-26.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5_workstation:krb5_workstation:1.18.2-26.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:krb5-workstation:1.18.2-26.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:krb5_workstation:1.18.2-26.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5:krb5-workstation:1.18.2-26.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:krb5:krb5_workstation:1.18.2-26.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "26.el8_9"
        },
        {
          "name": "syft:metadata:size",
          "value": "3424130"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "krb5-1.18.2-26.el8_9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/krb5-workstation@1.18.2-26.el8_9?arch=x86_64&upstream=krb5-1.18.2-26.el8_9.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.18.2-26.el8_9"
    },
    {
      "bom-ref": "pkg:maven/com.nimbusds/lang-tag@1.7?package-id=dde30df2c6e2a877",
      "cpe": "cpe:2.3:a:connect2id-ltd-:lang-tag:1.7:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "97c73ecd70bc7e8eefb26c5eea84f251a63f1031"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.nimbusds",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "lang-tag",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id-ltd-:lang_tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:lang-tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:lang_tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lang-tag:lang-tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lang-tag:lang_tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lang_tag:lang-tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lang_tag:lang_tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:lang-tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:lang_tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lang:lang-tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lang:lang_tag:1.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/lang-tag-1.7.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "lang-tag"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.nimbusds"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/lang-tag-1.7.jar"
        }
      ],
      "purl": "pkg:maven/com.nimbusds/lang-tag@1.7",
      "type": "library",
      "version": "1.7"
    },
    {
      "bom-ref": "pkg:rpm/rhel/langpacks-en@1.0-12.el8?arch=noarch&upstream=langpacks-1.0-12.el8.src.rpm&distro=rhel-8.9&package-id=50d705cb1644d1cf",
      "cpe": "cpe:2.3:a:langpacks-en:langpacks-en:1.0-12.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+"
          }
        }
      ],
      "name": "langpacks-en",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks-en:langpacks_en:1.0-12.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks_en:langpacks-en:1.0-12.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks_en:langpacks_en:1.0-12.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks:langpacks-en:1.0-12.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:langpacks:langpacks_en:1.0-12.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:langpacks-en:1.0-12.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:langpacks_en:1.0-12.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "12.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "400"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "langpacks-1.0-12.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/langpacks-en@1.0-12.el8?arch=noarch&upstream=langpacks-1.0-12.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.0-12.el8"
    },
    {
      "bom-ref": "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?package-id=cd697ee4e1318184",
      "cpe": "cpe:2.3:a:leveldbjni-all:leveldbjni-all:1.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "707350a2eeb1fa2ed77a32ddb3893ed308e941db"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.fusesource.leveldbjni",
      "licenses": [
        {
          "license": {
            "name": "http://www.opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "name": "leveldbjni-all",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni-all:leveldbjni_all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni_all:leveldbjni-all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni_all:leveldbjni_all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fusesource:leveldbjni-all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fusesource:leveldbjni_all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni-all:leveldbjni:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni:leveldbjni-all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni:leveldbjni_all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni_all:leveldbjni:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fusesource:leveldbjni:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni:leveldbjni:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/leveldbjni-all-1.8.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "leveldbjni-all"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.fusesource.leveldbjni"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/leveldbjni-all-1.8.jar"
        }
      ],
      "purl": "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8",
      "type": "library",
      "version": "1.8"
    },
    {
      "bom-ref": "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?package-id=bda52860dd95dcbb",
      "cpe": "cpe:2.3:a:leveldbjni-all:leveldbjni-all:1.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "707350a2eeb1fa2ed77a32ddb3893ed308e941db"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.fusesource.leveldbjni",
      "licenses": [
        {
          "license": {
            "name": "http://www.opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "name": "leveldbjni-all",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni-all:leveldbjni_all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni_all:leveldbjni-all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni_all:leveldbjni_all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fusesource:leveldbjni-all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fusesource:leveldbjni_all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni-all:leveldbjni:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni:leveldbjni-all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni:leveldbjni_all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni_all:leveldbjni:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fusesource:leveldbjni:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni:leveldbjni:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/leveldbjni-all-1.8.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "leveldbjni-all"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.fusesource.leveldbjni"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/leveldbjni-all-1.8.jar"
        }
      ],
      "purl": "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8",
      "type": "library",
      "version": "1.8"
    },
    {
      "bom-ref": "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?package-id=8af131145c6dcd5e",
      "cpe": "cpe:2.3:a:leveldbjni-all:leveldbjni-all:1.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "707350a2eeb1fa2ed77a32ddb3893ed308e941db"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.fusesource.leveldbjni",
      "licenses": [
        {
          "license": {
            "name": "http://www.opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "name": "leveldbjni-all",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni-all:leveldbjni_all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni_all:leveldbjni-all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni_all:leveldbjni_all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fusesource:leveldbjni-all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fusesource:leveldbjni_all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni-all:leveldbjni:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni:leveldbjni-all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni:leveldbjni_all:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni_all:leveldbjni:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fusesource:leveldbjni:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:leveldbjni:leveldbjni:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/leveldbjni-all-1.8.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "leveldbjni-all"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.fusesource.leveldbjni"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/leveldbjni-all-1.8.jar"
        }
      ],
      "purl": "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8",
      "type": "library",
      "version": "1.8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libX11@1.6.8-6.el8?arch=x86_64&upstream=libX11-1.6.8-6.el8.src.rpm&distro=rhel-8.9&package-id=93e78a94b8dee1d0",
      "cpe": "cpe:2.3:a:libX11:libX11:1.6.8-6.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libX11",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libX11:1.6.8-6.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "1344056"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libX11-1.6.8-6.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libX11@1.6.8-6.el8?arch=x86_64&upstream=libX11-1.6.8-6.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.6.8-6.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libX11-common@1.6.8-6.el8?arch=noarch&upstream=libX11-1.6.8-6.el8.src.rpm&distro=rhel-8.9&package-id=f1cf7ad10a587fb8",
      "cpe": "cpe:2.3:a:libX11-common:libX11-common:1.6.8-6.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libX11-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libX11-common:libX11_common:1.6.8-6.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libX11_common:libX11-common:1.6.8-6.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libX11_common:libX11_common:1.6.8-6.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libX11:libX11-common:1.6.8-6.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libX11:libX11_common:1.6.8-6.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libX11-common:1.6.8-6.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libX11_common:1.6.8-6.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "1339608"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libX11-1.6.8-6.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libX11-common@1.6.8-6.el8?arch=noarch&upstream=libX11-1.6.8-6.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.6.8-6.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libXau@1.0.9-3.el8?arch=x86_64&upstream=libXau-1.0.9-3.el8.src.rpm&distro=rhel-8.9&package-id=77702ec423b2a25b",
      "cpe": "cpe:2.3:a:libXau:libXau:1.0.9-3.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libXau",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libXau:1.0.9-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "61140"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libXau-1.0.9-3.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libXau@1.0.9-3.el8?arch=x86_64&upstream=libXau-1.0.9-3.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.0.9-3.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libXcomposite@0.4.4-14.el8?arch=x86_64&upstream=libXcomposite-0.4.4-14.el8.src.rpm&distro=rhel-8.9&package-id=44915f706cb08d33",
      "cpe": "cpe:2.3:a:libXcomposite:libXcomposite:0.4.4-14.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libXcomposite",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libXcomposite:0.4.4-14.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "14.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "35864"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libXcomposite-0.4.4-14.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libXcomposite@0.4.4-14.el8?arch=x86_64&upstream=libXcomposite-0.4.4-14.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "0.4.4-14.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libXext@1.3.4-1.el8?arch=x86_64&upstream=libXext-1.3.4-1.el8.src.rpm&distro=rhel-8.9&package-id=6d20e886c0ed8973",
      "cpe": "cpe:2.3:a:libXext:libXext:1.3.4-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libXext",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libXext:1.3.4-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "91982"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libXext-1.3.4-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libXext@1.3.4-1.el8?arch=x86_64&upstream=libXext-1.3.4-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.3.4-1.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libXi@1.7.10-1.el8?arch=x86_64&upstream=libXi-1.7.10-1.el8.src.rpm&distro=rhel-8.9&package-id=a0571e9a6d0740c1",
      "cpe": "cpe:2.3:a:redhat:libXi:1.7.10-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libXi",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libXi:libXi:1.7.10-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "75067"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libXi-1.7.10-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libXi@1.7.10-1.el8?arch=x86_64&upstream=libXi-1.7.10-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.7.10-1.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libXrender@0.9.10-7.el8?arch=x86_64&upstream=libXrender-0.9.10-7.el8.src.rpm&distro=rhel-8.9&package-id=361affb62fcb2387",
      "cpe": "cpe:2.3:a:libXrender:libXrender:0.9.10-7.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libXrender",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libXrender:0.9.10-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "51499"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libXrender-0.9.10-7.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libXrender@0.9.10-7.el8?arch=x86_64&upstream=libXrender-0.9.10-7.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "0.9.10-7.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libXtst@1.2.3-7.el8?arch=x86_64&upstream=libXtst-1.2.3-7.el8.src.rpm&distro=rhel-8.9&package-id=65ffef9dc160a451",
      "cpe": "cpe:2.3:a:libXtst:libXtst:1.2.3-7.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libXtst",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libXtst:1.2.3-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "34930"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libXtst-1.2.3-7.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libXtst@1.2.3-7.el8?arch=x86_64&upstream=libXtst-1.2.3-7.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.2.3-7.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libacl@2.2.53-1.el8?arch=x86_64&upstream=acl-2.2.53-1.el8.src.rpm&distro=rhel-8.9&package-id=8c99eef5bea8909a",
      "cpe": "cpe:2.3:a:libacl:libacl:2.2.53-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libacl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libacl:2.2.53-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "54816"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "acl-2.2.53-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libacl@2.2.53-1.el8?arch=x86_64&upstream=acl-2.2.53-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.2.53-1.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libarchive@3.3.3-5.el8?arch=x86_64&upstream=libarchive-3.3.3-5.el8.src.rpm&distro=rhel-8.9&package-id=dbeb029c238b7939",
      "cpe": "cpe:2.3:a:libarchive:libarchive:3.3.3-5.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "libarchive",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libarchive:3.3.3-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "5.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "838255"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libarchive-3.3.3-5.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libarchive@3.3.3-5.el8?arch=x86_64&upstream=libarchive-3.3.3-5.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.3.3-5.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libassuan@2.5.1-3.el8?arch=x86_64&upstream=libassuan-2.5.1-3.el8.src.rpm&distro=rhel-8.9&package-id=ee149a7c37dcbdf4",
      "cpe": "cpe:2.3:a:libassuan:libassuan:2.5.1-3.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+ and GPLv3+"
          }
        }
      ],
      "name": "libassuan",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libassuan:2.5.1-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "200835"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libassuan-2.5.1-3.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libassuan@2.5.1-3.el8?arch=x86_64&upstream=libassuan-2.5.1-3.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.5.1-3.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libattr@2.4.48-3.el8?arch=x86_64&upstream=attr-2.4.48-3.el8.src.rpm&distro=rhel-8.9&package-id=54b86621ab85f093",
      "cpe": "cpe:2.3:a:libattr:libattr:2.4.48-3.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libattr",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libattr:2.4.48-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "26834"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "attr-2.4.48-3.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libattr@2.4.48-3.el8?arch=x86_64&upstream=attr-2.4.48-3.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.4.48-3.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libblkid@2.32.1-43.el8?arch=x86_64&upstream=util-linux-2.32.1-43.el8.src.rpm&distro=rhel-8.9&package-id=7a940a0fe45fb424",
      "cpe": "cpe:2.3:a:libblkid:libblkid:2.32.1-43.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libblkid",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libblkid:2.32.1-43.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "43.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "343976"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "util-linux-2.32.1-43.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libblkid@2.32.1-43.el8?arch=x86_64&upstream=util-linux-2.32.1-43.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.32.1-43.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libcap@2.48-5.el8?arch=x86_64&upstream=libcap-2.48-5.el8.src.rpm&distro=rhel-8.9&package-id=69e1ca39d3042b69",
      "cpe": "cpe:2.3:a:libcap:libcap:2.48-5.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD or GPLv2"
          }
        }
      ],
      "name": "libcap",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libcap:2.48-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "5.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "164893"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libcap-2.48-5.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libcap@2.48-5.el8?arch=x86_64&upstream=libcap-2.48-5.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.48-5.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libcap@2.48-6.el8_9?arch=x86_64&upstream=libcap-2.48-6.el8_9.src.rpm&distro=rhel-8.9&package-id=fc9ebd4c4d2c9a37",
      "cpe": "cpe:2.3:a:libcap:libcap:2.48-6.el8_9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD or GPLv2"
          }
        }
      ],
      "name": "libcap",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libcap:2.48-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el8_9"
        },
        {
          "name": "syft:metadata:size",
          "value": "164901"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libcap-2.48-6.el8_9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libcap@2.48-6.el8_9?arch=x86_64&upstream=libcap-2.48-6.el8_9.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.48-6.el8_9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libcap-ng@0.7.11-1.el8?arch=x86_64&upstream=libcap-ng-0.7.11-1.el8.src.rpm&distro=rhel-8.9&package-id=1442885c56bab3c1",
      "cpe": "cpe:2.3:a:libcap-ng:libcap-ng:0.7.11-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libcap-ng",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcap-ng:libcap_ng:0.7.11-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcap_ng:libcap-ng:0.7.11-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcap_ng:libcap_ng:0.7.11-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcap:libcap-ng:0.7.11-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcap:libcap_ng:0.7.11-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libcap-ng:0.7.11-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libcap_ng:0.7.11-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "51470"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libcap-ng-0.7.11-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libcap-ng@0.7.11-1.el8?arch=x86_64&upstream=libcap-ng-0.7.11-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "0.7.11-1.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libcom_err@1.45.6-5.el8?arch=x86_64&upstream=e2fsprogs-1.45.6-5.el8.src.rpm&distro=rhel-8.9&package-id=5ae24a58b03bcb15",
      "cpe": "cpe:2.3:a:libcom-err:libcom-err:1.45.6-5.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libcom_err",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcom-err:libcom_err:1.45.6-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcom_err:libcom-err:1.45.6-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcom_err:libcom_err:1.45.6-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcom:libcom-err:1.45.6-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libcom:libcom_err:1.45.6-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libcom-err:1.45.6-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libcom_err:1.45.6-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "5.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "61377"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "e2fsprogs-1.45.6-5.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libcom_err@1.45.6-5.el8?arch=x86_64&upstream=e2fsprogs-1.45.6-5.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.45.6-5.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libcurl@7.61.1-33.el8?arch=x86_64&upstream=curl-7.61.1-33.el8.src.rpm&distro=rhel-8.9&package-id=7654c158bd503e82",
      "cpe": "cpe:2.3:a:libcurl:libcurl:7.61.1-33.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libcurl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libcurl:7.61.1-33.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "33.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "597624"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "curl-7.61.1-33.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libcurl@7.61.1-33.el8?arch=x86_64&upstream=curl-7.61.1-33.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "7.61.1-33.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libdb@5.3.28-42.el8_4?arch=x86_64&upstream=libdb-5.3.28-42.el8_4.src.rpm&distro=rhel-8.9&package-id=d06f5e98412b24f8",
      "cpe": "cpe:2.3:a:redhat:libdb:5.3.28-42.el8_4:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD and LGPLv2 and Sleepycat"
          }
        }
      ],
      "name": "libdb",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libdb:libdb:5.3.28-42.el8_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "42.el8_4"
        },
        {
          "name": "syft:metadata:size",
          "value": "1903352"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libdb-5.3.28-42.el8_4.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libdb@5.3.28-42.el8_4?arch=x86_64&upstream=libdb-5.3.28-42.el8_4.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "5.3.28-42.el8_4"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libdb-utils@5.3.28-42.el8_4?arch=x86_64&upstream=libdb-5.3.28-42.el8_4.src.rpm&distro=rhel-8.9&package-id=d66cfb47ac820488",
      "cpe": "cpe:2.3:a:libdb-utils:libdb-utils:5.3.28-42.el8_4:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD and LGPLv2 and Sleepycat"
          }
        }
      ],
      "name": "libdb-utils",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libdb-utils:libdb_utils:5.3.28-42.el8_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libdb_utils:libdb-utils:5.3.28-42.el8_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libdb_utils:libdb_utils:5.3.28-42.el8_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libdb-utils:5.3.28-42.el8_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libdb_utils:5.3.28-42.el8_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libdb:libdb-utils:5.3.28-42.el8_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libdb:libdb_utils:5.3.28-42.el8_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "42.el8_4"
        },
        {
          "name": "syft:metadata:size",
          "value": "369615"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libdb-5.3.28-42.el8_4.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libdb-utils@5.3.28-42.el8_4?arch=x86_64&upstream=libdb-5.3.28-42.el8_4.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "5.3.28-42.el8_4"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libdnf@0.63.0-17.el8_9?arch=x86_64&upstream=libdnf-0.63.0-17.el8_9.src.rpm&distro=rhel-8.9&package-id=304c83b0d2121977",
      "cpe": "cpe:2.3:a:libdnf:libdnf:0.63.0-17.el8_9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libdnf",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libdnf:0.63.0-17.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "17.el8_9"
        },
        {
          "name": "syft:metadata:size",
          "value": "2421822"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libdnf-0.63.0-17.el8_9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libdnf@0.63.0-17.el8_9?arch=x86_64&upstream=libdnf-0.63.0-17.el8_9.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "0.63.0-17.el8_9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libffi@3.1-24.el8?arch=x86_64&upstream=libffi-3.1-24.el8.src.rpm&distro=rhel-8.9&package-id=41c27b473a0ab606",
      "cpe": "cpe:2.3:a:libffi:libffi:3.1-24.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libffi",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libffi:3.1-24.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "24.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "53844"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libffi-3.1-24.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libffi@3.1-24.el8?arch=x86_64&upstream=libffi-3.1-24.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.1-24.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libfontenc@1.1.3-8.el8?arch=x86_64&upstream=libfontenc-1.1.3-8.el8.src.rpm&distro=rhel-8.9&package-id=900ca556e1c8b9a8",
      "cpe": "cpe:2.3:a:libfontenc:libfontenc:1.1.3-8.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libfontenc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libfontenc:1.1.3-8.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "8.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "56853"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libfontenc-1.1.3-8.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libfontenc@1.1.3-8.el8?arch=x86_64&upstream=libfontenc-1.1.3-8.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.1.3-8.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libgcc@8.5.0-20.el8?arch=x86_64&upstream=gcc-8.5.0-20.el8.src.rpm&distro=rhel-8.9&package-id=c548e3189595bce3",
      "cpe": "cpe:2.3:a:libgcc:libgcc:8.5.0-20.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"
          }
        }
      ],
      "name": "libgcc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libgcc:8.5.0-20.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "20.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "190216"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gcc-8.5.0-20.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libgcc@8.5.0-20.el8?arch=x86_64&upstream=gcc-8.5.0-20.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "8.5.0-20.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libgcrypt@1.8.5-7.el8_6?arch=x86_64&upstream=libgcrypt-1.8.5-7.el8_6.src.rpm&distro=rhel-8.9&package-id=45ad61826865d9bd",
      "cpe": "cpe:2.3:a:libgcrypt:libgcrypt:1.8.5-7.el8_6:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libgcrypt",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libgcrypt:1.8.5-7.el8_6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el8_6"
        },
        {
          "name": "syft:metadata:size",
          "value": "1269734"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libgcrypt-1.8.5-7.el8_6.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libgcrypt@1.8.5-7.el8_6?arch=x86_64&upstream=libgcrypt-1.8.5-7.el8_6.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.8.5-7.el8_6"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libgpg-error@1.31-1.el8?arch=x86_64&upstream=libgpg-error-1.31-1.el8.src.rpm&distro=rhel-8.9&package-id=120935366d897773",
      "cpe": "cpe:2.3:a:libgpg-error:libgpg-error:1.31-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libgpg-error",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgpg-error:libgpg_error:1.31-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgpg_error:libgpg-error:1.31-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgpg_error:libgpg_error:1.31-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgpg:libgpg-error:1.31-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libgpg:libgpg_error:1.31-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libgpg-error:1.31-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libgpg_error:1.31-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "900810"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libgpg-error-1.31-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libgpg-error@1.31-1.el8?arch=x86_64&upstream=libgpg-error-1.31-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.31-1.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libidn2@2.2.0-1.el8?arch=x86_64&upstream=libidn2-2.2.0-1.el8.src.rpm&distro=rhel-8.9&package-id=1250312e800877d0",
      "cpe": "cpe:2.3:a:libidn2:libidn2:2.2.0-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "(GPLv2+ or LGPLv3+) and GPLv3+"
          }
        }
      ],
      "name": "libidn2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libidn2:2.2.0-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "284362"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libidn2-2.2.0-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libidn2@2.2.0-1.el8?arch=x86_64&upstream=libidn2-2.2.0-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.2.0-1.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libkadm5@1.18.2-26.el8_9?arch=x86_64&upstream=krb5-1.18.2-26.el8_9.src.rpm&distro=rhel-8.9&package-id=871cfc84a692d110",
      "cpe": "cpe:2.3:a:libkadm5:libkadm5:1.18.2-26.el8_9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libkadm5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libkadm5:1.18.2-26.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "26.el8_9"
        },
        {
          "name": "syft:metadata:size",
          "value": "224352"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "krb5-1.18.2-26.el8_9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libkadm5@1.18.2-26.el8_9?arch=x86_64&upstream=krb5-1.18.2-26.el8_9.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.18.2-26.el8_9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libksba@1.3.5-9.el8_7?arch=x86_64&upstream=libksba-1.3.5-9.el8_7.src.rpm&distro=rhel-8.9&package-id=cf91749a8556e5ca",
      "cpe": "cpe:2.3:a:libksba:libksba:1.3.5-9.el8_7:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "(LGPLv3+ or GPLv2+) and GPLv3+"
          }
        }
      ],
      "name": "libksba",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libksba:1.3.5-9.el8_7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "9.el8_7"
        },
        {
          "name": "syft:metadata:size",
          "value": "334047"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libksba-1.3.5-9.el8_7.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libksba@1.3.5-9.el8_7?arch=x86_64&upstream=libksba-1.3.5-9.el8_7.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.3.5-9.el8_7"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libmodulemd@2.13.0-1.el8?arch=x86_64&upstream=libmodulemd-2.13.0-1.el8.src.rpm&distro=rhel-8.9&package-id=80e3d7e60a42adb9",
      "cpe": "cpe:2.3:a:libmodulemd:libmodulemd:2.13.0-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libmodulemd",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libmodulemd:2.13.0-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "722354"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libmodulemd-2.13.0-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libmodulemd@2.13.0-1.el8?arch=x86_64&upstream=libmodulemd-2.13.0-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.13.0-1.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libmount@2.32.1-43.el8?arch=x86_64&upstream=util-linux-2.32.1-43.el8.src.rpm&distro=rhel-8.9&package-id=79a2cc37209e0c69",
      "cpe": "cpe:2.3:a:libmount:libmount:2.32.1-43.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libmount",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libmount:2.32.1-43.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "43.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "398266"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "util-linux-2.32.1-43.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libmount@2.32.1-43.el8?arch=x86_64&upstream=util-linux-2.32.1-43.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.32.1-43.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libnghttp2@1.33.0-5.el8_9?arch=x86_64&upstream=nghttp2-1.33.0-5.el8_9.src.rpm&distro=rhel-8.9&package-id=8d1063cd323f2489",
      "cpe": "cpe:2.3:a:libnghttp2:libnghttp2:1.33.0-5.el8_9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libnghttp2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libnghttp2:1.33.0-5.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "5.el8_9"
        },
        {
          "name": "syft:metadata:size",
          "value": "168244"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "nghttp2-1.33.0-5.el8_9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libnghttp2@1.33.0-5.el8_9?arch=x86_64&upstream=nghttp2-1.33.0-5.el8_9.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.33.0-5.el8_9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libnsl2@1.2.0-2.20180605git4a062cf.el8?arch=x86_64&upstream=libnsl2-1.2.0-2.20180605git4a062cf.el8.src.rpm&distro=rhel-8.9&package-id=0836377d84456fb5",
      "cpe": "cpe:2.3:a:libnsl2:libnsl2:1.2.0-2.20180605git4a062cf.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD and LGPLv2+"
          }
        }
      ],
      "name": "libnsl2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libnsl2:1.2.0-2.20180605git4a062cf.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "2.20180605git4a062cf.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "142938"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libnsl2-1.2.0-2.20180605git4a062cf.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libnsl2@1.2.0-2.20180605git4a062cf.el8?arch=x86_64&upstream=libnsl2-1.2.0-2.20180605git4a062cf.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.2.0-2.20180605git4a062cf.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libpeas@1.22.0-6.el8?arch=x86_64&upstream=libpeas-1.22.0-6.el8.src.rpm&distro=rhel-8.9&package-id=c162d3d325899bfb",
      "cpe": "cpe:2.3:a:libpeas:libpeas:1.22.0-6.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libpeas",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libpeas:1.22.0-6.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "374264"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libpeas-1.22.0-6.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libpeas@1.22.0-6.el8?arch=x86_64&upstream=libpeas-1.22.0-6.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.22.0-6.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libpkgconf@1.4.2-1.el8?arch=x86_64&upstream=pkgconf-1.4.2-1.el8.src.rpm&distro=rhel-8.9&package-id=3f6d405e6bb9ea32",
      "cpe": "cpe:2.3:a:libpkgconf:libpkgconf:1.4.2-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "name": "libpkgconf",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libpkgconf:1.4.2-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "67085"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "pkgconf-1.4.2-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libpkgconf@1.4.2-1.el8?arch=x86_64&upstream=pkgconf-1.4.2-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.4.2-1.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libpng@1.6.34-5.el8?arch=x86_64&epoch=2&upstream=libpng-1.6.34-5.el8.src.rpm&distro=rhel-8.9&package-id=820762c5f481def6",
      "cpe": "cpe:2.3:a:libpng:libpng:2\\:1.6.34-5.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "Zlib"
          }
        }
      ],
      "name": "libpng",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libpng:2\\:1.6.34-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "2"
        },
        {
          "name": "syft:metadata:release",
          "value": "5.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "235296"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libpng-1.6.34-5.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libpng@1.6.34-5.el8?arch=x86_64&epoch=2&upstream=libpng-1.6.34-5.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2:1.6.34-5.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libpsl@0.20.2-6.el8?arch=x86_64&upstream=libpsl-0.20.2-6.el8.src.rpm&distro=rhel-8.9&package-id=77758efa9a39737c",
      "cpe": "cpe:2.3:a:libpsl:libpsl:0.20.2-6.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libpsl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libpsl:0.20.2-6.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "70732"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libpsl-0.20.2-6.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libpsl@0.20.2-6.el8?arch=x86_64&upstream=libpsl-0.20.2-6.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "0.20.2-6.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libpwquality@1.4.4-6.el8?arch=x86_64&upstream=libpwquality-1.4.4-6.el8.src.rpm&distro=rhel-8.9&package-id=0c1b52cb48d04670",
      "cpe": "cpe:2.3:a:libpwquality:libpwquality:1.4.4-6.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD or GPLv2+"
          }
        }
      ],
      "name": "libpwquality",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libpwquality:1.4.4-6.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "396846"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libpwquality-1.4.4-6.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libpwquality@1.4.4-6.el8?arch=x86_64&upstream=libpwquality-1.4.4-6.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.4.4-6.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/librepo@1.14.2-4.el8?arch=x86_64&upstream=librepo-1.14.2-4.el8.src.rpm&distro=rhel-8.9&package-id=bfc8debb768e5c45",
      "cpe": "cpe:2.3:a:librepo:librepo:1.14.2-4.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "librepo",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:librepo:1.14.2-4.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "4.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "213468"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "librepo-1.14.2-4.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/librepo@1.14.2-4.el8?arch=x86_64&upstream=librepo-1.14.2-4.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.14.2-4.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/librhsm@0.0.3-5.el8?arch=x86_64&upstream=librhsm-0.0.3-5.el8.src.rpm&distro=rhel-8.9&package-id=7dbc94b38bcb5b97",
      "cpe": "cpe:2.3:a:librhsm:librhsm:0.0.3-5.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "librhsm",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:librhsm:0.0.3-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "5.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "76528"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "librhsm-0.0.3-5.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/librhsm@0.0.3-5.el8?arch=x86_64&upstream=librhsm-0.0.3-5.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "0.0.3-5.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libselinux@2.9-8.el8?arch=x86_64&upstream=libselinux-2.9-8.el8.src.rpm&distro=rhel-8.9&package-id=cb614fd15be76955",
      "cpe": "cpe:2.3:a:libselinux:libselinux:2.9-8.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "libselinux",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libselinux:2.9-8.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "8.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "173168"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libselinux-2.9-8.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libselinux@2.9-8.el8?arch=x86_64&upstream=libselinux-2.9-8.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.9-8.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libsemanage@2.9-9.el8_6?arch=x86_64&upstream=libsemanage-2.9-9.el8_6.src.rpm&distro=rhel-8.9&package-id=5c867d0a2660b4d8",
      "cpe": "cpe:2.3:a:libsemanage:libsemanage:2.9-9.el8_6:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libsemanage",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libsemanage:2.9-9.el8_6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "9.el8_6"
        },
        {
          "name": "syft:metadata:size",
          "value": "312360"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libsemanage-2.9-9.el8_6.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libsemanage@2.9-9.el8_6?arch=x86_64&upstream=libsemanage-2.9-9.el8_6.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.9-9.el8_6"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libsepol@2.9-3.el8?arch=x86_64&upstream=libsepol-2.9-3.el8.src.rpm&distro=rhel-8.9&package-id=f12f7f91579e0bcf",
      "cpe": "cpe:2.3:a:libsepol:libsepol:2.9-3.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libsepol",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libsepol:2.9-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "761624"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libsepol-2.9-3.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libsepol@2.9-3.el8?arch=x86_64&upstream=libsepol-2.9-3.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.9-3.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libsigsegv@2.11-5.el8?arch=x86_64&upstream=libsigsegv-2.11-5.el8.src.rpm&distro=rhel-8.9&package-id=cac0a1c20f8bfa71",
      "cpe": "cpe:2.3:a:libsigsegv:libsigsegv:2.11-5.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+"
          }
        }
      ],
      "name": "libsigsegv",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libsigsegv:2.11-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "5.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "46618"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libsigsegv-2.11-5.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libsigsegv@2.11-5.el8?arch=x86_64&upstream=libsigsegv-2.11-5.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.11-5.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libsmartcols@2.32.1-43.el8?arch=x86_64&upstream=util-linux-2.32.1-43.el8.src.rpm&distro=rhel-8.9&package-id=f78a5b16316ca732",
      "cpe": "cpe:2.3:a:libsmartcols:libsmartcols:2.32.1-43.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libsmartcols",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libsmartcols:2.32.1-43.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "43.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "248482"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "util-linux-2.32.1-43.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libsmartcols@2.32.1-43.el8?arch=x86_64&upstream=util-linux-2.32.1-43.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.32.1-43.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libsolv@0.7.20-6.el8?arch=x86_64&upstream=libsolv-0.7.20-6.el8.src.rpm&distro=rhel-8.9&package-id=4fa257a0b939b047",
      "cpe": "cpe:2.3:a:libsolv:libsolv:0.7.20-6.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "libsolv",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libsolv:0.7.20-6.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "803755"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libsolv-0.7.20-6.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libsolv@0.7.20-6.el8?arch=x86_64&upstream=libsolv-0.7.20-6.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "0.7.20-6.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libss@1.45.6-5.el8?arch=x86_64&upstream=e2fsprogs-1.45.6-5.el8.src.rpm&distro=rhel-8.9&package-id=404243aff06f7339",
      "cpe": "cpe:2.3:a:redhat:libss:1.45.6-5.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libss",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libss:libss:1.45.6-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "5.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "77729"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "e2fsprogs-1.45.6-5.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libss@1.45.6-5.el8?arch=x86_64&upstream=e2fsprogs-1.45.6-5.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.45.6-5.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libssh@0.9.6-10.el8_8?arch=x86_64&upstream=libssh-0.9.6-10.el8_8.src.rpm&distro=rhel-8.9&package-id=f8e26a5b03cf1301",
      "cpe": "cpe:2.3:a:libssh:libssh:0.9.6-10.el8_8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libssh",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libssh:0.9.6-10.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "10.el8_8"
        },
        {
          "name": "syft:metadata:size",
          "value": "521951"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libssh-0.9.6-10.el8_8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libssh@0.9.6-10.el8_8?arch=x86_64&upstream=libssh-0.9.6-10.el8_8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "0.9.6-10.el8_8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libssh@0.9.6-13.el8_9?arch=x86_64&upstream=libssh-0.9.6-13.el8_9.src.rpm&distro=rhel-8.9&package-id=4134918de8a9bd00",
      "cpe": "cpe:2.3:a:libssh:libssh:0.9.6-13.el8_9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libssh",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libssh:0.9.6-13.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "13.el8_9"
        },
        {
          "name": "syft:metadata:size",
          "value": "521887"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libssh-0.9.6-13.el8_9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libssh@0.9.6-13.el8_9?arch=x86_64&upstream=libssh-0.9.6-13.el8_9.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "0.9.6-13.el8_9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libssh-config@0.9.6-10.el8_8?arch=noarch&upstream=libssh-0.9.6-10.el8_8.src.rpm&distro=rhel-8.9&package-id=ae72feba95fdcf13",
      "cpe": "cpe:2.3:a:libssh-config:libssh-config:0.9.6-10.el8_8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libssh-config",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libssh-config:libssh_config:0.9.6-10.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libssh_config:libssh-config:0.9.6-10.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libssh_config:libssh_config:0.9.6-10.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libssh:libssh-config:0.9.6-10.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libssh:libssh_config:0.9.6-10.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libssh-config:0.9.6-10.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libssh_config:0.9.6-10.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "10.el8_8"
        },
        {
          "name": "syft:metadata:size",
          "value": "277"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libssh-0.9.6-10.el8_8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libssh-config@0.9.6-10.el8_8?arch=noarch&upstream=libssh-0.9.6-10.el8_8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "0.9.6-10.el8_8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libssh-config@0.9.6-13.el8_9?arch=noarch&upstream=libssh-0.9.6-13.el8_9.src.rpm&distro=rhel-8.9&package-id=e421ea75b9628fb8",
      "cpe": "cpe:2.3:a:libssh-config:libssh-config:0.9.6-13.el8_9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libssh-config",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libssh-config:libssh_config:0.9.6-13.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libssh_config:libssh-config:0.9.6-13.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libssh_config:libssh_config:0.9.6-13.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libssh:libssh-config:0.9.6-13.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:libssh:libssh_config:0.9.6-13.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libssh-config:0.9.6-13.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libssh_config:0.9.6-13.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "13.el8_9"
        },
        {
          "name": "syft:metadata:size",
          "value": "277"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libssh-0.9.6-13.el8_9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libssh-config@0.9.6-13.el8_9?arch=noarch&upstream=libssh-0.9.6-13.el8_9.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "0.9.6-13.el8_9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libstdc++@8.5.0-20.el8?arch=x86_64&upstream=gcc-8.5.0-20.el8.src.rpm&distro=rhel-8.9&package-id=73fbdf879f665b58",
      "cpe": "cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:8.5.0-20.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"
          }
        }
      ],
      "name": "libstdc++",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libstdc\\+\\+:8.5.0-20.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "20.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "1857740"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "gcc-8.5.0-20.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libstdc++@8.5.0-20.el8?arch=x86_64&upstream=gcc-8.5.0-20.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "8.5.0-20.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libtasn1@4.13-4.el8_7?arch=x86_64&upstream=libtasn1-4.13-4.el8_7.src.rpm&distro=rhel-8.9&package-id=d55b2fa0f4be14ec",
      "cpe": "cpe:2.3:a:libtasn1:libtasn1:4.13-4.el8_7:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+ and LGPLv2+"
          }
        }
      ],
      "name": "libtasn1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libtasn1:4.13-4.el8_7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "4.el8_7"
        },
        {
          "name": "syft:metadata:size",
          "value": "165293"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libtasn1-4.13-4.el8_7.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libtasn1@4.13-4.el8_7?arch=x86_64&upstream=libtasn1-4.13-4.el8_7.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "4.13-4.el8_7"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libtirpc@1.1.4-8.el8?arch=x86_64&upstream=libtirpc-1.1.4-8.el8.src.rpm&distro=rhel-8.9&package-id=2fe541b5ac9740a4",
      "cpe": "cpe:2.3:a:libtirpc:libtirpc:1.1.4-8.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "SISSL and BSD"
          }
        }
      ],
      "name": "libtirpc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libtirpc:1.1.4-8.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "8.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "228734"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libtirpc-1.1.4-8.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libtirpc@1.1.4-8.el8?arch=x86_64&upstream=libtirpc-1.1.4-8.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.1.4-8.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libunistring@0.9.9-3.el8?arch=x86_64&upstream=libunistring-0.9.9-3.el8.src.rpm&distro=rhel-8.9&package-id=c08b32cf6bbcc8be",
      "cpe": "cpe:2.3:a:libunistring:libunistring:0.9.9-3.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+ or LGPLv3+"
          }
        }
      ],
      "name": "libunistring",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libunistring:0.9.9-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "1810828"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libunistring-0.9.9-3.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libunistring@0.9.9-3.el8?arch=x86_64&upstream=libunistring-0.9.9-3.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "0.9.9-3.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libusbx@1.0.23-4.el8?arch=x86_64&upstream=libusbx-1.0.23-4.el8.src.rpm&distro=rhel-8.9&package-id=9a94e05e68fda374",
      "cpe": "cpe:2.3:a:libusbx:libusbx:1.0.23-4.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "libusbx",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libusbx:1.0.23-4.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "4.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "154147"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libusbx-1.0.23-4.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libusbx@1.0.23-4.el8?arch=x86_64&upstream=libusbx-1.0.23-4.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.0.23-4.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libuuid@2.32.1-43.el8?arch=x86_64&upstream=util-linux-2.32.1-43.el8.src.rpm&distro=rhel-8.9&package-id=c3eaf1b00e804cf6",
      "cpe": "cpe:2.3:a:libuuid:libuuid:2.32.1-43.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "libuuid",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libuuid:2.32.1-43.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "43.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "35088"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "util-linux-2.32.1-43.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libuuid@2.32.1-43.el8?arch=x86_64&upstream=util-linux-2.32.1-43.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.32.1-43.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libverto@0.3.2-2.el8?arch=x86_64&upstream=libverto-0.3.2-2.el8.src.rpm&distro=rhel-8.9&package-id=13b8058d681123f7",
      "cpe": "cpe:2.3:a:libverto:libverto:0.3.2-2.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libverto",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libverto:0.3.2-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "2.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "26789"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libverto-0.3.2-2.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libverto@0.3.2-2.el8?arch=x86_64&upstream=libverto-0.3.2-2.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "0.3.2-2.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libxcb@1.13.1-1.el8?arch=x86_64&upstream=libxcb-1.13.1-1.el8.src.rpm&distro=rhel-8.9&package-id=7c2aaa726c5abbf3",
      "cpe": "cpe:2.3:a:libxcb:libxcb:1.13.1-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libxcb",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libxcb:1.13.1-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "1030768"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libxcb-1.13.1-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libxcb@1.13.1-1.el8?arch=x86_64&upstream=libxcb-1.13.1-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.13.1-1.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libxcrypt@4.1.1-6.el8?arch=x86_64&upstream=libxcrypt-4.1.1-6.el8.src.rpm&distro=rhel-8.9&package-id=001aae8687409095",
      "cpe": "cpe:2.3:a:libxcrypt:libxcrypt:4.1.1-6.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+ and BSD and Public Domain"
          }
        }
      ],
      "name": "libxcrypt",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libxcrypt:4.1.1-6.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "185892"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libxcrypt-4.1.1-6.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libxcrypt@4.1.1-6.el8?arch=x86_64&upstream=libxcrypt-4.1.1-6.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "4.1.1-6.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libxml2@2.9.7-16.el8_8.1?arch=x86_64&upstream=libxml2-2.9.7-16.el8_8.1.src.rpm&distro=rhel-8.9&package-id=2d5081d8d94400d8",
      "cpe": "cpe:2.3:a:libxml2:libxml2:2.9.7-16.el8_8.1:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libxml2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libxml2:2.9.7-16.el8_8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "16.el8_8.1"
        },
        {
          "name": "syft:metadata:size",
          "value": "1753106"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libxml2-2.9.7-16.el8_8.1.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libxml2@2.9.7-16.el8_8.1?arch=x86_64&upstream=libxml2-2.9.7-16.el8_8.1.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.9.7-16.el8_8.1"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libxml2@2.9.7-18.el8_9?arch=x86_64&upstream=libxml2-2.9.7-18.el8_9.src.rpm&distro=rhel-8.9&package-id=c74d5ae4117208d0",
      "cpe": "cpe:2.3:a:libxml2:libxml2:2.9.7-18.el8_9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libxml2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libxml2:2.9.7-18.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "18.el8_9"
        },
        {
          "name": "syft:metadata:size",
          "value": "1753146"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libxml2-2.9.7-18.el8_9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libxml2@2.9.7-18.el8_9?arch=x86_64&upstream=libxml2-2.9.7-18.el8_9.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.9.7-18.el8_9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libyaml@0.1.7-5.el8?arch=x86_64&upstream=libyaml-0.1.7-5.el8.src.rpm&distro=rhel-8.9&package-id=5be3f95e69b94230",
      "cpe": "cpe:2.3:a:libyaml:libyaml:0.1.7-5.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "libyaml",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libyaml:0.1.7-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "5.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "135798"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "libyaml-0.1.7-5.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libyaml@0.1.7-5.el8?arch=x86_64&upstream=libyaml-0.1.7-5.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "0.1.7-5.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/libzstd@1.4.4-1.el8?arch=x86_64&upstream=zstd-1.4.4-1.el8.src.rpm&distro=rhel-8.9&package-id=c85f038f6df365ae",
      "cpe": "cpe:2.3:a:libzstd:libzstd:1.4.4-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD and GPLv2"
          }
        }
      ],
      "name": "libzstd",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:libzstd:1.4.4-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "698061"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "zstd-1.4.4-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/libzstd@1.4.4-1.el8?arch=x86_64&upstream=zstd-1.4.4-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.4.4-1.el8"
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/listenablefuture@1.0?package-id=cbc1c86f639afb05",
      "cpe": "cpe:2.3:a:listenablefuture:listenablefuture:1.0:*:*:*:*:*:*:*",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:listenablefuture:1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:listenablefuture:1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-client-5.4.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "listenablefuture"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/curator-client-5.4.0.jar:com.google.guava:listenablefuture"
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@1.0",
      "type": "library",
      "version": "1.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?package-id=563819bf0b3a0f99",
      "cpe": "cpe:2.3:a:listenablefuture:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b421526c5f297295adef1c886e5246c39d4ac629"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.guava",
      "name": "listenablefuture",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "listenablefuture"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-opa-authorizer/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar"
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava",
      "type": "library",
      "version": "9999.0-empty-to-avoid-conflict-with-guava"
    },
    {
      "bom-ref": "pkg:rpm/rhel/lksctp-tools@1.0.18-3.el8?arch=x86_64&upstream=lksctp-tools-1.0.18-3.el8.src.rpm&distro=rhel-8.9&package-id=f49a2ebd9e926c6b",
      "cpe": "cpe:2.3:a:lksctp-tools:lksctp-tools:1.0.18-3.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2 and GPLv2+ and LGPLv2 and MIT"
          }
        }
      ],
      "name": "lksctp-tools",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lksctp-tools:lksctp_tools:1.0.18-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lksctp_tools:lksctp-tools:1.0.18-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lksctp_tools:lksctp_tools:1.0.18-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lksctp:lksctp-tools:1.0.18-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lksctp:lksctp_tools:1.0.18-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:lksctp-tools:1.0.18-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:lksctp_tools:1.0.18-3.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "256698"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "lksctp-tools-1.0.18-3.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/lksctp-tools@1.0.18-3.el8?arch=x86_64&upstream=lksctp-tools-1.0.18-3.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.0.18-3.el8"
    },
    {
      "bom-ref": "pkg:maven/log4j/log4j@1.2.17?package-id=0c9957ee4c530fbe",
      "cpe": "cpe:2.3:a:apache:log4j:1.2.17:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5af35056b4d257e4b64b9e8069c0746e8b08629f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "log4j",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "log4j",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/log4j-1.2.17.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "log4j"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "log4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/log4j-1.2.17.jar"
        }
      ],
      "purl": "pkg:maven/log4j/log4j@1.2.17",
      "type": "library",
      "version": "1.2.17"
    },
    {
      "bom-ref": "pkg:maven/log4j/log4j@1.2.17?package-id=21f360945114da5c",
      "cpe": "cpe:2.3:a:apache:log4j:1.2.17:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5af35056b4d257e4b64b9e8069c0746e8b08629f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "log4j",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "log4j",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/log4j-1.2.17.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "log4j"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "log4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/log4j-1.2.17.jar"
        }
      ],
      "purl": "pkg:maven/log4j/log4j@1.2.17",
      "type": "library",
      "version": "1.2.17"
    },
    {
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.18.0?package-id=9c7af40c38cc9a43",
      "cpe": "cpe:2.3:a:apache:log4j-1.2-api:2.18.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "09b1039c025e0d9a792daf1af0eac564e7181210"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.logging.log4j",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "log4j-1.2-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j_1.2_api:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:logging:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:2-api:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:2_api:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:1:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/log4j-1.2-api-2.18.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "log4j-1.2-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.logging.log4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/log4j-1.2-api-2.18.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.18.0",
      "type": "library",
      "version": "2.18.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?package-id=0fbc7aed2b8883f2",
      "cpe": "cpe:2.3:a:apache:log4j-api:2.18.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c72ad9b1d8d42e4ea7befd8248bf05877af4c63d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.logging.log4j",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "log4j-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j_api:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:api:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/log4j-api-2.18.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "log4j-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.logging.log4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/log4j-api-2.18.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0",
      "type": "library",
      "version": "2.18.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?package-id=6d14dd81aa064dde",
      "cpe": "cpe:2.3:a:apache:log4j-core:2.18.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "07c1882ede137548925eadb750615edab2f6e13c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.logging.log4j",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "log4j-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j_core:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:core:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/log4j-core-2.18.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "log4j-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.logging.log4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/log4j-core-2.18.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0",
      "type": "library",
      "version": "2.18.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-jul@2.18.0?package-id=3185ef131c4f872f",
      "cpe": "cpe:2.3:a:apache:log4j-jul:2.18.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8921d9510b9215695dec14bda5f146811632b4c7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.logging.log4j",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "log4j-jul",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j_jul:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:jul:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/log4j-jul-2.18.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "log4j-jul"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.logging.log4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/log4j-jul-2.18.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-jul@2.18.0",
      "type": "library",
      "version": "2.18.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.18.0?package-id=4648ed659d8efcf9",
      "cpe": "cpe:2.3:a:apache:log4j-slf4j-impl:2.18.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e0ea6ef49f1349bb30e8c6e8a7052d0f3ee7a719"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.logging.log4j",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "log4j-slf4j-impl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j_slf4j_impl:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:slf4j-impl:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:slf4j_impl:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j:2.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/log4j-slf4j-impl-2.18.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "log4j-slf4j-impl"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.logging.log4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/log4j-slf4j-impl-2.18.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.18.0",
      "type": "library",
      "version": "2.18.0"
    },
    {
      "bom-ref": "pkg:maven/com.squareup.okhttp3/logging-interceptor@3.14.9?package-id=57ce294789bc0f57",
      "cpe": "cpe:2.3:a:logging-interceptor:logging-interceptor:3.14.9:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7358b6fa1d6c1c8b8c01cb05acd74dbe6d680fb1"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.squareup.okhttp3",
      "name": "logging-interceptor",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:logging-interceptor:logging_interceptor:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:logging_interceptor:logging-interceptor:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:logging_interceptor:logging_interceptor:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:squareup:logging-interceptor:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:squareup:logging_interceptor:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:logging:logging-interceptor:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:logging:logging_interceptor:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:okhttp3:logging-interceptor:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:okhttp3:logging_interceptor:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/logging-interceptor-3.14.9.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "logging-interceptor"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.squareup.okhttp3"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/logging-interceptor-3.14.9.jar"
        }
      ],
      "purl": "pkg:maven/com.squareup.okhttp3/logging-interceptor@3.14.9",
      "type": "library",
      "version": "3.14.9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/lua@5.3.4-12.el8?arch=x86_64&upstream=lua-5.3.4-12.el8.src.rpm&distro=rhel-8.9&package-id=1bf702ca590fd59a",
      "cpe": "cpe:2.3:a:redhat:lua:5.3.4-12.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "lua",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lua:lua:5.3.4-12.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "12.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "566516"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "lua-5.3.4-12.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/lua@5.3.4-12.el8?arch=x86_64&upstream=lua-5.3.4-12.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "5.3.4-12.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/lua-libs@5.3.4-12.el8?arch=x86_64&upstream=lua-5.3.4-12.el8.src.rpm&distro=rhel-8.9&package-id=92cccbc256010f40",
      "cpe": "cpe:2.3:a:lua-libs:lua-libs:5.3.4-12.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "lua-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lua-libs:lua_libs:5.3.4-12.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lua_libs:lua-libs:5.3.4-12.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lua_libs:lua_libs:5.3.4-12.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:lua-libs:5.3.4-12.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:lua_libs:5.3.4-12.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lua:lua-libs:5.3.4-12.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lua:lua_libs:5.3.4-12.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "12.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "247936"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "lua-5.3.4-12.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/lua-libs@5.3.4-12.el8?arch=x86_64&upstream=lua-5.3.4-12.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "5.3.4-12.el8"
    },
    {
      "bom-ref": "pkg:maven/org.lz4.java/lz4-java@1.8.0?package-id=403de628d39287d5",
      "cpe": "cpe:2.3:a:lz4-java:lz4-java:1.8.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "lz4-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4-java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4-java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/lz4-java-1.8.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/lz4-java-1.8.0.jar"
        }
      ],
      "purl": "pkg:maven/org.lz4.java/lz4-java@1.8.0",
      "type": "library",
      "version": "1.8.0"
    },
    {
      "bom-ref": "pkg:maven/org.lz4.java/lz4-java@1.8.0?package-id=9a16c1ce4126a7f0",
      "cpe": "cpe:2.3:a:lz4-java:lz4-java:1.8.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "lz4-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4-java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4-java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/lz4-java-1.8.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/lz4-java-1.8.0.jar"
        }
      ],
      "purl": "pkg:maven/org.lz4.java/lz4-java@1.8.0",
      "type": "library",
      "version": "1.8.0"
    },
    {
      "bom-ref": "pkg:maven/org.lz4.java/lz4-java@1.8.0?package-id=c2579796bda34901",
      "cpe": "cpe:2.3:a:lz4-java:lz4-java:1.8.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "lz4-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4-java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4-java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-indexing-service/lz4-java-1.8.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-indexing-service/lz4-java-1.8.0.jar"
        }
      ],
      "purl": "pkg:maven/org.lz4.java/lz4-java@1.8.0",
      "type": "library",
      "version": "1.8.0"
    },
    {
      "bom-ref": "pkg:maven/org.lz4.java/lz4-java@1.8.0?package-id=28a7bff4e3b85461",
      "cpe": "cpe:2.3:a:lz4-java:lz4-java:1.8.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "lz4-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4-java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4-java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:lz4-java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:lz4_java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:java:1.8.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/lz4-java-1.8.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/lz4-java-1.8.0.jar"
        }
      ],
      "purl": "pkg:maven/org.lz4.java/lz4-java@1.8.0",
      "type": "library",
      "version": "1.8.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/lz4-libs@1.8.3-3.el8_4?arch=x86_64&upstream=lz4-1.8.3-3.el8_4.src.rpm&distro=rhel-8.9&package-id=52df190844bcf75f",
      "cpe": "cpe:2.3:a:lz4-libs:lz4-libs:1.8.3-3.el8_4:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+ and BSD"
          }
        }
      ],
      "name": "lz4-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4-libs:lz4_libs:1.8.3-3.el8_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_libs:lz4-libs:1.8.3-3.el8_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4_libs:lz4_libs:1.8.3-3.el8_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:lz4-libs:1.8.3-3.el8_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:lz4_libs:1.8.3-3.el8_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:lz4-libs:1.8.3-3.el8_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lz4:lz4_libs:1.8.3-3.el8_4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el8_4"
        },
        {
          "name": "syft:metadata:size",
          "value": "121071"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "lz4-1.8.3-3.el8_4.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/lz4-libs@1.8.3-3.el8_4?arch=x86_64&upstream=lz4-1.8.3-3.el8_4.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.8.3-3.el8_4"
    },
    {
      "bom-ref": "pkg:maven/org.mapdb/mapdb@1.0.8?package-id=43df8f2649f806e8",
      "cpe": "cpe:2.3:a:mapdb:mapdb:1.0.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "64485a221d9095fc7ab9b50cc34c6b4b58467e2e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.mapdb",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "mapdb",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/mapdb-1.0.8.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "mapdb"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.mapdb"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/mapdb-1.0.8.jar"
        }
      ],
      "purl": "pkg:maven/org.mapdb/mapdb@1.0.8",
      "type": "library",
      "version": "1.0.8"
    },
    {
      "bom-ref": "pkg:maven/org.mapdb/mapdb@1.0.8?package-id=663a2222db897b8a",
      "cpe": "cpe:2.3:a:mapdb:mapdb:1.0.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "64485a221d9095fc7ab9b50cc34c6b4b58467e2e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.mapdb",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "mapdb",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-global/mapdb-1.0.8.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "mapdb"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.mapdb"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-global/mapdb-1.0.8.jar"
        }
      ],
      "purl": "pkg:maven/org.mapdb/mapdb@1.0.8",
      "type": "library",
      "version": "1.0.8"
    },
    {
      "bom-ref": "pkg:maven/org.mapdb/mapdb@1.0.8?package-id=a14bf0dc3d968ff7",
      "cpe": "cpe:2.3:a:mapdb:mapdb:1.0.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "64485a221d9095fc7ab9b50cc34c6b4b58467e2e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.mapdb",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "mapdb",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-single/mapdb-1.0.8.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "mapdb"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.mapdb"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-single/mapdb-1.0.8.jar"
        }
      ],
      "purl": "pkg:maven/org.mapdb/mapdb@1.0.8",
      "type": "library",
      "version": "1.0.8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.maven/maven-aether-provider@3.1.1?package-id=0d419cbe2b684806",
      "cpe": "cpe:2.3:a:apache:maven-aether-provider:3.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7fd8a65d950d0e77dd39cc4ce2776ff9673ae470"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.maven",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "maven-aether-provider",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:maven_aether_provider:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:maven:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-aether-provider-3.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "maven-aether-provider"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.maven"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-aether-provider-3.1.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-aether-provider@3.1.1",
      "type": "library",
      "version": "3.1.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.maven/maven-artifact@3.6.0?package-id=7bd5b93d3e3f2a21",
      "cpe": "cpe:2.3:a:apache:maven-artifact:3.6.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d4c0da647de59c9ccc304a112fe1f1474d49e8eb"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.maven",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "maven-artifact",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:maven_artifact:3.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:maven:3.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-artifact-3.6.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "maven-artifact"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.maven"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-artifact-3.6.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-artifact@3.6.0",
      "type": "library",
      "version": "3.6.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.maven/maven-model@3.1.1?package-id=60e555badfdaea2a",
      "cpe": "cpe:2.3:a:apache:maven-model:3.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ccf79a1a63ef35de038a4226a952175c4e9f4f59"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.maven",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "maven-model",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:maven_model:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-model-3.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "maven-model"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.maven"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-model-3.1.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-model@3.1.1",
      "type": "library",
      "version": "3.1.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.maven/maven-model-builder@3.1.1?package-id=09f19e98b777eb63",
      "cpe": "cpe:2.3:a:apache:maven-model-builder:3.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5fb53c92da84ebeff403414b667611d6bcd477cf"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.maven",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "maven-model-builder",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:maven_model_builder:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:maven:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-model-builder-3.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "maven-model-builder"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.maven"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-model-builder-3.1.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-model-builder@3.1.1",
      "type": "library",
      "version": "3.1.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.maven/maven-repository-metadata@3.1.1?package-id=eececfcf8e5f3f7d",
      "cpe": "cpe:2.3:a:apache:maven-repository-metadata:3.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ef5bccf2a7a22a326c8fe94e1d56f6f15419bedd"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.maven",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "maven-repository-metadata",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:maven_repository_metadata:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-repository-metadata-3.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "maven-repository-metadata"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.maven"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-repository-metadata-3.1.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-repository-metadata@3.1.1",
      "type": "library",
      "version": "3.1.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.maven/maven-settings@3.1.1?package-id=7f1d8745ce82180e",
      "cpe": "cpe:2.3:a:apache:maven-settings:3.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "311d38cf15ec7f5c713985862632db91b7a827af"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.maven",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "maven-settings",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:maven_settings:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-settings-3.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "maven-settings"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.maven"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-settings-3.1.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-settings@3.1.1",
      "type": "library",
      "version": "3.1.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.maven/maven-settings-builder@3.1.1?package-id=81ad5bed46e68f64",
      "cpe": "cpe:2.3:a:apache:maven-settings-builder:3.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e2d5e96ea4bbd4fc463dbb76d07dd8aefac05e3c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.maven",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "maven-settings-builder",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:maven_settings_builder:3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-settings-builder-3.1.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "maven-settings-builder"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.maven"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/maven-settings-builder-3.1.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-settings-builder@3.1.1",
      "type": "library",
      "version": "3.1.1"
    },
    {
      "bom-ref": "pkg:maven/com.yammer.metrics/metrics-core@2.2.0?package-id=d0b2f39336dc0fa8",
      "cpe": "cpe:2.3:a:metrics-core:metrics-core:2.2.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f82c035cfa786d3cbec362c38c22a5f5b1bc8724"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.yammer.metrics",
      "name": "metrics-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics-core:metrics_core:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics_core:metrics-core:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics_core:metrics_core:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics-core:metrics:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics:metrics-core:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics:metrics_core:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics_core:metrics:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:yammer:metrics-core:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:yammer:metrics_core:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics:metrics:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:yammer:metrics:2.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/metrics-core-2.2.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "metrics-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.yammer.metrics"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/metrics-core-2.2.0.jar"
        }
      ],
      "purl": "pkg:maven/com.yammer.metrics/metrics-core@2.2.0",
      "type": "library",
      "version": "2.2.0"
    },
    {
      "bom-ref": "pkg:maven/io.dropwizard.metrics/metrics-core@4.0.0?package-id=dd9692e07a3acc68",
      "cpe": "cpe:2.3:a:metrics-core:metrics-core:4.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "551f95873512d1a8564a99ae4b57f64d15eda503"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.dropwizard.metrics",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "name": "metrics-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics-core:metrics_core:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics_core:metrics-core:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics_core:metrics_core:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dropwizard:metrics-core:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dropwizard:metrics_core:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics-core:metrics:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics:metrics-core:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics:metrics_core:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics_core:metrics:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dropwizard:metrics:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:metrics-core:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:metrics_core:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics-core:core:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics_core:core:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dropwizard:core:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics:metrics:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:metrics:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:metrics:core:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/metrics-core-4.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "metrics-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.dropwizard.metrics"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/metrics-core-4.0.0.jar"
        }
      ],
      "purl": "pkg:maven/io.dropwizard.metrics/metrics-core@4.0.0",
      "type": "library",
      "version": "4.0.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/microdnf@3.8.0-2.el8?arch=x86_64&upstream=microdnf-3.8.0-2.el8.src.rpm&distro=rhel-8.9&package-id=33832945d52decda",
      "cpe": "cpe:2.3:a:microdnf:microdnf:3.8.0-2.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+"
          }
        }
      ],
      "name": "microdnf",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:microdnf:3.8.0-2.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "2.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "123455"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "microdnf-3.8.0-2.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/microdnf@3.8.0-2.el8?arch=x86_64&upstream=microdnf-3.8.0-2.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.8.0-2.el8"
    },
    {
      "bom-ref": "pkg:maven/org.mockito.mockito-core/mockito-core@4.3.1?package-id=7e6b6456c806c674",
      "cpe": "cpe:2.3:a:mockito-core:mockito-core:4.3.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b35c904ac218ca833935e5fccc0aaaaf38225de3"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "mockito-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mockito-core:mockito_core:4.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mockito_core:mockito-core:4.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mockito_core:mockito_core:4.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mockito:mockito-core:4.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mockito:mockito_core:4.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/mockito-core-4.3.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/mockito-core-4.3.1.jar"
        }
      ],
      "purl": "pkg:maven/org.mockito.mockito-core/mockito-core@4.3.1",
      "type": "library",
      "version": "4.3.1"
    },
    {
      "bom-ref": "pkg:rpm/rhel/mpfr@3.1.6-1.el8?arch=x86_64&upstream=mpfr-3.1.6-1.el8.src.rpm&distro=rhel-8.9&package-id=0dd6bdd3924e982b",
      "cpe": "cpe:2.3:a:redhat:mpfr:3.1.6-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv3+ and GPLv3+ and GFDL"
          }
        }
      ],
      "name": "mpfr",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mpfr:mpfr:3.1.6-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "594201"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "mpfr-3.1.6-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/mpfr@3.1.6-1.el8?arch=x86_64&upstream=mpfr-3.1.6-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.1.6-1.el8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/mysql-metadata-storage@26.0.0?package-id=e2a35ea2d607d14b",
      "cpe": "cpe:2.3:a:apache:mysql-metadata-storage:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "887886f4f68665e3b5c7a5c001f7bb2afd4c3f47"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "mysql-metadata-storage",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:mysql_metadata_storage:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/mysql-metadata-storage/mysql-metadata-storage-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "mysql-metadata-storage"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/mysql-metadata-storage/mysql-metadata-storage-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/mysql-metadata-storage@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/ncurses-base@6.1-10.20180224.el8?arch=noarch&upstream=ncurses-6.1-10.20180224.el8.src.rpm&distro=rhel-8.9&package-id=d26b1db28074bac3",
      "cpe": "cpe:2.3:a:ncurses-base:ncurses-base:6.1-10.20180224.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "ncurses-base",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses-base:ncurses_base:6.1-10.20180224.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses_base:ncurses-base:6.1-10.20180224.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses_base:ncurses_base:6.1-10.20180224.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses:ncurses-base:6.1-10.20180224.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses:ncurses_base:6.1-10.20180224.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:ncurses-base:6.1-10.20180224.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:ncurses_base:6.1-10.20180224.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "10.20180224.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "290089"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "ncurses-6.1-10.20180224.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/ncurses-base@6.1-10.20180224.el8?arch=noarch&upstream=ncurses-6.1-10.20180224.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "6.1-10.20180224.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&upstream=ncurses-6.1-10.20180224.el8.src.rpm&distro=rhel-8.9&package-id=c3893873573cb302",
      "cpe": "cpe:2.3:a:ncurses-libs:ncurses-libs:6.1-10.20180224.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "ncurses-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses-libs:ncurses_libs:6.1-10.20180224.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses_libs:ncurses-libs:6.1-10.20180224.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses_libs:ncurses_libs:6.1-10.20180224.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses:ncurses-libs:6.1-10.20180224.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ncurses:ncurses_libs:6.1-10.20180224.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:ncurses-libs:6.1-10.20180224.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:ncurses_libs:6.1-10.20180224.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "10.20180224.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "955832"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "ncurses-6.1-10.20180224.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/ncurses-libs@6.1-10.20180224.el8?arch=x86_64&upstream=ncurses-6.1-10.20180224.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "6.1-10.20180224.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/nettle@3.4.1-7.el8?arch=x86_64&upstream=nettle-3.4.1-7.el8.src.rpm&distro=rhel-8.9&package-id=4d1049b8b567ac39",
      "cpe": "cpe:2.3:a:nettle:nettle:3.4.1-7.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv3+ or GPLv2+"
          }
        }
      ],
      "name": "nettle",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:nettle:3.4.1-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "572273"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "nettle-3.4.1-7.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/nettle@3.4.1-7.el8?arch=x86_64&upstream=nettle-3.4.1-7.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.4.1-7.el8"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty@3.10.6.Final?package-id=72bdbf76ffa48da7",
      "cpe": "cpe:2.3:a:NettyBundleActivator:netty:3.10.6.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "18ed04a0e502896552854926e908509db2987a00"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:container:netty:3.10.6.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jboss:netty:3.10.6.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty:3.10.6.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:netty:3.10.6.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-3.10.6.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-3.10.6.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty@3.10.6.Final",
      "type": "library",
      "version": "3.10.6.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.86.Final?package-id=1390d2aef49778d5",
      "cpe": "cpe:2.3:a:netty-project:netty-buffer:4.1.86.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a66fa0ed2687eb33a2e53a17a6df61bfe3b3f2bd"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-buffer",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_buffer:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-buffer:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_buffer:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-buffer:netty-buffer:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-buffer:netty_buffer:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_buffer:netty-buffer:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_buffer:netty_buffer:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:buffer:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:buffer:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffer:netty-buffer:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffer:netty_buffer:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-buffer:buffer:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_buffer:buffer:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-buffer:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_buffer:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buffer:buffer:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:buffer:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-buffer-4.1.86.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-buffer"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-buffer-4.1.86.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-buffer@4.1.86.Final",
      "type": "library",
      "version": "4.1.86.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.86.Final?package-id=9ea723c07921e5e8",
      "cpe": "cpe:2.3:a:netty-project:netty-codec:4.1.86.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ee126da926ea202da3b21eb737788ef83b1db772"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-codec",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_codec:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-codec:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_codec:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:netty-codec:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:netty_codec:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:netty-codec:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:netty_codec:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:codec:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:codec:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:netty-codec:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:netty_codec:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:codec:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-codec:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_codec:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:codec:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:codec:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:codec:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-codec-4.1.86.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-codec"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-codec-4.1.86.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-codec@4.1.86.Final",
      "type": "library",
      "version": "4.1.86.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-dns@4.1.86.Final?package-id=0b5223a481d1f659",
      "cpe": "cpe:2.3:a:netty-codec-dns:netty-codec-dns:4.1.86.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c8de479f36a8457541fcbb0016c851bde3e67693"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-codec-dns",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec-dns:netty_codec_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_dns:netty-codec-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_dns:netty_codec_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-codec-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_codec_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-codec-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_codec_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:netty-codec-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:netty_codec_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:netty-codec-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:netty_codec_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-dns:netty-codec-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-dns:netty_codec_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_dns:netty-codec-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_dns:netty_codec_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec-dns:codec-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec-dns:codec_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_dns:codec-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_dns:codec_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:codec-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:codec_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:codec-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:codec_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:netty-codec-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:netty_codec_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:codec-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:codec_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-codec-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_codec_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:codec-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:codec_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-dns:codec-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-dns:codec_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_dns:codec-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_dns:codec_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:codec-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:codec_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:codec-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:codec_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-codec-dns-4.1.86.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-codec-dns"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-codec-dns-4.1.86.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-codec-dns@4.1.86.Final",
      "type": "library",
      "version": "4.1.86.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.86.Final?package-id=5976f87bb2644900",
      "cpe": "cpe:2.3:a:netty-codec-http:netty-codec-http:4.1.86.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "23674593f004959ae002ec348626eecf677191ae"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-codec-http",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec-http:netty_codec_http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_http:netty-codec-http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_http:netty_codec_http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-codec-http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_codec_http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-codec-http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_codec_http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:netty-codec-http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:netty_codec_http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:netty-codec-http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:netty_codec_http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-http:netty-codec-http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-http:netty_codec_http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_http:netty-codec-http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_http:netty_codec_http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec-http:codec-http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec-http:codec_http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_http:codec-http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_http:codec_http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:codec-http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:codec_http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:codec-http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:codec_http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:netty-codec-http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:netty_codec_http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:codec-http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:codec_http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-codec-http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_codec_http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:codec-http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:codec_http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-http:codec-http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-http:codec_http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_http:codec-http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_http:codec_http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:codec-http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:codec_http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:codec-http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:codec_http:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-codec-http-4.1.86.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-codec-http"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-codec-http-4.1.86.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-codec-http@4.1.86.Final",
      "type": "library",
      "version": "4.1.86.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-codec-socks@4.1.86.Final?package-id=64640862db88114e",
      "cpe": "cpe:2.3:a:netty-codec-socks:netty-codec-socks:4.1.86.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "854264e7ad75887bc25b82eb38e4ee65c8b44dc3"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-codec-socks",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec-socks:netty_codec_socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_socks:netty-codec-socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_socks:netty_codec_socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-codec-socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_codec_socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-codec-socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_codec_socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-socks:netty-codec-socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-socks:netty_codec_socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_socks:netty-codec-socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_socks:netty_codec_socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec-socks:codec-socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec-socks:codec_socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:netty-codec-socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:netty_codec_socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:netty-codec-socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:netty_codec_socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_socks:codec-socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec_socks:codec_socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:codec-socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:codec_socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:codec-socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:codec_socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-socks:codec-socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec-socks:codec_socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:netty-codec-socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:netty_codec_socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_socks:codec-socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec_socks:codec_socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:codec-socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-codec:codec_socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-codec-socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_codec_socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:codec-socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_codec:codec_socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:codec-socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codec:codec_socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:codec-socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:codec_socks:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-codec-socks-4.1.86.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-codec-socks"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-codec-socks-4.1.86.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-codec-socks@4.1.86.Final",
      "type": "library",
      "version": "4.1.86.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-common@4.1.86.Final?package-id=ce16108e1ab7acf1",
      "cpe": "cpe:2.3:a:netty-project:netty-common:4.1.86.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1dceab4662a9cc93faf87b237bb41103b1bc7f0e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-common:netty-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-common:netty_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_common:netty-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_common:netty_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:netty-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:netty_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-common:common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_common:common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-common-4.1.86.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-common-4.1.86.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-common@4.1.86.Final",
      "type": "library",
      "version": "4.1.86.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-handler@4.1.86.Final?package-id=8109a18eb03e18b5",
      "cpe": "cpe:2.3:a:netty-handler:netty-handler:4.1.86.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0bcb65230218286e6456b5d085cb42e67776eb70"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-handler",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-handler:netty_handler:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-handler:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_handler:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler:netty-handler:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler:netty_handler:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-handler:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_handler:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler:netty-handler:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler:netty_handler:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-handler:handler:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:handler:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler:handler:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:handler:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-handler:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_handler:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler:handler:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:handler:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-handler-4.1.86.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-handler"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-handler-4.1.86.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-handler@4.1.86.Final",
      "type": "library",
      "version": "4.1.86.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.86.Final?package-id=5623f890ed84ee33",
      "cpe": "cpe:2.3:a:netty-handler-proxy:netty-handler-proxy:4.1.86.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2515d76be9671cc248bab77352edddd16bfa9436"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-handler-proxy",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-handler-proxy:netty_handler_proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler_proxy:netty-handler-proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler_proxy:netty_handler_proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler-proxy:netty-handler-proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler-proxy:netty_handler_proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler_proxy:netty-handler-proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler_proxy:netty_handler_proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-handler-proxy:handler-proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-handler-proxy:handler_proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-handler:netty-handler-proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-handler:netty_handler_proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-handler-proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_handler_proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler:netty-handler-proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler:netty_handler_proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler_proxy:handler-proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler_proxy:handler_proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-handler-proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_handler_proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler-proxy:handler-proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler-proxy:handler_proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler:netty-handler-proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler:netty_handler_proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler_proxy:handler-proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler_proxy:handler_proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-handler:handler-proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-handler:handler_proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:handler-proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:handler_proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler:handler-proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_handler:handler_proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:handler-proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:handler_proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-handler-proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_handler_proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler:handler-proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:handler:handler_proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:handler-proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:handler_proxy:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-handler-proxy-4.1.86.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-handler-proxy"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-handler-proxy-4.1.86.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.86.Final",
      "type": "library",
      "version": "4.1.86.Final"
    },
    {
      "bom-ref": "pkg:maven/com.typesafe.netty/netty-reactive-streams@2.0.0?package-id=92190e1758296469",
      "cpe": "cpe:2.3:a:netty-reactive-streams:netty-reactive-streams:2.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "84ede759015e7480ca8e6ec2af6e2f596aa92dec"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.typesafe.netty",
      "name": "netty-reactive-streams",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-reactive-streams:netty_reactive_streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_reactive_streams:netty-reactive-streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_reactive_streams:netty_reactive_streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-reactive:netty-reactive-streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-reactive:netty_reactive_streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_reactive:netty-reactive-streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_reactive:netty_reactive_streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:typesafe:netty-reactive-streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:typesafe:netty_reactive_streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-reactive-streams:netty:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-reactive-streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_reactive_streams:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_reactive_streams:netty:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-reactive:netty:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_reactive:netty:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:typesafe:netty:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-reactive-streams-2.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-reactive-streams"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.typesafe.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-reactive-streams-2.0.0.jar"
        }
      ],
      "purl": "pkg:maven/com.typesafe.netty/netty-reactive-streams@2.0.0",
      "type": "library",
      "version": "2.0.0"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-resolver@4.1.86.Final?package-id=2514990f72a40010",
      "cpe": "cpe:2.3:a:netty-resolver:netty-resolver:4.1.86.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bad83d479f7bd8ea84eefd77c316435be4c97270"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-resolver",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-resolver:netty_resolver:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver:netty-resolver:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver:netty_resolver:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-resolver:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_resolver:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-resolver:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_resolver:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-resolver:resolver:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver:resolver:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver:netty-resolver:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver:netty_resolver:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:resolver:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:resolver:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-resolver:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_resolver:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver:resolver:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:resolver:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-resolver-4.1.86.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-resolver"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-resolver-4.1.86.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-resolver@4.1.86.Final",
      "type": "library",
      "version": "4.1.86.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.86.Final?package-id=e54237f9742b0a85",
      "cpe": "cpe:2.3:a:netty-resolver-dns:netty-resolver-dns:4.1.86.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a1e2ef79e4944b5d38092328c36c68e677a4b5f3"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-resolver-dns",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-resolver-dns:netty_resolver_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver_dns:netty-resolver-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver_dns:netty_resolver_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-resolver:netty-resolver-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-resolver:netty_resolver_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver:netty-resolver-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver:netty_resolver_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-resolver-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_resolver_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-resolver-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_resolver_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-resolver-dns:resolver-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-resolver-dns:resolver_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver_dns:resolver-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver_dns:resolver_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver-dns:netty-resolver-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver-dns:netty_resolver_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver_dns:netty-resolver-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver_dns:netty_resolver_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-resolver:resolver-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-resolver:resolver_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver:resolver-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_resolver:resolver_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver:netty-resolver-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver:netty_resolver_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:resolver-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:resolver_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:resolver-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:resolver_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver-dns:resolver-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver-dns:resolver_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver_dns:resolver-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver_dns:resolver_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-resolver-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_resolver_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver:resolver-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resolver:resolver_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:resolver-dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:resolver_dns:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-resolver-dns-4.1.86.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-resolver-dns"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-resolver-dns-4.1.86.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-resolver-dns@4.1.86.Final",
      "type": "library",
      "version": "4.1.86.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.86.Final?package-id=94f1eb6889fbb4c1",
      "cpe": "cpe:2.3:a:netty-transport:netty-transport:4.1.86.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7c7739c41fd110c3576e9faace332ee957f27203"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-transport",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:netty_transport:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:netty-transport:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:netty_transport:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-transport:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_transport:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-transport:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_transport:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:transport:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:transport:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:netty-transport:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:netty_transport:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:transport:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:transport:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-transport:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_transport:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:transport:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:transport:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-transport-4.1.86.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-transport"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-transport-4.1.86.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-transport@4.1.86.Final",
      "type": "library",
      "version": "4.1.86.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.86.Final?package-id=eff91513d8578642",
      "cpe": "cpe:2.3:a:netty-transport-classes-epoll:netty-transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0b1c323028fcbd4ea757087038797f331c828959"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-transport-classes-epoll",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-classes-epoll:netty_transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_classes_epoll:netty-transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_classes_epoll:netty_transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-classes-epoll:transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-classes-epoll:transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-classes:netty-transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-classes:netty_transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_classes:netty-transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_classes:netty_transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_classes_epoll:transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_classes_epoll:transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-classes-epoll:netty-transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-classes-epoll:netty_transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_classes_epoll:netty-transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_classes_epoll:netty_transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-classes:transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-classes:transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_classes:transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_classes:transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-classes-epoll:transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-classes-epoll:transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-classes:netty-transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-classes:netty_transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_classes:netty-transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_classes:netty_transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_classes_epoll:transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_classes_epoll:transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:netty-transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:netty_transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:netty-transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:netty_transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-classes:transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-classes:transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_classes:transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_classes:transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:netty-transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:netty_transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:transport-classes-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:transport_classes_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-transport-classes-epoll-4.1.86.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-transport-classes-epoll"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-transport-classes-epoll-4.1.86.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.86.Final",
      "type": "library",
      "version": "4.1.86.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.86.Final?package-id=b07f442dd947b6d5",
      "cpe": "cpe:2.3:a:netty-transport-native-epoll:netty-transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7be67795fff13a52dfdc4d0b024578103e6ab3f5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-transport-native-epoll",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native-epoll:netty_transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_epoll:netty-transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_epoll:netty_transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native-epoll:transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native-epoll:transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native:netty-transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native:netty_transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native:netty-transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native:netty_transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_epoll:transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_epoll:transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-epoll:netty-transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-epoll:netty_transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_epoll:netty-transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_epoll:netty_transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native:transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native:transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native:transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native:transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-epoll:transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-epoll:transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native:netty-transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native:netty_transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native:netty-transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native:netty_transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_epoll:transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_epoll:transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:netty-transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:netty_transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:netty-transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:netty_transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native:transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native:transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native:transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native:transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:netty-transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:netty_transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:transport-native-epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:transport_native_epoll:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-transport-native-epoll-4.1.86.Final-linux-x86_64.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-transport-native-epoll"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-transport-native-epoll-4.1.86.Final-linux-x86_64.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.86.Final",
      "type": "library",
      "version": "4.1.86.Final"
    },
    {
      "bom-ref": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.86.Final?package-id=962b915ca32f1130",
      "cpe": "cpe:2.3:a:netty-transport-native-unix-common:netty-transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5e0e7fc1c337485cabcf7971faefe692b76f93a2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.netty",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "name": "netty-transport-native-unix-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native-unix-common:netty_transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_unix_common:netty-transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_unix_common:netty_transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native-unix-common:transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native-unix-common:transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_unix_common:transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_unix_common:transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-unix-common:netty-transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-unix-common:netty_transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_unix_common:netty-transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_unix_common:netty_transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native-unix:netty-transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native-unix:netty_transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_unix:netty-transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_unix:netty_transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native:netty-transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native:netty_transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native:netty-transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native:netty_transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-unix-common:transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-unix-common:transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_unix_common:transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_unix_common:transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native-unix:transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native-unix:transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_unix:transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native_unix:transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-unix:netty-transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-unix:netty_transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_unix:netty-transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_unix:netty_transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native:transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport-native:transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native:transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport_native:transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native:netty-transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native:netty_transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native:netty-transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native:netty_transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:netty-transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:netty_transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:netty-transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:netty_transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-unix:transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native-unix:transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_unix:transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native_unix:transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty-transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:netty_transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty-transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:netty_transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native:transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport-native:transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native:transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport_native:transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-transport:transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_transport:transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:netty-transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:netty_transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty-project:transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty_project:transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty-transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:netty_transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transport:transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:transport-native-unix-common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:netty:transport_native_unix_common:4.1.86.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-transport-native-unix-common-4.1.86.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "netty-transport-native-unix-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.netty"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/netty-transport-native-unix-common-4.1.86.Final.jar"
        }
      ],
      "purl": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.86.Final",
      "type": "library",
      "version": "4.1.86.Final"
    },
    {
      "bom-ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@4.41.1?package-id=5b87ad4d6f0f4129",
      "cpe": "cpe:2.3:a:connect2id-ltd-:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0290f3ff0035bb2f839c77ad8ec39466f31091a8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.nimbusds",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "nimbus-jose-jwt",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id-ltd-:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose-jwt:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose-jwt:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose_jwt:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose_jwt:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/nimbus-jose-jwt-4.41.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "nimbus-jose-jwt"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.nimbusds"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/nimbus-jose-jwt-4.41.1.jar"
        }
      ],
      "purl": "pkg:maven/com.nimbusds/nimbus-jose-jwt@4.41.1",
      "type": "library",
      "version": "4.41.1"
    },
    {
      "bom-ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@4.41.1?package-id=222000190d89e65f",
      "cpe": "cpe:2.3:a:connect2id-ltd-:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0290f3ff0035bb2f839c77ad8ec39466f31091a8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.nimbusds",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "nimbus-jose-jwt",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id-ltd-:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose-jwt:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose-jwt:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose_jwt:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose_jwt:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/nimbus-jose-jwt-4.41.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "nimbus-jose-jwt"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.nimbusds"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/nimbus-jose-jwt-4.41.1.jar"
        }
      ],
      "purl": "pkg:maven/com.nimbusds/nimbus-jose-jwt@4.41.1",
      "type": "library",
      "version": "4.41.1"
    },
    {
      "bom-ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@4.41.1?package-id=dc12b556c44d8ba2",
      "cpe": "cpe:2.3:a:connect2id-ltd-:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0290f3ff0035bb2f839c77ad8ec39466f31091a8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.nimbusds",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "nimbus-jose-jwt",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id-ltd-:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose-jwt:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose-jwt:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose_jwt:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose_jwt:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus:nimbus_jose_jwt:4.41.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/nimbus-jose-jwt-4.41.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "nimbus-jose-jwt"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.nimbusds"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/nimbus-jose-jwt-4.41.1.jar"
        }
      ],
      "purl": "pkg:maven/com.nimbusds/nimbus-jose-jwt@4.41.1",
      "type": "library",
      "version": "4.41.1"
    },
    {
      "bom-ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@7.9?package-id=1f777f524f12118e",
      "cpe": "cpe:2.3:a:connect2id-ltd-:nimbus-jose-jwt:7.9:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b608cd5e306d67bb58fe5bd687387aa0671687a6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.nimbusds",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "nimbus-jose-jwt",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id-ltd-:nimbus_jose_jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:nimbus-jose-jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:nimbus_jose_jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose-jwt:nimbus-jose-jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose-jwt:nimbus_jose_jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose_jwt:nimbus-jose-jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose_jwt:nimbus_jose_jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose:nimbus-jose-jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus-jose:nimbus_jose_jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose:nimbus-jose-jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus_jose:nimbus_jose_jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:nimbus-jose-jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:nimbus_jose_jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus:nimbus-jose-jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbus:nimbus_jose_jwt:7.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/nimbus-jose-jwt-7.9.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "nimbus-jose-jwt"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.nimbusds"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/nimbus-jose-jwt-7.9.jar"
        }
      ],
      "purl": "pkg:maven/com.nimbusds/nimbus-jose-jwt@7.9",
      "type": "library",
      "version": "7.9"
    },
    {
      "bom-ref": "pkg:maven/org.noggit/noggit@0.8?package-id=19682b703d9504c7",
      "cpe": "cpe:2.3:a:noggit:noggit:0.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ba4ad65a62d7dfcf97a8d42c82ae7d8824f9087f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.noggit",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "noggit",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/noggit-0.8.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "noggit"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.noggit"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/noggit-0.8.jar"
        }
      ],
      "purl": "pkg:maven/org.noggit/noggit@0.8",
      "type": "library",
      "version": "0.8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/npth@1.5-4.el8?arch=x86_64&upstream=npth-1.5-4.el8.src.rpm&distro=rhel-8.9&package-id=33bc72ffa1b61fde",
      "cpe": "cpe:2.3:a:redhat:npth:1.5-4.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "npth",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:npth:npth:1.5-4.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "4.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "47653"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "npth-1.5-4.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/npth@1.5-4.el8?arch=x86_64&upstream=npth-1.5-4.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.5-4.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/nspr@4.35.0-1.el8_8?arch=x86_64&upstream=nspr-4.35.0-1.el8_8.src.rpm&distro=rhel-8.9&package-id=8b308bdb078c6c78",
      "cpe": "cpe:2.3:a:redhat:nspr:4.35.0-1.el8_8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "MPLv2.0"
          }
        }
      ],
      "name": "nspr",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nspr:nspr:4.35.0-1.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8_8"
        },
        {
          "name": "syft:metadata:size",
          "value": "317582"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "nspr-4.35.0-1.el8_8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/nspr@4.35.0-1.el8_8?arch=x86_64&upstream=nspr-4.35.0-1.el8_8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "4.35.0-1.el8_8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/nss@3.90.0-6.el8_9?arch=x86_64&upstream=nss-3.90.0-6.el8_9.src.rpm&distro=rhel-8.9&package-id=fd6548ba6455d03d",
      "cpe": "cpe:2.3:a:redhat:nss:3.90.0-6.el8_9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "MPLv2.0"
          }
        }
      ],
      "name": "nss",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss:nss:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el8_9"
        },
        {
          "name": "syft:metadata:size",
          "value": "2062824"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "nss-3.90.0-6.el8_9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/nss@3.90.0-6.el8_9?arch=x86_64&upstream=nss-3.90.0-6.el8_9.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.90.0-6.el8_9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/nss-softokn@3.90.0-6.el8_9?arch=x86_64&upstream=nss-3.90.0-6.el8_9.src.rpm&distro=rhel-8.9&package-id=df401f6559c12afd",
      "cpe": "cpe:2.3:a:nss-softokn:nss-softokn:3.90.0-6.el8_9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "MPLv2.0"
          }
        }
      ],
      "name": "nss-softokn",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss-softokn:nss_softokn:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss_softokn:nss-softokn:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss_softokn:nss_softokn:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:nss-softokn:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:nss_softokn:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss:nss-softokn:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss:nss_softokn:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el8_9"
        },
        {
          "name": "syft:metadata:size",
          "value": "3915008"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "nss-3.90.0-6.el8_9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/nss-softokn@3.90.0-6.el8_9?arch=x86_64&upstream=nss-3.90.0-6.el8_9.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.90.0-6.el8_9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/nss-softokn-freebl@3.90.0-6.el8_9?arch=x86_64&upstream=nss-3.90.0-6.el8_9.src.rpm&distro=rhel-8.9&package-id=b15c0c0dab4023d4",
      "cpe": "cpe:2.3:a:nss-softokn-freebl:nss-softokn-freebl:3.90.0-6.el8_9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "MPLv2.0"
          }
        }
      ],
      "name": "nss-softokn-freebl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss-softokn-freebl:nss_softokn_freebl:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss_softokn_freebl:nss-softokn-freebl:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss_softokn_freebl:nss_softokn_freebl:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss-softokn:nss-softokn-freebl:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss-softokn:nss_softokn_freebl:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss_softokn:nss-softokn-freebl:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss_softokn:nss_softokn_freebl:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:nss-softokn-freebl:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:nss_softokn_freebl:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss:nss-softokn-freebl:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss:nss_softokn_freebl:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el8_9"
        },
        {
          "name": "syft:metadata:size",
          "value": "855176"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "nss-3.90.0-6.el8_9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/nss-softokn-freebl@3.90.0-6.el8_9?arch=x86_64&upstream=nss-3.90.0-6.el8_9.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.90.0-6.el8_9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/nss-sysinit@3.90.0-6.el8_9?arch=x86_64&upstream=nss-3.90.0-6.el8_9.src.rpm&distro=rhel-8.9&package-id=1430bc866965c572",
      "cpe": "cpe:2.3:a:nss-sysinit:nss-sysinit:3.90.0-6.el8_9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "MPLv2.0"
          }
        }
      ],
      "name": "nss-sysinit",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss-sysinit:nss_sysinit:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss_sysinit:nss-sysinit:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss_sysinit:nss_sysinit:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:nss-sysinit:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:nss_sysinit:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss:nss-sysinit:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss:nss_sysinit:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el8_9"
        },
        {
          "name": "syft:metadata:size",
          "value": "14403"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "nss-3.90.0-6.el8_9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/nss-sysinit@3.90.0-6.el8_9?arch=x86_64&upstream=nss-3.90.0-6.el8_9.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.90.0-6.el8_9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/nss-util@3.90.0-6.el8_9?arch=x86_64&upstream=nss-3.90.0-6.el8_9.src.rpm&distro=rhel-8.9&package-id=98b0e6472ded4699",
      "cpe": "cpe:2.3:a:nss-util:nss-util:3.90.0-6.el8_9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "MPLv2.0"
          }
        }
      ],
      "name": "nss-util",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss-util:nss_util:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss_util:nss-util:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss_util:nss_util:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:nss-util:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:nss_util:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss:nss-util:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nss:nss_util:3.90.0-6.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el8_9"
        },
        {
          "name": "syft:metadata:size",
          "value": "224852"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "nss-3.90.0-6.el8_9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/nss-util@3.90.0-6.el8_9?arch=x86_64&upstream=nss-3.90.0-6.el8_9.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.90.0-6.el8_9"
    },
    {
      "bom-ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@6.5?package-id=a54af3a6a29b0dbb",
      "cpe": "cpe:2.3:a:connect2id-ltd-:oauth2-oidc-sdk:6.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "422759fc195f65345e8da3265c69dea3c6cf56a5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.nimbusds",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.html‎"
          }
        }
      ],
      "name": "oauth2-oidc-sdk",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id-ltd-:oauth2_oidc_sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:oauth2-oidc-sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:connect2id_ltd_:oauth2_oidc_sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth2-oidc-sdk:oauth2-oidc-sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth2-oidc-sdk:oauth2_oidc_sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth2_oidc_sdk:oauth2-oidc-sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth2_oidc_sdk:oauth2_oidc_sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth2-oidc:oauth2-oidc-sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth2-oidc:oauth2_oidc_sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth2_oidc:oauth2-oidc-sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth2_oidc:oauth2_oidc_sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:oauth2-oidc-sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nimbusds:oauth2_oidc_sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth2:oauth2-oidc-sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oauth2:oauth2_oidc_sdk:6.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/oauth2-oidc-sdk-6.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "oauth2-oidc-sdk"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.nimbusds"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/oauth2-oidc-sdk-6.5.jar"
        }
      ],
      "purl": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@6.5",
      "type": "library",
      "version": "6.5"
    },
    {
      "bom-ref": "pkg:maven/org.objenesis/objenesis@3.2?package-id=36bd83809f246fa2",
      "cpe": "cpe:2.3:a:joe-walnes\\,-henri-tremblay\\,-leonardo-mesquita:objenesis:3.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7fadf57620c8b8abdf7519533e5527367cb51f09"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "objenesis",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:joe_walnes\\,_henri_tremblay\\,_leonardo_mesquita:objenesis:3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:objenesis:objenesis:3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/objenesis-3.2.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/objenesis-3.2.jar"
        }
      ],
      "purl": "pkg:maven/org.objenesis/objenesis@3.2",
      "type": "library",
      "version": "3.2"
    },
    {
      "bom-ref": "pkg:maven/com.squareup.okhttp/okhttp@1.0.2?package-id=93fef30a1a6bae9d",
      "cpe": "cpe:2.3:a:squareup:okhttp:1.0.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "14f50cd1c2f5d29d9b070746c1fcae59b68ca26b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.squareup.okhttp",
      "name": "okhttp",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:okhttp3:okhttp:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:okhttp:okhttp:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/okhttp-1.0.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "okhttp"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.squareup.okhttp"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/okhttp-1.0.2.jar"
        }
      ],
      "purl": "pkg:maven/com.squareup.okhttp/okhttp@1.0.2",
      "type": "library",
      "version": "1.0.2"
    },
    {
      "bom-ref": "pkg:maven/com.squareup.okhttp3/okhttp@3.14.9?package-id=9977b4efd834e8d4",
      "cpe": "cpe:2.3:a:squareup:okhttp:3.14.9:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3e6d101343c7ea687cd593e4990f73b25c878383"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.squareup.okhttp3",
      "name": "okhttp",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:okhttp3:okhttp:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:okhttp:okhttp:3.14.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/okhttp-3.14.9.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "okhttp"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.squareup.okhttp3"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/okhttp-3.14.9.jar"
        }
      ],
      "purl": "pkg:maven/com.squareup.okhttp3/okhttp@3.14.9",
      "type": "library",
      "version": "3.14.9"
    },
    {
      "bom-ref": "pkg:maven/com.squareup.okio/okio@1.17.2?package-id=c578c95294e50ead",
      "cpe": "cpe:2.3:a:squareup:okio:1.17.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "78c7820b205002da4d2d137f6f312bd64b3d6049"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.squareup.okio",
      "name": "okio",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:okio:okio:1.17.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/okio-1.17.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "okio"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.squareup.okio"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/okio-1.17.2.jar"
        }
      ],
      "purl": "pkg:maven/com.squareup.okio/okio@1.17.2",
      "type": "library",
      "version": "1.17.2"
    },
    {
      "bom-ref": "pkg:maven/com.opencsv/opencsv@4.6?package-id=1ffe99b39f2f4d81",
      "cpe": "cpe:2.3:a:opencsv:opencsv:4.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b7ce164e9e75be4b5eb42fd89c9c53ebecea6729"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.opencsv",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "opencsv",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/opencsv-4.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "opencsv"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.opencsv"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/opencsv-4.6.jar"
        }
      ],
      "purl": "pkg:maven/com.opencsv/opencsv@4.6",
      "type": "library",
      "version": "4.6"
    },
    {
      "bom-ref": "pkg:rpm/rhel/openldap@2.4.46-18.el8?arch=x86_64&upstream=openldap-2.4.46-18.el8.src.rpm&distro=rhel-8.9&package-id=e241ca83301139c0",
      "cpe": "cpe:2.3:a:openldap:openldap:2.4.46-18.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "OpenLDAP"
          }
        }
      ],
      "name": "openldap",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:openldap:2.4.46-18.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "18.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "1006595"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "openldap-2.4.46-18.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/openldap@2.4.46-18.el8?arch=x86_64&upstream=openldap-2.4.46-18.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.4.46-18.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/openssl-libs@1.1.1k-12.el8_9?arch=x86_64&epoch=1&upstream=openssl-1.1.1k-12.el8_9.src.rpm&distro=rhel-8.9&package-id=9c02043f0554f79a",
      "cpe": "cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.1.1k-12.el8_9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "OpenSSL and ASL 2.0"
          }
        }
      ],
      "name": "openssl-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.1.1k-12.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.1.1k-12.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.1.1k-12.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl:openssl-libs:1\\:1.1.1k-12.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl:openssl_libs:1\\:1.1.1k-12.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:openssl-libs:1\\:1.1.1k-12.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:openssl_libs:1\\:1.1.1k-12.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "1"
        },
        {
          "name": "syft:metadata:release",
          "value": "12.el8_9"
        },
        {
          "name": "syft:metadata:size",
          "value": "3774082"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "openssl-1.1.1k-12.el8_9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/openssl-libs@1.1.1k-12.el8_9?arch=x86_64&epoch=1&upstream=openssl-1.1.1k-12.el8_9.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1:1.1.1k-12.el8_9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/openssl-libs@1.1.1k-9.el8_7?arch=x86_64&epoch=1&upstream=openssl-1.1.1k-9.el8_7.src.rpm&distro=rhel-8.9&package-id=945320f3fd62ce36",
      "cpe": "cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.1.1k-9.el8_7:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "OpenSSL and ASL 2.0"
          }
        }
      ],
      "name": "openssl-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.1.1k-9.el8_7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.1.1k-9.el8_7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.1.1k-9.el8_7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl:openssl-libs:1\\:1.1.1k-9.el8_7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openssl:openssl_libs:1\\:1.1.1k-9.el8_7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:openssl-libs:1\\:1.1.1k-9.el8_7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:openssl_libs:1\\:1.1.1k-9.el8_7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "1"
        },
        {
          "name": "syft:metadata:release",
          "value": "9.el8_7"
        },
        {
          "name": "syft:metadata:size",
          "value": "3769930"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "openssl-1.1.1k-9.el8_7.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/openssl-libs@1.1.1k-9.el8_7?arch=x86_64&epoch=1&upstream=openssl-1.1.1k-9.el8_7.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1:1.1.1k-9.el8_7"
    },
    {
      "bom-ref": "pkg:maven/org.apache.orc/orc-core@1.7.6?package-id=9f515b4dfc73d99e",
      "cpe": "cpe:2.3:a:apache:orc-core:1.7.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3b17774c8087e239542afe1c7976c16c5446af26"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.orc",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "orc-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:orc_core:1.7.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:orc:1.7.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/orc-core-1.7.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "orc-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.orc"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/orc-core-1.7.6.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.orc/orc-core@1.7.6",
      "type": "library",
      "version": "1.7.6"
    },
    {
      "bom-ref": "pkg:maven/org.apache.orc/orc-mapreduce@1.7.6?package-id=c0740931a889d2c1",
      "cpe": "cpe:2.3:a:apache:orc-mapreduce:1.7.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cc71779727e9051e59c8a242b4157fc1d3172caf"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.orc",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "orc-mapreduce",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:orc_mapreduce:1.7.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:orc:1.7.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/orc-mapreduce-1.7.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "orc-mapreduce"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.orc"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/orc-mapreduce-1.7.6.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.orc/orc-mapreduce@1.7.6",
      "type": "library",
      "version": "1.7.6"
    },
    {
      "bom-ref": "pkg:maven/org.apache.orc/orc-shims@1.7.6?package-id=a2a6d58d7e9b5cb6",
      "cpe": "cpe:2.3:a:apache:orc-shims:1.7.6:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9aab69982e4a9b91a86743f73dc48db30daf9265"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.orc",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "orc-shims",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:orc_shims:1.7.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:orc:1.7.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/orc-shims-1.7.6.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "orc-shims"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.orc"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/orc-shims-1.7.6.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.orc/orc-shims@1.7.6",
      "type": "library",
      "version": "1.7.6"
    },
    {
      "bom-ref": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?package-id=5458fe1ba6fad1df",
      "cpe": "cpe:2.3:a:osgi-resource-locator:osgi-resource-locator:1.0.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "de3b21279df7e755e38275137539be5e2c80dd58"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.glassfish.hk2",
      "licenses": [
        {
          "license": {
            "name": "http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "name": "osgi-resource-locator",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi-resource-locator:osgi_resource_locator:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi_resource_locator:osgi-resource-locator:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi_resource_locator:osgi_resource_locator:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgiresourcelocator:osgi-resource-locator:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgiresourcelocator:osgi_resource_locator:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi-resource:osgi-resource-locator:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi-resource:osgi_resource_locator:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi_resource:osgi-resource-locator:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi_resource:osgi_resource_locator:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:osgi-resource-locator:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:osgi_resource_locator:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:osgi-resource-locator:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:glassfish:osgi_resource_locator:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:osgi-resource-locator:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:osgi_resource_locator:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hk2:osgi-resource-locator:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hk2:osgi_resource_locator:1.0.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/osgi-resource-locator-1.0.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "osgi-resource-locator"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.glassfish.hk2"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/osgi-resource-locator-1.0.3.jar"
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3",
      "type": "library",
      "version": "1.0.3"
    },
    {
      "bom-ref": "pkg:rpm/rhel/p11-kit@0.23.22-1.el8?arch=x86_64&upstream=p11-kit-0.23.22-1.el8.src.rpm&distro=rhel-8.9&package-id=4174f5b68e361b53",
      "cpe": "cpe:2.3:a:p11-kit:p11-kit:0.23.22-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "p11-kit",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11-kit:p11_kit:0.23.22-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11_kit:p11-kit:0.23.22-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11_kit:p11_kit:0.23.22-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:p11-kit:0.23.22-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:p11_kit:0.23.22-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11:p11-kit:0.23.22-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11:p11_kit:0.23.22-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "1637887"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "p11-kit-0.23.22-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/p11-kit@0.23.22-1.el8?arch=x86_64&upstream=p11-kit-0.23.22-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "0.23.22-1.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/p11-kit-trust@0.23.22-1.el8?arch=x86_64&upstream=p11-kit-0.23.22-1.el8.src.rpm&distro=rhel-8.9&package-id=9ad4602e4168ae1b",
      "cpe": "cpe:2.3:a:p11-kit-trust:p11-kit-trust:0.23.22-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "p11-kit-trust",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11-kit-trust:p11_kit_trust:0.23.22-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11_kit_trust:p11-kit-trust:0.23.22-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11_kit_trust:p11_kit_trust:0.23.22-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11-kit:p11-kit-trust:0.23.22-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11-kit:p11_kit_trust:0.23.22-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11_kit:p11-kit-trust:0.23.22-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11_kit:p11_kit_trust:0.23.22-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:p11-kit-trust:0.23.22-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:p11_kit_trust:0.23.22-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11:p11-kit-trust:0.23.22-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:p11:p11_kit_trust:0.23.22-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "471705"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "p11-kit-0.23.22-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/p11-kit-trust@0.23.22-1.el8?arch=x86_64&upstream=p11-kit-0.23.22-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "0.23.22-1.el8"
    },
    {
      "bom-ref": "pkg:maven/org.pac4j/pac4j-core@3.8.3?package-id=e7a8ca6513c99a8c",
      "cpe": "cpe:2.3:a:pac4j-core:pac4j-core:3.8.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ce2d5c63d9f034f5631d3b3ebec46f916b7064f2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.pac4j",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "pac4j-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j-core:pac4j_core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j_core:pac4j-core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j_core:pac4j_core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j:pac4j-core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j:pac4j_core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:pac4j-core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:pac4j_core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j-core:core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j_core:core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j:core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/pac4j-core-3.8.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "pac4j-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.pac4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/pac4j-core-3.8.3.jar"
        }
      ],
      "purl": "pkg:maven/org.pac4j/pac4j-core@3.8.3",
      "type": "library",
      "version": "3.8.3"
    },
    {
      "bom-ref": "pkg:maven/org.pac4j/pac4j-oidc@3.8.3?package-id=e8d8c8f85cfc6c54",
      "cpe": "cpe:2.3:a:pac4j-oidc:pac4j-oidc:3.8.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d01dd86864d673d5b5f9930533b1bfdcc4b57546"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.pac4j",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "pac4j-oidc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j-oidc:pac4j_oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j_oidc:pac4j-oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j_oidc:pac4j_oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j:pac4j-oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j:pac4j_oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oidc:pac4j-oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oidc:pac4j_oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j-oidc:oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j_oidc:oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pac4j:oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oidc:oidc:3.8.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/pac4j-oidc-3.8.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "pac4j-oidc"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.pac4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/pac4j-oidc-3.8.3.jar"
        }
      ],
      "purl": "pkg:maven/org.pac4j/pac4j-oidc@3.8.3",
      "type": "library",
      "version": "3.8.3"
    },
    {
      "bom-ref": "pkg:rpm/rhel/pam@1.3.1-27.el8?arch=x86_64&upstream=pam-1.3.1-27.el8.src.rpm&distro=rhel-8.9&package-id=b9e19df470cf9653",
      "cpe": "cpe:2.3:a:redhat:pam:1.3.1-27.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD and GPLv2+"
          }
        }
      ],
      "name": "pam",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pam:pam:1.3.1-27.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "27.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "2644059"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "pam-1.3.1-27.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/pam@1.3.1-27.el8?arch=x86_64&upstream=pam-1.3.1-27.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.3.1-27.el8"
    },
    {
      "bom-ref": "pkg:maven/com.thoughtworks.paranamer/paranamer@2.3?package-id=9b12759b87975a7d",
      "cpe": "cpe:2.3:a:thoughtworks:paranamer:2.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4a85963a752c0a2f715c3924bfc686865e7e1bc6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.thoughtworks.paranamer",
      "name": "paranamer",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:paranamer:paranamer:2.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/paranamer-2.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "paranamer"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.thoughtworks.paranamer"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/paranamer-2.3.jar"
        }
      ],
      "purl": "pkg:maven/com.thoughtworks.paranamer/paranamer@2.3",
      "type": "library",
      "version": "2.3"
    },
    {
      "bom-ref": "pkg:maven/org.apache.parquet/parquet-avro@1.12.0?package-id=853bf61059a759a8",
      "cpe": "cpe:2.3:a:apache:parquet-avro:1.12.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b7e702e8daedd457327735998fe8508c735895e1"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.parquet",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "parquet-avro",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet_avro:1.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet:1.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-avro-1.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "parquet-avro"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.parquet"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-avro-1.12.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.parquet/parquet-avro@1.12.0",
      "type": "library",
      "version": "1.12.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.parquet/parquet-column@1.12.0?package-id=9ffa59a4d91ac0dd",
      "cpe": "cpe:2.3:a:apache:parquet-column:1.12.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f02e32161790f4019146f3d626fd6f561c1674ff"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.parquet",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "parquet-column",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet_column:1.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet:1.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-column-1.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "parquet-column"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.parquet"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-column-1.12.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.parquet/parquet-column@1.12.0",
      "type": "library",
      "version": "1.12.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.parquet/parquet-common@1.12.0?package-id=2d4d8108d2abbdd9",
      "cpe": "cpe:2.3:a:apache:parquet-common:1.12.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8697be3280ad238f70060a8bff7bf66fe8dfc46c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.parquet",
      "name": "parquet-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet_common:1.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet:1.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-common-1.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "parquet-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.parquet"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-common-1.12.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.parquet/parquet-common@1.12.0",
      "type": "library",
      "version": "1.12.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.parquet/parquet-encoding@1.12.0?package-id=194a0ff1316475cd",
      "cpe": "cpe:2.3:a:apache:parquet-encoding:1.12.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "257c0c34ee68b52791e28c92447a5e065568c96f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.parquet",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "parquet-encoding",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet_encoding:1.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet:1.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-encoding-1.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "parquet-encoding"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.parquet"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-encoding-1.12.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.parquet/parquet-encoding@1.12.0",
      "type": "library",
      "version": "1.12.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.parquet/parquet-format-structures@1.12.0?package-id=94f1f694f570bdbe",
      "cpe": "cpe:2.3:a:apache:parquet-format-structures:1.12.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "eb73b9cb2be4c142418f01c190c38c8db38ddb90"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.parquet",
      "name": "parquet-format-structures",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet_format_structures:1.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet:1.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-format-structures-1.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "parquet-format-structures"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.parquet"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-format-structures-1.12.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.parquet/parquet-format-structures@1.12.0",
      "type": "library",
      "version": "1.12.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.parquet/parquet-hadoop@1.12.0?package-id=c88241760ad5b353",
      "cpe": "cpe:2.3:a:apache:parquet-hadoop:1.12.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9db040aed8cc3e0e9d27ae8e14b01d531b8b7638"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.parquet",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "parquet-hadoop",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet_hadoop:1.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet:1.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-hadoop-1.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "parquet-hadoop"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.parquet"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-hadoop-1.12.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.parquet/parquet-hadoop@1.12.0",
      "type": "library",
      "version": "1.12.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.parquet/parquet-jackson@1.12.0?package-id=7d5df6ae718b5024",
      "cpe": "cpe:2.3:a:apache:parquet-jackson:1.12.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cf19a7197bda364334325a8a1cde5bcf5889773d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.parquet",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "parquet-jackson",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet_jackson:1.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:parquet:1.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-jackson-1.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "parquet-jackson"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.parquet"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-jackson-1.12.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.parquet/parquet-jackson@1.12.0",
      "type": "library",
      "version": "1.12.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/pcre@8.42-6.el8?arch=x86_64&upstream=pcre-8.42-6.el8.src.rpm&distro=rhel-8.9&package-id=60b4ef1f8021d94b",
      "cpe": "cpe:2.3:a:redhat:pcre:8.42-6.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "pcre",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pcre:pcre:8.42-6.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "6.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "509947"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "pcre-8.42-6.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/pcre@8.42-6.el8?arch=x86_64&upstream=pcre-8.42-6.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "8.42-6.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/pcre2@10.32-3.el8_6?arch=x86_64&upstream=pcre2-10.32-3.el8_6.src.rpm&distro=rhel-8.9&package-id=eacf1d15b8acc2bc",
      "cpe": "cpe:2.3:a:redhat:pcre2:10.32-3.el8_6:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "pcre2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pcre2:pcre2:10.32-3.el8_6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "3.el8_6"
        },
        {
          "name": "syft:metadata:size",
          "value": "656742"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "pcre2-10.32-3.el8_6.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/pcre2@10.32-3.el8_6?arch=x86_64&upstream=pcre2-10.32-3.el8_6.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "10.32-3.el8_6"
    },
    {
      "bom-ref": "pkg:maven/org.eclipse.persistence.javax.persistence.osgi.Activator/persistence@2.1.0?package-id=d86ecc710319ca15",
      "cpe": "cpe:2.3:a:eclipse-org---eclipselink-project:persistence:2.1.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5bab675816dbe0f64bb86004b108bf2a00292358"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "persistence",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_org___eclipselink_project:persistence:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-org---eclipselink-project:Activator:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_org___eclipselink_project:Activator:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-org---eclipselink-project:javax:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_org___eclipselink_project:javax:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse-org---eclipselink-project:osgi:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse_org___eclipselink_project:osgi:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:persistence:persistence:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:persistence:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:persistence:Activator:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:Activator:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:persistence:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:persistence:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:Activator:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:persistence:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:persistence:javax:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:Activator:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:persistence:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:persistence:osgi:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:javax:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:Activator:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Activator:osgi:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:Activator:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:javax:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:eclipse:osgi:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:javax:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:javax:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:osgi:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:javax:osgi:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:javax:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:osgi:2.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/javax.persistence-2.1.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/javax.persistence-2.1.0.jar"
        }
      ],
      "purl": "pkg:maven/org.eclipse.persistence.javax.persistence.osgi.Activator/persistence@2.1.0",
      "type": "library",
      "version": "2.1.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/pkgconf@1.4.2-1.el8?arch=x86_64&upstream=pkgconf-1.4.2-1.el8.src.rpm&distro=rhel-8.9&package-id=33ce6f795d42c56c",
      "cpe": "cpe:2.3:a:pkgconf:pkgconf:1.4.2-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "name": "pkgconf",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:pkgconf:1.4.2-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "62847"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "pkgconf-1.4.2-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/pkgconf@1.4.2-1.el8?arch=x86_64&upstream=pkgconf-1.4.2-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.4.2-1.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/pkgconf-m4@1.4.2-1.el8?arch=noarch&upstream=pkgconf-1.4.2-1.el8.src.rpm&distro=rhel-8.9&package-id=5f30c45bee0f8f92",
      "cpe": "cpe:2.3:a:pkgconf-m4:pkgconf-m4:1.4.2-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+ with exceptions"
          }
        }
      ],
      "name": "pkgconf-m4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkgconf-m4:pkgconf_m4:1.4.2-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkgconf_m4:pkgconf-m4:1.4.2-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkgconf_m4:pkgconf_m4:1.4.2-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkgconf:pkgconf-m4:1.4.2-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkgconf:pkgconf_m4:1.4.2-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:pkgconf-m4:1.4.2-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:pkgconf_m4:1.4.2-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "14187"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "pkgconf-1.4.2-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/pkgconf-m4@1.4.2-1.el8?arch=noarch&upstream=pkgconf-1.4.2-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.4.2-1.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/pkgconf-pkg-config@1.4.2-1.el8?arch=x86_64&upstream=pkgconf-1.4.2-1.el8.src.rpm&distro=rhel-8.9&package-id=46db2d9cfe619dd2",
      "cpe": "cpe:2.3:a:pkgconf-pkg-config:pkgconf-pkg-config:1.4.2-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "name": "pkgconf-pkg-config",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkgconf-pkg-config:pkgconf_pkg_config:1.4.2-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkgconf_pkg_config:pkgconf-pkg-config:1.4.2-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkgconf_pkg_config:pkgconf_pkg_config:1.4.2-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkgconf-pkg:pkgconf-pkg-config:1.4.2-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkgconf-pkg:pkgconf_pkg_config:1.4.2-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkgconf_pkg:pkgconf-pkg-config:1.4.2-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkgconf_pkg:pkgconf_pkg_config:1.4.2-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkgconf:pkgconf-pkg-config:1.4.2-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pkgconf:pkgconf_pkg_config:1.4.2-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:pkgconf-pkg-config:1.4.2-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:pkgconf_pkg_config:1.4.2-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "3094"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "pkgconf-1.4.2-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/pkgconf-pkg-config@1.4.2-1.el8?arch=x86_64&upstream=pkgconf-1.4.2-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.4.2-1.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/platform-python@3.6.8-56.el8_9.3?arch=x86_64&upstream=python3-3.6.8-56.el8_9.3.src.rpm&distro=rhel-8.9&package-id=67434a8d35e0327c",
      "cpe": "cpe:2.3:a:platform-python:platform-python:3.6.8-56.el8_9.3:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Python"
          }
        }
      ],
      "name": "platform-python",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform-python:platform_python:3.6.8-56.el8_9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform_python:platform-python:3.6.8-56.el8_9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform_python:platform_python:3.6.8-56.el8_9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform:platform-python:3.6.8-56.el8_9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform:platform_python:3.6.8-56.el8_9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:platform-python:3.6.8-56.el8_9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:platform_python:3.6.8-56.el8_9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "56.el8_9.3"
        },
        {
          "name": "syft:metadata:size",
          "value": "41214"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "python3-3.6.8-56.el8_9.3.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/platform-python@3.6.8-56.el8_9.3?arch=x86_64&upstream=python3-3.6.8-56.el8_9.3.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.6.8-56.el8_9.3"
    },
    {
      "bom-ref": "pkg:rpm/rhel/platform-python-setuptools@39.2.0-7.el8?arch=noarch&upstream=python-setuptools-39.2.0-7.el8.src.rpm&distro=rhel-8.9&package-id=c3d7b23b691d50ab",
      "cpe": "cpe:2.3:a:platform-python-setuptools:platform-python-setuptools:39.2.0-7.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "platform-python-setuptools",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform-python-setuptools:platform_python_setuptools:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform_python_setuptools:platform-python-setuptools:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform_python_setuptools:platform_python_setuptools:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform-python:platform-python-setuptools:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform-python:platform_python_setuptools:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform_python:platform-python-setuptools:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform_python:platform_python_setuptools:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform:platform-python-setuptools:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:platform:platform_python_setuptools:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:platform-python-setuptools:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:platform_python_setuptools:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "2930525"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "python-setuptools-39.2.0-7.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/platform-python-setuptools@39.2.0-7.el8?arch=noarch&upstream=python-setuptools-39.2.0-7.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "39.2.0-7.el8"
    },
    {
      "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.19?package-id=a10e3fd489df98c1",
      "cpe": "cpe:2.3:a:plexus-interpolation:plexus-interpolation:1.19:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b260ca7a23bb0d209771db7aae35049899433fe3"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.codehaus.plexus",
      "name": "plexus-interpolation",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus-interpolation:plexus_interpolation:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus_interpolation:plexus-interpolation:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus_interpolation:plexus_interpolation:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:plexus-interpolation:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:plexus_interpolation:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus-interpolation:plexus:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus:plexus-interpolation:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus:plexus_interpolation:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus_interpolation:plexus:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:plexus:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus:plexus:1.19:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/plexus-interpolation-1.19.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "plexus-interpolation"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.codehaus.plexus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/plexus-interpolation-1.19.jar"
        }
      ],
      "purl": "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.19",
      "type": "library",
      "version": "1.19"
    },
    {
      "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.0.24?package-id=e36ef9d66bcfa857",
      "cpe": "cpe:2.3:a:plexus-utils:plexus-utils:3.0.24:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b4ac9780b37cb1b736eae9fbcef27609b7c911ef"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.codehaus.plexus",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "plexus-utils",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus-utils:plexus_utils:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus_utils:plexus-utils:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus_utils:plexus_utils:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:plexus-utils:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:plexus_utils:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus-utils:plexus:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus:plexus-utils:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus:plexus_utils:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus_utils:plexus:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:plexus:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:plexus:plexus:3.0.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/plexus-utils-3.0.24.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "plexus-utils"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.codehaus.plexus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/plexus-utils-3.0.24.jar"
        }
      ],
      "purl": "pkg:maven/org.codehaus.plexus/plexus-utils@3.0.24",
      "type": "library",
      "version": "3.0.24"
    },
    {
      "bom-ref": "pkg:rpm/rhel/popt@1.18-1.el8?arch=x86_64&upstream=popt-1.18-1.el8.src.rpm&distro=rhel-8.9&package-id=a298c60de2bb6268",
      "cpe": "cpe:2.3:a:redhat:popt:1.18-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "popt",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:popt:popt:1.18-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "126626"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "popt-1.18-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/popt@1.18-1.el8?arch=x86_64&upstream=popt-1.18-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.18-1.el8"
    },
    {
      "bom-ref": "pkg:maven/org.postgresql/postgresql@42.4.1?package-id=daaf7a1dac75cc65",
      "cpe": "cpe:2.3:a:postgresql-global-development-group:PGBundleActivator:42.4.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d592e02d2fc321b5d5262cdff291854be03bb862"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "name": "postgresql",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql_global_development_group:PGBundleActivator:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql-global-development-group:postgresql:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql_global_development_group:postgresql:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql-global-development-group:jdbc:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql-global-development-group:osgi:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql_global_development_group:jdbc:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql_global_development_group:osgi:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:PGBundleActivator:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:PGBundleActivator:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:PGBundleActivator:PGBundleActivator:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:postgresql:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:postgresql:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:PGBundleActivator:postgresql:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql:PGBundleActivator:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:jdbc:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle-corporation:osgi:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:jdbc:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle_corporation:osgi:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:PGBundleActivator:jdbc:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:PGBundleActivator:osgi:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jdbc:PGBundleActivator:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:PGBundleActivator:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql:postgresql:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jdbc:postgresql:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:postgresql:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql:jdbc:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:postgresql:osgi:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jdbc:jdbc:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jdbc:osgi:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:jdbc:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:osgi:42.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/postgresql-metadata-storage/postgresql-42.4.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/postgresql-metadata-storage/postgresql-42.4.1.jar"
        }
      ],
      "purl": "pkg:maven/org.postgresql/postgresql@42.4.1",
      "type": "library",
      "version": "42.4.1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/postgresql-metadata-storage@26.0.0?package-id=252dc8d7d42cfb56",
      "cpe": "cpe:2.3:a:apache:postgresql-metadata-storage:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e2b818a31c44b48678fc6723b2c9b9ba3c63ba23"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "postgresql-metadata-storage",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:postgresql_metadata_storage:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/postgresql-metadata-storage/postgresql-metadata-storage-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "postgresql-metadata-storage"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/postgresql-metadata-storage/postgresql-metadata-storage-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/postgresql-metadata-storage@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions.contrib/prometheus-emitter@26.0.0?package-id=651c9fc259023387",
      "cpe": "cpe:2.3:a:apache:prometheus-emitter:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "92900babb104f03ae94605261212a7be0a1291f9"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions.contrib",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "prometheus-emitter",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:prometheus_emitter:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/prometheus-emitter-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "prometheus-emitter"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions.contrib"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/prometheus-emitter-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions.contrib/prometheus-emitter@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/com.github.os72/protobuf-dynamic@0.9.3?package-id=28a86b5010f05409",
      "cpe": "cpe:2.3:a:protobuf-dynamic:protobuf-dynamic:0.9.3:*:*:*:*:*:*:*",
      "group": "com.github.os72",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "protobuf-dynamic",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-dynamic:protobuf_dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_dynamic:protobuf-dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_dynamic:protobuf_dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf-dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf_dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sonatype:protobuf-dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sonatype:protobuf_dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:protobuf-dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:protobuf_dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:os72:protobuf-dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:os72:protobuf_dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oss:protobuf-dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oss:protobuf_dynamic:0.9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "protobuf-dynamic"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.github.os72"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:com.github.os72:protobuf-dynamic"
        }
      ],
      "purl": "pkg:maven/com.github.os72/protobuf-dynamic@0.9.3",
      "type": "library",
      "version": "0.9.3"
    },
    {
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?package-id=972280f76382de4d",
      "cpe": "cpe:2.3:a:protobuf-java:protobuf-java:2.5.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a10732c76bfacdbd633a7eb0f7968b1059a65dfa"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.protobuf",
      "licenses": [
        {
          "license": {
            "name": "http://www.opensource.org/licenses/bsd-license.php"
          }
        }
      ],
      "name": "protobuf-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf_java:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf-java:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf_java:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf-java:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf_java:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf-java:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf_java:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf:2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/protobuf-java-2.5.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "protobuf-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.protobuf"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/protobuf-java-2.5.0.jar"
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@2.5.0",
      "type": "library",
      "version": "2.5.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@3.21.7?package-id=56114ef4ff6e0f9a",
      "cpe": "cpe:2.3:a:protobuf-java:protobuf-java:3.21.7:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "96cfc7147192f1de72c3d7d06972155ffb7d180c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.protobuf",
      "licenses": [
        {
          "license": {
            "name": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "name": "protobuf-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf_java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf-java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf_java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf-java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf_java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf-java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf_java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/protobuf-java-3.21.7.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "protobuf-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.protobuf"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kinesis-indexing-service/protobuf-java-3.21.7.jar"
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@3.21.7",
      "type": "library",
      "version": "3.21.7"
    },
    {
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@3.21.7?package-id=0105585e09cf9241",
      "cpe": "cpe:2.3:a:protobuf-java:protobuf-java:3.21.7:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "96cfc7147192f1de72c3d7d06972155ffb7d180c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.protobuf",
      "licenses": [
        {
          "license": {
            "name": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "name": "protobuf-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf_java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf-java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf_java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf-java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf_java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf-java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf_java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/protobuf-java-3.21.7.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "protobuf-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.protobuf"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/protobuf-java-3.21.7.jar"
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@3.21.7",
      "type": "library",
      "version": "3.21.7"
    },
    {
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@3.21.7?package-id=f51bfa6ff856a88c",
      "cpe": "cpe:2.3:a:protobuf-java:protobuf-java:3.21.7:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "96cfc7147192f1de72c3d7d06972155ffb7d180c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.protobuf",
      "licenses": [
        {
          "license": {
            "name": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "name": "protobuf-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf_java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf-java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf_java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf-java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf_java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf-java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf_java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/protobuf-java-3.21.7.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "protobuf-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.protobuf"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/protobuf-java-3.21.7.jar"
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@3.21.7",
      "type": "library",
      "version": "3.21.7"
    },
    {
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@3.21.7?package-id=cc5f90bc9cf8238c",
      "cpe": "cpe:2.3:a:protobuf-java:protobuf-java:3.21.7:*:*:*:*:*:*:*",
      "group": "com.google.protobuf",
      "name": "protobuf-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf_java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf-java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf_java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf-java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf_java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf-java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf_java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "protobuf-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.protobuf"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:com.google.protobuf:protobuf-java"
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@3.21.7",
      "type": "library",
      "version": "3.21.7"
    },
    {
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@3.21.7?package-id=dd74bb80813d40d6",
      "cpe": "cpe:2.3:a:protobuf-java:protobuf-java:3.21.7:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "96cfc7147192f1de72c3d7d06972155ffb7d180c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.google.protobuf",
      "licenses": [
        {
          "license": {
            "name": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "name": "protobuf-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf_java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf-java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf_java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf-java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf_java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf-java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf_java:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/protobuf-java-3.21.7.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "protobuf-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.protobuf"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/protobuf-java-3.21.7.jar"
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@3.21.7",
      "type": "library",
      "version": "3.21.7"
    },
    {
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java-util@3.21.7?package-id=efab81e4fee2ddfb",
      "cpe": "cpe:2.3:a:protobuf-java-util:protobuf-java-util:3.21.7:*:*:*:*:*:*:*",
      "group": "com.google.protobuf",
      "name": "protobuf-java-util",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java-util:protobuf_java_util:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java_util:protobuf-java-util:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java_util:protobuf_java_util:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf-java-util:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf_java_util:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf-java-util:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf_java_util:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java-util:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf-java-util:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf_java_util:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java_util:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf-java-util:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf_java_util:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf:3.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "protobuf-java-util"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.protobuf"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:com.google.protobuf:protobuf-java-util"
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java-util@3.21.7",
      "type": "library",
      "version": "3.21.7"
    },
    {
      "bom-ref": "pkg:rpm/rhel/publicsuffix-list-dafsa@20180723-1.el8?arch=noarch&upstream=publicsuffix-list-20180723-1.el8.src.rpm&distro=rhel-8.9&package-id=2fd031ba65d84df8",
      "cpe": "cpe:2.3:a:publicsuffix-list-dafsa:publicsuffix-list-dafsa:20180723-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "MPLv2.0"
          }
        }
      ],
      "name": "publicsuffix-list-dafsa",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:publicsuffix-list-dafsa:publicsuffix_list_dafsa:20180723-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:publicsuffix_list_dafsa:publicsuffix-list-dafsa:20180723-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:publicsuffix_list_dafsa:publicsuffix_list_dafsa:20180723-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:publicsuffix-list:publicsuffix-list-dafsa:20180723-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:publicsuffix-list:publicsuffix_list_dafsa:20180723-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:publicsuffix_list:publicsuffix-list-dafsa:20180723-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:publicsuffix_list:publicsuffix_list_dafsa:20180723-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:publicsuffix:publicsuffix-list-dafsa:20180723-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:publicsuffix:publicsuffix_list_dafsa:20180723-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:publicsuffix-list-dafsa:20180723-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:publicsuffix_list_dafsa:20180723-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "64502"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "publicsuffix-list-20180723-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/publicsuffix-list-dafsa@20180723-1.el8?arch=noarch&upstream=publicsuffix-list-20180723-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "20180723-1.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/python3-libs@3.6.8-56.el8_9.3?arch=x86_64&upstream=python3-3.6.8-56.el8_9.3.src.rpm&distro=rhel-8.9&package-id=41c275f0dae0169f",
      "cpe": "cpe:2.3:a:python3-libs:python3-libs:3.6.8-56.el8_9.3:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Python"
          }
        }
      ],
      "name": "python3-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3-libs:python3_libs:3.6.8-56.el8_9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3_libs:python3-libs:3.6.8-56.el8_9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3_libs:python3_libs:3.6.8-56.el8_9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3:python3-libs:3.6.8-56.el8_9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3:python3_libs:3.6.8-56.el8_9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:python3-libs:3.6.8-56.el8_9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:python3_libs:3.6.8-56.el8_9.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "56.el8_9.3"
        },
        {
          "name": "syft:metadata:size",
          "value": "32410183"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "python3-3.6.8-56.el8_9.3.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/python3-libs@3.6.8-56.el8_9.3?arch=x86_64&upstream=python3-3.6.8-56.el8_9.3.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.6.8-56.el8_9.3"
    },
    {
      "bom-ref": "pkg:rpm/rhel/python3-pip-wheel@9.0.3-23.el8?arch=noarch&upstream=python-pip-9.0.3-23.el8.src.rpm&distro=rhel-8.9&package-id=beb337f779d84c5b",
      "cpe": "cpe:2.3:a:python3-pip-wheel:python3-pip-wheel:9.0.3-23.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)"
          }
        }
      ],
      "name": "python3-pip-wheel",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3-pip-wheel:python3_pip_wheel:9.0.3-23.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3_pip_wheel:python3-pip-wheel:9.0.3-23.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3_pip_wheel:python3_pip_wheel:9.0.3-23.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3-pip:python3-pip-wheel:9.0.3-23.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3-pip:python3_pip_wheel:9.0.3-23.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3_pip:python3-pip-wheel:9.0.3-23.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3_pip:python3_pip_wheel:9.0.3-23.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3:python3-pip-wheel:9.0.3-23.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3:python3_pip_wheel:9.0.3-23.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:python3-pip-wheel:9.0.3-23.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:python3_pip_wheel:9.0.3-23.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "23.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "899549"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "python-pip-9.0.3-23.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/python3-pip-wheel@9.0.3-23.el8?arch=noarch&upstream=python-pip-9.0.3-23.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "9.0.3-23.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/python3-setuptools-wheel@39.2.0-7.el8?arch=noarch&upstream=python-setuptools-39.2.0-7.el8.src.rpm&distro=rhel-8.9&package-id=eeb6459f3ac82ac7",
      "cpe": "cpe:2.3:a:python3-setuptools-wheel:python3-setuptools-wheel:39.2.0-7.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "python3-setuptools-wheel",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3-setuptools-wheel:python3_setuptools_wheel:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3_setuptools_wheel:python3-setuptools-wheel:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3_setuptools_wheel:python3_setuptools_wheel:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3-setuptools:python3-setuptools-wheel:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3-setuptools:python3_setuptools_wheel:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3_setuptools:python3-setuptools-wheel:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3_setuptools:python3_setuptools_wheel:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3:python3-setuptools-wheel:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python3:python3_setuptools_wheel:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:python3-setuptools-wheel:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:python3_setuptools_wheel:39.2.0-7.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "7.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "347736"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "python-setuptools-39.2.0-7.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/python3-setuptools-wheel@39.2.0-7.el8?arch=noarch&upstream=python-setuptools-39.2.0-7.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "39.2.0-7.el8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.ranger/ranger-plugins-audit@2.0.0?package-id=7c8022d511de0e59",
      "cpe": "cpe:2.3:a:apache:ranger-plugins-audit:2.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e5b342789d60ca49f9389de3fda112f63eb7e34a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.ranger",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "ranger-plugins-audit",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:ranger_plugins_audit:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/ranger-plugins-audit-2.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "ranger-plugins-audit"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.ranger"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/ranger-plugins-audit-2.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.ranger/ranger-plugins-audit@2.0.0",
      "type": "library",
      "version": "2.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.ranger/ranger-plugins-common@2.0.0?package-id=c323322bbffe9048",
      "cpe": "cpe:2.3:a:apache:ranger-plugins-common:2.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1fa96e120ed1d9b337d39236299fa4eefe5b1f84"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.ranger",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "ranger-plugins-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:ranger_plugins_common:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/ranger-plugins-common-2.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "ranger-plugins-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.ranger"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/ranger-plugins-common-2.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.ranger/ranger-plugins-common@2.0.0",
      "type": "library",
      "version": "2.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.ranger/ranger-plugins-cred@2.0.0?package-id=2f04af2361f4c148",
      "cpe": "cpe:2.3:a:apache:ranger-plugins-cred:2.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9de5cc79fa5a7a2548208dcc9625ed3efc9fa99d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.ranger",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "ranger-plugins-cred",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:ranger_plugins_cred:2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/ranger-plugins-cred-2.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "ranger-plugins-cred"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.ranger"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/ranger-plugins-cred-2.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.ranger/ranger-plugins-cred@2.0.0",
      "type": "library",
      "version": "2.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.reactivestreams.reactive-streams/reactive-streams@1.0.2?package-id=b02e276e6cf6e18e",
      "cpe": "cpe:2.3:a:reactive-streams:reactive-streams:1.0.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "323964c36556eb0e6209f65c1cef72b53b461ab8"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "reactive-streams",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactive-streams:reactive_streams:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactive_streams:reactive-streams:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactive_streams:reactive_streams:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactivestreams:reactive-streams:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactivestreams:reactive_streams:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactive:reactive-streams:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactive:reactive_streams:1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/reactive-streams-1.0.2.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/reactive-streams-1.0.2.jar"
        }
      ],
      "purl": "pkg:maven/org.reactivestreams.reactive-streams/reactive-streams@1.0.2",
      "type": "library",
      "version": "1.0.2"
    },
    {
      "bom-ref": "pkg:rpm/rhel/readline@7.0-10.el8?arch=x86_64&upstream=readline-7.0-10.el8.src.rpm&distro=rhel-8.9&package-id=3646d4762807abbb",
      "cpe": "cpe:2.3:a:readline:readline:7.0-10.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+"
          }
        }
      ],
      "name": "readline",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:readline:7.0-10.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "10.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "462801"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "readline-7.0-10.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/readline@7.0-10.el8?arch=x86_64&upstream=readline-7.0-10.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "7.0-10.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/redhat-release@8.9-0.1.el8?arch=x86_64&upstream=redhat-release-8.9-0.1.el8.src.rpm&distro=rhel-8.9&package-id=280f4f0ca447f840",
      "cpe": "cpe:2.3:a:redhat-release:redhat-release:8.9-0.1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2"
          }
        }
      ],
      "name": "redhat-release",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat-release:redhat_release:8.9-0.1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat_release:redhat-release:8.9-0.1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat_release:redhat_release:8.9-0.1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:redhat-release:8.9-0.1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:redhat_release:8.9-0.1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "0.1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "56644"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "redhat-release-8.9-0.1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/redhat-release@8.9-0.1.el8?arch=x86_64&upstream=redhat-release-8.9-0.1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "8.9-0.1.el8"
    },
    {
      "bom-ref": "pkg:maven/io.github.resilience4j.bulkhead/resilience4j-bulkhead@1.3.1?package-id=ee13ec4155196e29",
      "cpe": "cpe:2.3:a:resilience4j-bulkhead:resilience4j-bulkhead:1.3.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "df7dc4df69114c694956a0ac537119527ecf1b9c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "resilience4j-bulkhead",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j-bulkhead:resilience4j_bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j_bulkhead:resilience4j-bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j_bulkhead:resilience4j_bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j-bulkhead:resilience4j:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j:resilience4j-bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j:resilience4j_bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j_bulkhead:resilience4j:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bulkhead:resilience4j-bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bulkhead:resilience4j_bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j-bulkhead:bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j_bulkhead:bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:resilience4j-bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:resilience4j_bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j:resilience4j:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bulkhead:resilience4j:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j:bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:resilience4j:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bulkhead:bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:bulkhead:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/resilience4j-bulkhead-1.3.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/resilience4j-bulkhead-1.3.1.jar"
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j.bulkhead/resilience4j-bulkhead@1.3.1",
      "type": "library",
      "version": "1.3.1"
    },
    {
      "bom-ref": "pkg:maven/io.github.resilience4j.core/resilience4j-core@1.3.1?package-id=6943a04b8aac0b51",
      "cpe": "cpe:2.3:a:resilience4j-core:resilience4j-core:1.3.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "35e36c0cafbdc3395fd4600a05c613d3073c895e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "resilience4j-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j-core:resilience4j_core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j_core:resilience4j-core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j_core:resilience4j_core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j-core:resilience4j:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j:resilience4j-core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j:resilience4j_core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j_core:resilience4j:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j:resilience4j:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:resilience4j-core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:resilience4j_core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:resilience4j-core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:resilience4j_core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j-core:core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j_core:core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:resilience4j:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:resilience4j:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:resilience4j:core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:1.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/resilience4j-core-1.3.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/resilience4j-core-1.3.1.jar"
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j.core/resilience4j-core@1.3.1",
      "type": "library",
      "version": "1.3.1"
    },
    {
      "bom-ref": "pkg:maven/org.mozilla.rhino/rhino@1.7.11?package-id=c12438f63c442b6b",
      "cpe": "cpe:2.3:a:mozilla-foundation:rhino:1.7.11:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cf04bfb7dcf7bacbf93ab7727d842f3ab5a66f0d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MPL-2.0"
          }
        }
      ],
      "name": "rhino",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mozilla_foundation:rhino:1.7.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mozilla:rhino:1.7.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rhino:rhino:1.7.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/rhino-1.7.11.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/rhino-1.7.11.jar"
        }
      ],
      "purl": "pkg:maven/org.mozilla.rhino/rhino@1.7.11",
      "type": "library",
      "version": "1.7.11"
    },
    {
      "bom-ref": "pkg:rpm/rhel/rootfiles@8.1-22.el8?arch=noarch&upstream=rootfiles-8.1-22.el8.src.rpm&distro=rhel-8.9&package-id=9d84439e748d5de1",
      "cpe": "cpe:2.3:a:rootfiles:rootfiles:8.1-22.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "rootfiles",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:rootfiles:8.1-22.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "22.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "599"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "rootfiles-8.1-22.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/rootfiles@8.1-22.el8?arch=noarch&upstream=rootfiles-8.1-22.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "8.1-22.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/rpm@4.14.3-26.el8?arch=x86_64&upstream=rpm-4.14.3-26.el8.src.rpm&distro=rhel-8.9&package-id=c8bba49bf40a7853",
      "cpe": "cpe:2.3:a:redhat:rpm:4.14.3-26.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+"
          }
        }
      ],
      "name": "rpm",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpm:rpm:4.14.3-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "26.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "2087870"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "rpm-4.14.3-26.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/rpm@4.14.3-26.el8?arch=x86_64&upstream=rpm-4.14.3-26.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "4.14.3-26.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/rpm@4.14.3-28.el8_9?arch=x86_64&upstream=rpm-4.14.3-28.el8_9.src.rpm&distro=rhel-8.9&package-id=2d22754340da9414",
      "cpe": "cpe:2.3:a:redhat:rpm:4.14.3-28.el8_9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+"
          }
        }
      ],
      "name": "rpm",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpm:rpm:4.14.3-28.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "28.el8_9"
        },
        {
          "name": "syft:metadata:size",
          "value": "2087806"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "rpm-4.14.3-28.el8_9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/rpm@4.14.3-28.el8_9?arch=x86_64&upstream=rpm-4.14.3-28.el8_9.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "4.14.3-28.el8_9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/rpm-libs@4.14.3-26.el8?arch=x86_64&upstream=rpm-4.14.3-26.el8.src.rpm&distro=rhel-8.9&package-id=af2154f64c923817",
      "cpe": "cpe:2.3:a:rpm-libs:rpm-libs:4.14.3-26.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+ and LGPLv2+ with exceptions"
          }
        }
      ],
      "name": "rpm-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpm-libs:rpm_libs:4.14.3-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpm_libs:rpm-libs:4.14.3-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpm_libs:rpm_libs:4.14.3-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:rpm-libs:4.14.3-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:rpm_libs:4.14.3-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpm:rpm-libs:4.14.3-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpm:rpm_libs:4.14.3-26.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "26.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "735568"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "rpm-4.14.3-26.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/rpm-libs@4.14.3-26.el8?arch=x86_64&upstream=rpm-4.14.3-26.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "4.14.3-26.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/rpm-libs@4.14.3-28.el8_9?arch=x86_64&upstream=rpm-4.14.3-28.el8_9.src.rpm&distro=rhel-8.9&package-id=b5d96e32c55298f5",
      "cpe": "cpe:2.3:a:rpm-libs:rpm-libs:4.14.3-28.el8_9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv2+ and LGPLv2+ with exceptions"
          }
        }
      ],
      "name": "rpm-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpm-libs:rpm_libs:4.14.3-28.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpm_libs:rpm-libs:4.14.3-28.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpm_libs:rpm_libs:4.14.3-28.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:rpm-libs:4.14.3-28.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:rpm_libs:4.14.3-28.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpm:rpm-libs:4.14.3-28.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rpm:rpm_libs:4.14.3-28.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "28.el8_9"
        },
        {
          "name": "syft:metadata:size",
          "value": "739568"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "rpm-4.14.3-28.el8_9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/rpm-libs@4.14.3-28.el8_9?arch=x86_64&upstream=rpm-4.14.3-28.el8_9.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "4.14.3-28.el8_9"
    },
    {
      "bom-ref": "pkg:maven/org.scala-lang.scala-library/scala-library@2.11.12?package-id=f3aebf162a7f86a9",
      "cpe": "cpe:2.3:a:scala-library:scala-library:2.11.12:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bf5534e6fec3d665bd6419c952a929a8bdd4b591"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "scala-library",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-library:scala_library:2.11.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_library:scala-library:2.11.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_library:scala_library:2.11.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala-library:2.11.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala_library:2.11.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala-library:2.11.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala_library:2.11.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala-library:2.11.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala_library:2.11.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/scala-library-2.11.12.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/scala-library-2.11.12.jar"
        }
      ],
      "purl": "pkg:maven/org.scala-lang.scala-library/scala-library@2.11.12",
      "type": "library",
      "version": "2.11.12"
    },
    {
      "bom-ref": "pkg:maven/org.scala-lang.scala-reflect/scala-reflect@2.11.12?package-id=6ab37c932b72b899",
      "cpe": "cpe:2.3:a:scala-reflect:scala-reflect:2.11.12:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2bb23c13c527566d9828107ca4108be2a2c06f01"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "scala-reflect",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-reflect:scala_reflect:2.11.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_reflect:scala-reflect:2.11.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_reflect:scala_reflect:2.11.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala-reflect:2.11.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala-lang:scala_reflect:2.11.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala-reflect:2.11.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala_lang:scala_reflect:2.11.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala-reflect:2.11.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:scala:scala_reflect:2.11.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/scala-reflect-2.11.12.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/scala-reflect-2.11.12.jar"
        }
      ],
      "purl": "pkg:maven/org.scala-lang.scala-reflect/scala-reflect@2.11.12",
      "type": "library",
      "version": "2.11.12"
    },
    {
      "bom-ref": "pkg:maven/org.schemarepo/schema-repo-api@0.1.3?package-id=f85f66c6a6bc0f3e",
      "cpe": "cpe:2.3:a:schema-repo-api:schema-repo-api:0.1.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6a93ee522c52f5bd54140b6fa0be6a503e00dc96"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.schemarepo",
      "name": "schema-repo-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo-api:schema_repo_api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo_api:schema-repo-api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo_api:schema_repo_api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo:schema-repo-api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo:schema_repo_api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo:schema-repo-api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo:schema_repo_api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schemarepo:schema-repo-api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schemarepo:schema_repo_api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema:schema-repo-api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema:schema_repo_api:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/schema-repo-api-0.1.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "schema-repo-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.schemarepo"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/schema-repo-api-0.1.3.jar"
        }
      ],
      "purl": "pkg:maven/org.schemarepo/schema-repo-api@0.1.3",
      "type": "library",
      "version": "0.1.3"
    },
    {
      "bom-ref": "pkg:maven/org.schemarepo/schema-repo-avro@0.1.3?package-id=7776f511a1cbb596",
      "cpe": "cpe:2.3:a:schema-repo-avro:schema-repo-avro:0.1.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "657d341c197d036dc27d7f8f5b61c6ff6a678df4"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.schemarepo",
      "name": "schema-repo-avro",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo-avro:schema_repo_avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo_avro:schema-repo-avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo_avro:schema_repo_avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo:schema-repo-avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo:schema_repo_avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo:schema-repo-avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo:schema_repo_avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schemarepo:schema-repo-avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schemarepo:schema_repo_avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema:schema-repo-avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema:schema_repo_avro:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/schema-repo-avro-0.1.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "schema-repo-avro"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.schemarepo"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/schema-repo-avro-0.1.3.jar"
        }
      ],
      "purl": "pkg:maven/org.schemarepo/schema-repo-avro@0.1.3",
      "type": "library",
      "version": "0.1.3"
    },
    {
      "bom-ref": "pkg:maven/org.schemarepo/schema-repo-client@0.1.3?package-id=421de218786f2ce8",
      "cpe": "cpe:2.3:a:schema-repo-client:schema-repo-client:0.1.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cddd306a5010eba20a133b6473d9e8d967884f57"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.schemarepo",
      "name": "schema-repo-client",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo-client:schema_repo_client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo_client:schema-repo-client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo_client:schema_repo_client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo:schema-repo-client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo:schema_repo_client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo:schema-repo-client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo:schema_repo_client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schemarepo:schema-repo-client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schemarepo:schema_repo_client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema:schema-repo-client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema:schema_repo_client:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/schema-repo-client-0.1.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "schema-repo-client"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.schemarepo"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/schema-repo-client-0.1.3.jar"
        }
      ],
      "purl": "pkg:maven/org.schemarepo/schema-repo-client@0.1.3",
      "type": "library",
      "version": "0.1.3"
    },
    {
      "bom-ref": "pkg:maven/org.schemarepo/schema-repo-common@0.1.3?package-id=0db44af08bc64c53",
      "cpe": "cpe:2.3:a:schema-repo-common:schema-repo-common:0.1.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0d825fd2e9e4dd42ac14d5ae6c7f92cbe63de009"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.schemarepo",
      "name": "schema-repo-common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo-common:schema_repo_common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo_common:schema-repo-common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo_common:schema_repo_common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo:schema-repo-common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema-repo:schema_repo_common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo:schema-repo-common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema_repo:schema_repo_common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schemarepo:schema-repo-common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schemarepo:schema_repo_common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema:schema-repo-common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:schema:schema_repo_common:0.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/schema-repo-common-0.1.3.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "schema-repo-common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.schemarepo"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/schema-repo-common-0.1.3.jar"
        }
      ],
      "purl": "pkg:maven/org.schemarepo/schema-repo-common@0.1.3",
      "type": "library",
      "version": "0.1.3"
    },
    {
      "bom-ref": "pkg:maven/commonj.sdo/sdo@2.1.1?package-id=c5275dba7b57a870",
      "cpe": "cpe:2.3:a:sdo:sdo:2.1.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "90d4c89ce0a69f58619f1a247bbf420122139ff5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "sdo",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/commonj.sdo-2.1.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/commonj.sdo-2.1.1.jar"
        }
      ],
      "purl": "pkg:maven/commonj.sdo/sdo@2.1.1",
      "type": "library",
      "version": "2.1.1"
    },
    {
      "bom-ref": "pkg:rpm/rhel/sed@4.5-5.el8?arch=x86_64&upstream=sed-4.5-5.el8.src.rpm&distro=rhel-8.9&package-id=50081e414a1960d7",
      "cpe": "cpe:2.3:a:redhat:sed:4.5-5.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+"
          }
        }
      ],
      "name": "sed",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sed:sed:4.5-5.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "5.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "765062"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "sed-4.5-5.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/sed@4.5-5.el8?arch=x86_64&upstream=sed-4.5-5.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "4.5-5.el8"
    },
    {
      "bom-ref": "pkg:maven/servlet-api/servlet-api@2.5?package-id=e4fecf85b4c815d0",
      "cpe": "cpe:2.3:a:sun-microsystems-inc:servlet-api:2.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5959582d97d8b61f4d154ca9e495aafd16726e34"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "servlet-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun-microsystems-inc:servlet_api:2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun_microsystems_inc:servlet-api:2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sun_microsystems_inc:servlet_api:2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet-api:servlet-api:2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet-api:servlet_api:2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet_api:servlet-api:2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet_api:servlet_api:2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:servlet-api:2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:servlet:servlet_api:2.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/servlet-api-2.5.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/servlet-api-2.5.jar"
        }
      ],
      "purl": "pkg:maven/servlet-api/servlet-api@2.5",
      "type": "library",
      "version": "2.5"
    },
    {
      "bom-ref": "pkg:rpm/rhel/setup@2.12.2-9.el8?arch=noarch&upstream=setup-2.12.2-9.el8.src.rpm&distro=rhel-8.9&package-id=b6459466cf803aaa",
      "cpe": "cpe:2.3:a:redhat:setup:2.12.2-9.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "setup",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:setup:setup:2.12.2-9.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "9.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "724747"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "setup-2.12.2-9.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/setup@2.12.2-9.el8?arch=noarch&upstream=setup-2.12.2-9.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2.12.2-9.el8"
    },
    {
      "author": "Python Packaging Authority <distutils-sig@python.org>",
      "bom-ref": "pkg:pypi/setuptools@39.2.0?package-id=9d8e8f9c4d1bd61a",
      "cpe": "cpe:2.3:a:python_packaging_authority_project:python-setuptools:39.2.0:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "UNKNOWN"
          }
        }
      ],
      "name": "setuptools",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "python-installed-package-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "python"
        },
        {
          "name": "syft:package:type",
          "value": "python"
        },
        {
          "name": "syft:package:metadataType",
          "value": "python-package"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python_packaging_authority_project:python_setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python_packaging_authorityproject:python-setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python_packaging_authorityproject:python_setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python_packaging_authority_project:setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python_packaging_authority:python-setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python_packaging_authority:python_setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python_packaging_authorityproject:setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:distutils_sig_project:python-setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:distutils_sig_project:python_setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:distutils_sigproject:python-setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:distutils_sigproject:python_setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python_packaging_authority:setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python-setuptools:python-setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python-setuptools:python_setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python_setuptools:python-setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python_setuptools:python_setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:distutils_sig_project:setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:distutils-sig:python-setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:distutils-sig:python_setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:distutils_sig:python-setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:distutils_sig:python_setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:distutils_sigproject:setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python-setuptools:setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python_setuptools:setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:setuptools:python-setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:setuptools:python_setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:distutils-sig:setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:distutils_sig:setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python:python-setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python:python_setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:setuptools:setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:python:setuptools:39.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:0:path",
          "value": "/usr/lib/python3.6/site-packages/setuptools-39.2.0.dist-info/METADATA"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/usr/lib/python3.6/site-packages/setuptools-39.2.0.dist-info/RECORD"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:2:path",
          "value": "/usr/lib/python3.6/site-packages/setuptools-39.2.0.dist-info/top_level.txt"
        }
      ],
      "purl": "pkg:pypi/setuptools@39.2.0",
      "type": "library",
      "version": "39.2.0"
    },
    {
      "bom-ref": "pkg:maven/shims/shims@0.9.0?package-id=f886b9f2d5558707",
      "cpe": "cpe:2.3:a:shims:shims:0.9.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9e20f3ceaea96781b72eac8be9153e9829dc3da7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "shims",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/shims-0.9.0.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/shims-0.9.0.jar"
        }
      ],
      "purl": "pkg:maven/shims/shims@0.9.0",
      "type": "library",
      "version": "0.9.0"
    },
    {
      "bom-ref": "pkg:maven/org.hyperic.sigar.cmd.Runner/sigar@1.6.5.132?package-id=d91ba2ba4f6f63ad",
      "cpe": "cpe:2.3:a:hyperic:Runner:1.6.5.132:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e349501d4275363646a099e1d3baed064aa2eca5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "sigar",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Runner:Runner:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hyperic:sigar:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Runner:sigar:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigar:Runner:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hyperic:cmd:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigar:sigar:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Runner:cmd:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cmd:Runner:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cmd:sigar:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigar:cmd:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cmd:cmd:1.6.5.132:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/sigar-1.6.5.132.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/sigar-1.6.5.132.jar"
        }
      ],
      "purl": "pkg:maven/org.hyperic.sigar.cmd.Runner/sigar@1.6.5.132",
      "type": "library",
      "version": "1.6.5.132"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid.extensions/simple-client-sslcontext@26.0.0?package-id=a5bb03ed40b9f62e",
      "cpe": "cpe:2.3:a:apache:simple-client-sslcontext:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f6c2d3c8148cefa203426ed2ef55a186ba30b078"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid.extensions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "simple-client-sslcontext",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:simple_client_sslcontext:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/simple-client-sslcontext/simple-client-sslcontext-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simple-client-sslcontext"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid.extensions"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/simple-client-sslcontext/simple-client-sslcontext-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid.extensions/simple-client-sslcontext@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/io.prometheus/simpleclient@0.16.0?package-id=19f008a36e553074",
      "cpe": "cpe:2.3:a:simpleclient:simpleclient:0.16.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "28b0eaf7c500c506976da8d0fc9cad6c278e8d87"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.prometheus",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "simpleclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient-0.16.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simpleclient"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.prometheus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient-0.16.0.jar"
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient@0.16.0",
      "type": "library",
      "version": "0.16.0"
    },
    {
      "bom-ref": "pkg:maven/io.prometheus/simpleclient@0.9.0?package-id=9c7cfc195497eefb",
      "cpe": "cpe:2.3:a:simpleclient:simpleclient:0.9.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5c3e6d58bead98e74f738e89b0383f66f005897c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.prometheus",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "simpleclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/simpleclient-0.9.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simpleclient"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.prometheus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/simpleclient-0.9.0.jar"
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient@0.9.0",
      "type": "library",
      "version": "0.9.0"
    },
    {
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_common@0.16.0?package-id=cceed31e217372d3",
      "cpe": "cpe:2.3:a:simpleclient-common:simpleclient-common:0.16.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a09a8c790a20309b942a9fdbfe77da22407096e6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.prometheus",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "simpleclient_common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-common:simpleclient_common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_common:simpleclient-common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_common:simpleclient_common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient-common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient_common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient-common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient_common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_common-0.16.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simpleclient_common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.prometheus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_common-0.16.0.jar"
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_common@0.16.0",
      "type": "library",
      "version": "0.16.0"
    },
    {
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_common@0.9.0?package-id=b349a1c367a25008",
      "cpe": "cpe:2.3:a:simpleclient-common:simpleclient-common:0.9.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c6341fbd22d8ff701f281620ff83233358675c24"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.prometheus",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "simpleclient_common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-common:simpleclient_common:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_common:simpleclient-common:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_common:simpleclient_common:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient-common:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient_common:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient-common:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient_common:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/simpleclient_common-0.9.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simpleclient_common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.prometheus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/simpleclient_common-0.9.0.jar"
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_common@0.9.0",
      "type": "library",
      "version": "0.9.0"
    },
    {
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_httpserver@0.16.0?package-id=020f9d491607fcba",
      "cpe": "cpe:2.3:a:simpleclient-httpserver:simpleclient-httpserver:0.16.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2c23f53ca22d7d8885fc4522ddcadcfe7f01a783"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.prometheus",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "simpleclient_httpserver",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-httpserver:simpleclient_httpserver:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_httpserver:simpleclient-httpserver:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_httpserver:simpleclient_httpserver:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient-httpserver:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient_httpserver:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient-httpserver:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient_httpserver:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_httpserver-0.16.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simpleclient_httpserver"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.prometheus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_httpserver-0.16.0.jar"
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_httpserver@0.16.0",
      "type": "library",
      "version": "0.16.0"
    },
    {
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_httpserver@0.9.0?package-id=68b7d7d5c9a47c18",
      "cpe": "cpe:2.3:a:simpleclient-httpserver:simpleclient-httpserver:0.9.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "510838d9fb246736d7ffd1a3fbf5593bee49b3f2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.prometheus",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "simpleclient_httpserver",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-httpserver:simpleclient_httpserver:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_httpserver:simpleclient-httpserver:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_httpserver:simpleclient_httpserver:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient-httpserver:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient_httpserver:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient-httpserver:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient_httpserver:0.9.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/simpleclient_httpserver-0.9.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simpleclient_httpserver"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.prometheus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/simpleclient_httpserver-0.9.0.jar"
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_httpserver@0.9.0",
      "type": "library",
      "version": "0.9.0"
    },
    {
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_pushgateway@0.16.0?package-id=200c7192a0766daf",
      "cpe": "cpe:2.3:a:simpleclient-pushgateway:simpleclient-pushgateway:0.16.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "65935d9855ece6f85c21ad38634703d0917bf88c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.prometheus",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "simpleclient_pushgateway",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-pushgateway:simpleclient_pushgateway:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_pushgateway:simpleclient-pushgateway:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_pushgateway:simpleclient_pushgateway:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient-pushgateway:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient_pushgateway:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient-pushgateway:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient_pushgateway:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_pushgateway-0.16.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simpleclient_pushgateway"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.prometheus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_pushgateway-0.16.0.jar"
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_pushgateway@0.16.0",
      "type": "library",
      "version": "0.16.0"
    },
    {
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?package-id=1aa9e1b3a52e30bb",
      "cpe": "cpe:2.3:a:simpleclient-tracer-common:simpleclient-tracer-common:0.16.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "dec00ef7c6155c4ca1109ec8248f7ff58d8f6cd3"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.prometheus",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "simpleclient_tracer_common",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer-common:simpleclient_tracer_common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer_common:simpleclient-tracer-common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer_common:simpleclient_tracer_common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer:simpleclient-tracer-common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer:simpleclient_tracer_common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer:simpleclient-tracer-common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer:simpleclient_tracer_common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient-tracer-common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient_tracer_common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient-tracer-common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient_tracer_common:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_tracer_common-0.16.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simpleclient_tracer_common"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.prometheus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_tracer_common-0.16.0.jar"
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0",
      "type": "library",
      "version": "0.16.0"
    },
    {
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0?package-id=97593f9f207ccd25",
      "cpe": "cpe:2.3:a:simpleclient-tracer-otel:simpleclient-tracer-otel:0.16.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cc3d2b7b7cb6f077e3b1ee1d3e99eb54fddfa151"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.prometheus",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "simpleclient_tracer_otel",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer-otel:simpleclient_tracer_otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer_otel:simpleclient-tracer-otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer_otel:simpleclient_tracer_otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer:simpleclient-tracer-otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer:simpleclient_tracer_otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer:simpleclient-tracer-otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer:simpleclient_tracer_otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient-tracer-otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient_tracer_otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient-tracer-otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient_tracer_otel:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_tracer_otel-0.16.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simpleclient_tracer_otel"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.prometheus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_tracer_otel-0.16.0.jar"
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0",
      "type": "library",
      "version": "0.16.0"
    },
    {
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0?package-id=758314c2618fe4f0",
      "cpe": "cpe:2.3:a:simpleclient-tracer-otel-agent:simpleclient-tracer-otel-agent:0.16.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "009d724771e339ff7ec6cd7c0cc170d3470904c5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.prometheus",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "simpleclient_tracer_otel_agent",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer-otel-agent:simpleclient_tracer_otel_agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer_otel_agent:simpleclient-tracer-otel-agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer_otel_agent:simpleclient_tracer_otel_agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer-otel:simpleclient-tracer-otel-agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer-otel:simpleclient_tracer_otel_agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer_otel:simpleclient-tracer-otel-agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer_otel:simpleclient_tracer_otel_agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer:simpleclient-tracer-otel-agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient-tracer:simpleclient_tracer_otel_agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer:simpleclient-tracer-otel-agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient_tracer:simpleclient_tracer_otel_agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient-tracer-otel-agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:simpleclient:simpleclient_tracer_otel_agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient-tracer-otel-agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:prometheus:simpleclient_tracer_otel_agent:0.16.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_tracer_otel_agent-0.16.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "simpleclient_tracer_otel_agent"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.prometheus"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/prometheus-emitter/simpleclient_tracer_otel_agent-0.16.0.jar"
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0",
      "type": "library",
      "version": "0.16.0"
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.10?package-id=fa48ce18eadbb52c",
      "cpe": "cpe:2.3:a:slf4j-api:slf4j-api:1.7.10:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5b338f206827d88acd890739f400a9b7664e5984"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.slf4j",
      "name": "slf4j-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-api:slf4j_api:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j-api:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j_api:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j-api:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j_api:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/slf4j-api-1.7.10.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "slf4j-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/slf4j-api-1.7.10.jar"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.10",
      "type": "library",
      "version": "1.7.10"
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36?package-id=9b8131015be25956",
      "cpe": "cpe:2.3:a:slf4j-api:slf4j-api:1.7.36:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6c62681a2f655b49963a5983b8b0950a6120ae14"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.slf4j",
      "name": "slf4j-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/slf4j-api-1.7.36.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "slf4j-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/slf4j-api-1.7.36.jar"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "type": "library",
      "version": "1.7.36"
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36?package-id=f4e8aa7856758dfc",
      "cpe": "cpe:2.3:a:slf4j-api:slf4j-api:1.7.36:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6c62681a2f655b49963a5983b8b0950a6120ae14"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.slf4j",
      "name": "slf4j-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/slf4j-api-1.7.36.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "slf4j-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/slf4j-api-1.7.36.jar"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "type": "library",
      "version": "1.7.36"
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36?package-id=be3d1f9bb71ccc0e",
      "cpe": "cpe:2.3:a:slf4j-api:slf4j-api:1.7.36:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6c62681a2f655b49963a5983b8b0950a6120ae14"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.slf4j",
      "name": "slf4j-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/slf4j-api-1.7.36.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "slf4j-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-pac4j/slf4j-api-1.7.36.jar"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "type": "library",
      "version": "1.7.36"
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36?package-id=4d5a47e1e54fe9c3",
      "cpe": "cpe:2.3:a:slf4j-api:slf4j-api:1.7.36:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6c62681a2f655b49963a5983b8b0950a6120ae14"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.slf4j",
      "name": "slf4j-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/slf4j-api-1.7.36.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "slf4j-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/slf4j-api-1.7.36.jar"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "type": "library",
      "version": "1.7.36"
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36?package-id=563e4a18e4bb4eab",
      "cpe": "cpe:2.3:a:slf4j-api:slf4j-api:1.7.36:*:*:*:*:*:*:*",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "slf4j-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:org.slf4j:slf4j-api"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "type": "library",
      "version": "1.7.36"
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36?package-id=d7bec7e25d4e9822",
      "cpe": "cpe:2.3:a:slf4j-api:slf4j-api:1.7.36:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6c62681a2f655b49963a5983b8b0950a6120ae14"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.slf4j",
      "name": "slf4j-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/slf4j-api-1.7.36.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "slf4j-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/slf4j-api-1.7.36.jar"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "type": "library",
      "version": "1.7.36"
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36?package-id=0d21e61b466e3ea3",
      "cpe": "cpe:2.3:a:slf4j-api:slf4j-api:1.7.36:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6c62681a2f655b49963a5983b8b0950a6120ae14"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.slf4j",
      "name": "slf4j-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j-api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j_api:1.7.36:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/slf4j-api-1.7.36.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "slf4j-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/slf4j-api-1.7.36.jar"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "type": "library",
      "version": "1.7.36"
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/slf4j-log4j12@1.7.10?package-id=6ea712143eb3ac2a",
      "cpe": "cpe:2.3:a:slf4j-log4j12:slf4j-log4j12:1.7.10:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b3eeae7d1765f988a1f45ea81517191315c69c9e"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.slf4j",
      "name": "slf4j-log4j12",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-log4j12:slf4j_log4j12:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_log4j12:slf4j-log4j12:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_log4j12:slf4j_log4j12:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j-log4j12:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j_log4j12:1.7.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/slf4j-log4j12-1.7.10.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "slf4j-log4j12"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/slf4j-log4j12-1.7.10.jar"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-log4j12@1.7.10",
      "type": "library",
      "version": "1.7.10"
    },
    {
      "bom-ref": "pkg:maven/org.yaml/snakeyaml@1.27?package-id=5e9ae94919c4ee30",
      "cpe": "cpe:2.3:a:snakeyaml:snakeyaml:1.27:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "359d62567480b07a679dc643f82fc926b100eed5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.yaml",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "snakeyaml",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:yaml:snakeyaml:1.27:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/snakeyaml-1.27.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "snakeyaml"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.yaml"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/snakeyaml-1.27.jar"
        }
      ],
      "purl": "pkg:maven/org.yaml/snakeyaml@1.27",
      "type": "library",
      "version": "1.27"
    },
    {
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.0.4.1?package-id=162facacfab35196",
      "cpe": "cpe:2.3:a:SnappyBundleActivator:snappy-java:1.0.4.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f88b89a5a21a466aeb0ecf0c063605bd584b4947"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.xerial.snappy",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "snappy-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy_java:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy-java:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy_java:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy-java:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy_java:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy-java:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy_java:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy-java:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy_java:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy:1.0.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/snappy-java-1.0.4.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "snappy-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.xerial.snappy"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/snappy-java-1.0.4.1.jar"
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.0.4.1",
      "type": "library",
      "version": "1.0.4.1"
    },
    {
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4?package-id=59d78de19cad1f02",
      "cpe": "cpe:2.3:a:SnappyBundleActivator:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "66f0d56454509f6e36175f2331572e250e04a6cc"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "snappy-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/snappy-java-1.1.8.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/snappy-java-1.1.8.4.jar"
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4",
      "type": "library",
      "version": "1.1.8.4"
    },
    {
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4?package-id=30c1ed379856357a",
      "cpe": "cpe:2.3:a:SnappyBundleActivator:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "66f0d56454509f6e36175f2331572e250e04a6cc"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "snappy-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/snappy-java-1.1.8.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/snappy-java-1.1.8.4.jar"
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4",
      "type": "library",
      "version": "1.1.8.4"
    },
    {
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4?package-id=f3b769becaf5eff8",
      "cpe": "cpe:2.3:a:SnappyBundleActivator:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "66f0d56454509f6e36175f2331572e250e04a6cc"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "snappy-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-indexing-service/snappy-java-1.1.8.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-indexing-service/snappy-java-1.1.8.4.jar"
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4",
      "type": "library",
      "version": "1.1.8.4"
    },
    {
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4?package-id=7ab748c58b1d72f8",
      "cpe": "cpe:2.3:a:SnappyBundleActivator:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "66f0d56454509f6e36175f2331572e250e04a6cc"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "snappy-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/snappy-java-1.1.8.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/snappy-java-1.1.8.4.jar"
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4",
      "type": "library",
      "version": "1.1.8.4"
    },
    {
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4?package-id=bdd180492dccb41a",
      "cpe": "cpe:2.3:a:SnappyBundleActivator:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "66f0d56454509f6e36175f2331572e250e04a6cc"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "snappy-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:SnappyBundleActivator:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy-java:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy_java:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy-java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy_java:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial-org:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial_org:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:snappy:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xerial:snappy:1.1.8.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/snappy-java-1.1.8.4.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/snappy-java-1.1.8.4.jar"
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4",
      "type": "library",
      "version": "1.1.8.4"
    },
    {
      "bom-ref": "pkg:maven/org.apache.solr/solr-solrj@7.7.1?package-id=f84bfb1bf279a39c",
      "cpe": "cpe:2.3:a:apache:solr-solrj:7.7.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "abd7a7a0327932797944150101476168175d3fab"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "solr-solrj",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:solr_solrj:7.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:solr:7.7.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/solr-solrj-7.7.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/solr-solrj-7.7.1.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.solr/solr-solrj@7.7.1",
      "type": "library",
      "version": "7.7.1"
    },
    {
      "bom-ref": "pkg:maven/net.spy.memcached.BuildInfo/spymemcached@2.12.3?package-id=4972e409c6b2eda6",
      "cpe": "cpe:2.3:a:2006-2011-dustin-sallings\\,-matt-ingenthron:spymemcached:2.12.3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9a648a4897f8038dc146d445b6fe94dacbb7e132"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "spymemcached",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:2006_2011_dustin_sallings\\,_matt_ingenthron:spymemcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:2006-2011-dustin-sallings\\,-matt-ingenthron:BuildInfo:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:2006-2011-dustin-sallings\\,-matt-ingenthron:memcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:2006_2011_dustin_sallings\\,_matt_ingenthron:BuildInfo:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:2006_2011_dustin_sallings\\,_matt_ingenthron:memcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spymemcached:spymemcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:BuildInfo:spymemcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:memcached:spymemcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spymemcached:BuildInfo:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spymemcached:memcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:BuildInfo:BuildInfo:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:BuildInfo:memcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:memcached:BuildInfo:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:memcached:memcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spy:spymemcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spy:BuildInfo:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spy:memcached:2.12.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/spymemcached-2.12.3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/spymemcached-2.12.3.jar"
        }
      ],
      "purl": "pkg:maven/net.spy.memcached.BuildInfo/spymemcached@2.12.3",
      "type": "library",
      "version": "2.12.3"
    },
    {
      "bom-ref": "pkg:rpm/rhel/sqlite-libs@3.26.0-18.el8_8?arch=x86_64&upstream=sqlite-3.26.0-18.el8_8.src.rpm&distro=rhel-8.9&package-id=01ef0f95b04beed4",
      "cpe": "cpe:2.3:a:sqlite-libs:sqlite-libs:3.26.0-18.el8_8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "sqlite-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sqlite-libs:sqlite_libs:3.26.0-18.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sqlite_libs:sqlite-libs:3.26.0-18.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sqlite_libs:sqlite_libs:3.26.0-18.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:sqlite-libs:3.26.0-18.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:sqlite_libs:3.26.0-18.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sqlite:sqlite-libs:3.26.0-18.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sqlite:sqlite_libs:3.26.0-18.el8_8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "18.el8_8"
        },
        {
          "name": "syft:metadata:size",
          "value": "1166553"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "sqlite-3.26.0-18.el8_8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/sqlite-libs@3.26.0-18.el8_8?arch=x86_64&upstream=sqlite-3.26.0-18.el8_8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.26.0-18.el8_8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/sqlite-libs@3.26.0-19.el8_9?arch=x86_64&upstream=sqlite-3.26.0-19.el8_9.src.rpm&distro=rhel-8.9&package-id=a500a1122a198630",
      "cpe": "cpe:2.3:a:sqlite-libs:sqlite-libs:3.26.0-19.el8_9:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "sqlite-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sqlite-libs:sqlite_libs:3.26.0-19.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sqlite_libs:sqlite-libs:3.26.0-19.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sqlite_libs:sqlite_libs:3.26.0-19.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:sqlite-libs:3.26.0-19.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:sqlite_libs:3.26.0-19.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sqlite:sqlite-libs:3.26.0-19.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sqlite:sqlite_libs:3.26.0-19.el8_9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "19.el8_9"
        },
        {
          "name": "syft:metadata:size",
          "value": "1166537"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "sqlite-3.26.0-19.el8_9.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/sqlite-libs@3.26.0-19.el8_9?arch=x86_64&upstream=sqlite-3.26.0-19.el8_9.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.26.0-19.el8_9"
    },
    {
      "bom-ref": "pkg:maven/stax-api/stax-api@1.0-2?package-id=c6ae3162f8b4a0db",
      "cpe": "cpe:2.3:a:stax-api:stax-api:1.0-2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d6337b0de8b25e53e81b922352fbea9f9f57ba0b"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "stax-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax-api:stax_api:1.0-2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax_api:stax-api:1.0-2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax_api:stax_api:1.0-2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax:stax-api:1.0-2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax:stax_api:1.0-2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/stax-api-1.0-2.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/stax-api-1.0-2.jar"
        }
      ],
      "purl": "pkg:maven/stax-api/stax-api@1.0-2",
      "type": "library",
      "version": "1.0-2"
    },
    {
      "bom-ref": "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?package-id=12b664e7e24e3ce1",
      "cpe": "cpe:2.3:a:stax2-api:stax2-api:3.1.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ac19014b1e6a7c08aad07fe114af792676b685b7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.codehaus.woodstox",
      "licenses": [
        {
          "license": {
            "name": "http://www.opensource.org/licenses/bsd-license.php"
          }
        }
      ],
      "name": "stax2-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax2-api:stax2_api:3.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax2_api:stax2-api:3.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax2_api:stax2_api:3.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:stax2-api:3.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:stax2_api:3.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox:stax2-api:3.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox:stax2_api:3.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax2:stax2-api:3.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax2:stax2_api:3.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/stax2-api-3.1.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "stax2-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.codehaus.woodstox"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/stax2-api-3.1.4.jar"
        }
      ],
      "purl": "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4",
      "type": "library",
      "version": "3.1.4"
    },
    {
      "bom-ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?package-id=12674da6e201e671",
      "cpe": "cpe:2.3:a:fasterxml-com:stax2-api:4.2.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a3f7325c52240418c2ba257b103c3c550e140c83"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.codehaus.woodstox",
      "licenses": [
        {
          "license": {
            "name": "http://www.opensource.org/licenses/bsd-license.php"
          }
        }
      ],
      "name": "stax2-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml-com:stax2_api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml_com:stax2-api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml_com:stax2_api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax2-api:stax2-api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax2-api:stax2_api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax2_api:stax2-api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax2_api:stax2_api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:stax2-api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:stax2_api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox:stax2-api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox:stax2_api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax2:stax2-api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:stax2:stax2_api:4.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/stax2-api-4.2.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "stax2-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.codehaus.woodstox"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/stax2-api-4.2.1.jar"
        }
      ],
      "purl": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1",
      "type": "library",
      "version": "4.2.1"
    },
    {
      "bom-ref": "pkg:maven/stringtemplate/stringtemplate@3.2?package-id=152c9bd208ef9b41",
      "cpe": "cpe:2.3:a:stringtemplate:stringtemplate:3.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6fe2e3bb57daebd1555494818909f9664376dd6c"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "stringtemplate",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-single/stringtemplate-3.2.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-lookups-cached-single/stringtemplate-3.2.jar"
        }
      ],
      "purl": "pkg:maven/stringtemplate/stringtemplate@3.2",
      "type": "library",
      "version": "3.2"
    },
    {
      "bom-ref": "pkg:maven/io.swagger/swagger-annotations@1.6.0?package-id=bd68eae28eb1a8fe",
      "cpe": "cpe:2.3:a:swagger-annotations:swagger-annotations:1.6.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "158dfa5430ff4b96a03e936a2ad1cb2f376a8c1a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.swagger",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "name": "swagger-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger-annotations:swagger_annotations:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_annotations:swagger-annotations:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_annotations:swagger_annotations:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:swagger-annotations:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:swagger_annotations:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger-annotations:annotations:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_annotations:annotations:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:swagger-annotations:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:swagger_annotations:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:annotations:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:annotations:1.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/swagger-annotations-1.6.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "swagger-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.swagger"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/swagger-annotations-1.6.0.jar"
        }
      ],
      "purl": "pkg:maven/io.swagger/swagger-annotations@1.6.0",
      "type": "library",
      "version": "1.6.0"
    },
    {
      "bom-ref": "pkg:maven/io.swagger/swagger-annotations@1.6.2?package-id=54f8897fb09a32ea",
      "cpe": "cpe:2.3:a:swagger-annotations:swagger-annotations:1.6.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "313913e603eaf3bb2c3b05079046ec07bb61f8c6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.swagger",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "name": "swagger-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger-annotations:swagger_annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_annotations:swagger-annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_annotations:swagger_annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:swagger-annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:swagger_annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger-annotations:annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_annotations:annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:swagger-annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:swagger_annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:annotations:annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/swagger-annotations-1.6.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "swagger-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.swagger"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/swagger-annotations-1.6.2.jar"
        }
      ],
      "purl": "pkg:maven/io.swagger/swagger-annotations@1.6.2",
      "type": "library",
      "version": "1.6.2"
    },
    {
      "bom-ref": "pkg:maven/io.swagger/swagger-annotations@1.6.2?package-id=0a28297157074a5f",
      "cpe": "cpe:2.3:a:swagger-annotations:swagger-annotations:1.6.2:*:*:*:*:*:*:*",
      "group": "io.swagger",
      "name": "swagger-annotations",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger-annotations:swagger_annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_annotations:swagger-annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger_annotations:swagger_annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:swagger-annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swagger:swagger_annotations:1.6.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "swagger-annotations"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.swagger"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-protobuf-extensions/druid-protobuf-extensions-26.0.0.jar:io.swagger:swagger-annotations"
        }
      ],
      "purl": "pkg:maven/io.swagger/swagger-annotations@1.6.2",
      "type": "library",
      "version": "1.6.2"
    },
    {
      "bom-ref": "pkg:rpm/rhel/systemd-libs@239-78.el8?arch=x86_64&upstream=systemd-239-78.el8.src.rpm&distro=rhel-8.9&package-id=2e4f0e952564a19d",
      "cpe": "cpe:2.3:a:systemd-libs:systemd-libs:239-78.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+ and MIT"
          }
        }
      ],
      "name": "systemd-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:systemd-libs:systemd_libs:239-78.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:systemd_libs:systemd-libs:239-78.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:systemd_libs:systemd_libs:239-78.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:systemd:systemd-libs:239-78.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:systemd:systemd_libs:239-78.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:systemd-libs:239-78.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:systemd_libs:239-78.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "78.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "4690214"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "systemd-239-78.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/systemd-libs@239-78.el8?arch=x86_64&upstream=systemd-239-78.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "239-78.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/tar@1.30-9.el8?arch=x86_64&epoch=2&upstream=tar-1.30-9.el8.src.rpm&distro=rhel-8.9&package-id=6ab725de4cbc4c6c",
      "cpe": "cpe:2.3:a:redhat:tar:2\\:1.30-9.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "GPLv3+"
          }
        }
      ],
      "name": "tar",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tar:tar:2\\:1.30-9.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "2"
        },
        {
          "name": "syft:metadata:release",
          "value": "9.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "2876653"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "tar-1.30-9.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/tar@1.30-9.el8?arch=x86_64&epoch=2&upstream=tar-1.30-9.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2:1.30-9.el8"
    },
    {
      "bom-ref": "pkg:maven/io.tesla.aether/tesla-aether@0.0.5?package-id=bb8614cd0fd7e6d7",
      "cpe": "cpe:2.3:a:tesla-aether:tesla-aether:0.0.5:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5397c9a02f77744da25d4ef63a7ebf01affeca62"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.tesla.aether",
      "licenses": [
        {
          "license": {
            "name": "The Eclipse Public License, Version 1.0",
            "url": "http://www.eclipse.org/legal/epl-v10.html"
          }
        }
      ],
      "name": "tesla-aether",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla-aether:tesla_aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla_aether:tesla-aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla_aether:tesla_aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:tesla-aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:tesla_aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla-aether:aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla_aether:aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla:tesla-aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla:tesla_aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aether:aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tesla:aether:0.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/tesla-aether-0.0.5.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "tesla-aether"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.tesla.aether"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/tesla-aether-0.0.5.jar"
        }
      ],
      "purl": "pkg:maven/io.tesla.aether/tesla-aether@0.0.5",
      "type": "library",
      "version": "0.0.5"
    },
    {
      "bom-ref": "pkg:maven/org.threeten/threeten-extra@1.5.0?package-id=2d92fd651149c265",
      "cpe": "cpe:2.3:a:threeten-extra:threeten-extra:1.5.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d6adb54fefe72482ed049f07af31ddf2c287345f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.threeten",
      "licenses": [
        {
          "license": {
            "name": "https://raw.githubusercontent.com/ThreeTen/threeten-extra/master/LICENSE.txt"
          }
        }
      ],
      "name": "threeten-extra",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten-extra:threeten_extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten_extra:threeten-extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten_extra:threeten_extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten-org:threeten-extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten-org:threeten_extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten_org:threeten-extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten_org:threeten_extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten:threeten-extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten:threeten_extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:extra:threeten-extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:extra:threeten_extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten-extra:extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten_extra:extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten-org:extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten_org:extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:threeten:extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:extra:extra:1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/threeten-extra-1.5.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "threeten-extra"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.threeten"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-orc-extensions/threeten-extra-1.5.0.jar"
        }
      ],
      "purl": "pkg:maven/org.threeten/threeten-extra@1.5.0",
      "type": "library",
      "version": "1.5.0"
    },
    {
      "bom-ref": "pkg:rpm/rhel/ttmkfdir@3.0.9-54.el8?arch=x86_64&upstream=ttmkfdir-3.0.9-54.el8.src.rpm&distro=rhel-8.9&package-id=21e28f50db15270a",
      "cpe": "cpe:2.3:a:ttmkfdir:ttmkfdir:3.0.9-54.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "LGPLv2+"
          }
        }
      ],
      "name": "ttmkfdir",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:ttmkfdir:3.0.9-54.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "54.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "130858"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "ttmkfdir-3.0.9-54.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/ttmkfdir@3.0.9-54.el8?arch=x86_64&upstream=ttmkfdir-3.0.9-54.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.0.9-54.el8"
    },
    {
      "bom-ref": "pkg:maven/org.glassfish.jaxb/txw2@2.3.1?package-id=469da40b02b8547f",
      "cpe": "cpe:2.3:a:glassfish:txw2:2.3.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a09d2c48d3285f206fafbffe0e50619284e92126"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.glassfish.jaxb",
      "name": "txw2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:oracle:txw2:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jaxb:txw2:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:txw2:txw2:2.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/txw2-2.3.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "txw2"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.glassfish.jaxb"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/txw2-2.3.1.jar"
        }
      ],
      "purl": "pkg:maven/org.glassfish.jaxb/txw2@2.3.1",
      "type": "library",
      "version": "2.3.1"
    },
    {
      "bom-ref": "pkg:rpm/rhel/tzdata@2023c-1.el8?arch=noarch&upstream=tzdata-2023c-1.el8.src.rpm&distro=rhel-8.9&package-id=c8903c774eaa59ec",
      "cpe": "cpe:2.3:a:redhat:tzdata:2023c-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "tzdata",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tzdata:tzdata:2023c-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "1788198"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "tzdata-2023c-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/tzdata@2023c-1.el8?arch=noarch&upstream=tzdata-2023c-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2023c-1.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/tzdata@2024a-1.el8?arch=noarch&upstream=tzdata-2024a-1.el8.src.rpm&distro=rhel-8.9&package-id=5e9c9c9cbe75d9e1",
      "cpe": "cpe:2.3:a:redhat:tzdata:2024a-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "tzdata",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tzdata:tzdata:2024a-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "1780398"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "tzdata-2024a-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/tzdata@2024a-1.el8?arch=noarch&upstream=tzdata-2024a-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2024a-1.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/tzdata-java@2024a-1.el8?arch=noarch&upstream=tzdata-2024a-1.el8.src.rpm&distro=rhel-8.9&package-id=3a57ee6db62a6570",
      "cpe": "cpe:2.3:a:tzdata-java:tzdata-java:2024a-1.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "tzdata-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tzdata-java:tzdata_java:2024a-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tzdata_java:tzdata-java:2024a-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tzdata_java:tzdata_java:2024a-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:tzdata-java:2024a-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:tzdata_java:2024a-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tzdata:tzdata-java:2024a-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tzdata:tzdata_java:2024a-1.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "350310"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "tzdata-2024a-1.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/tzdata-java@2024a-1.el8?arch=noarch&upstream=tzdata-2024a-1.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "2024a-1.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/unzip@6.0-46.el8?arch=x86_64&upstream=unzip-6.0-46.el8.src.rpm&distro=rhel-8.9&package-id=5fa8ac0558d75160",
      "cpe": "cpe:2.3:a:redhat:unzip:6.0-46.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "unzip",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:unzip:unzip:6.0-46.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "46.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "424085"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "unzip-6.0-46.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/unzip@6.0-46.el8?arch=x86_64&upstream=unzip-6.0-46.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "6.0-46.el8"
    },
    {
      "bom-ref": "pkg:maven/javax.validation/validation-api@1.1.0.Final?package-id=1fdc932c510bf2bc",
      "cpe": "cpe:2.3:a:validation-api:validation-api:1.1.0.Final:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8613ae82954779d518631e05daa73a6a954817d5"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "javax.validation",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "validation-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validation-api:validation_api:1.1.0.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validation_api:validation-api:1.1.0.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validation_api:validation_api:1.1.0.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validation:validation-api:1.1.0.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:validation:validation_api:1.1.0.Final:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/validation-api-1.1.0.Final.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "validation-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "javax.validation"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/validation-api-1.1.0.Final.jar"
        }
      ],
      "purl": "pkg:maven/javax.validation/validation-api@1.1.0.Final",
      "type": "library",
      "version": "1.1.0.Final"
    },
    {
      "bom-ref": "pkg:maven/io.vavr/vavr@0.10.2?package-id=77fb375ebd07ae3f",
      "cpe": "cpe:2.3:a:vavr:vavr:0.10.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "dfd5101b17da36c32ae024b984e0b72712f01a35"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.vavr",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "vavr",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/vavr-0.10.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "vavr"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.vavr"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/vavr-0.10.2.jar"
        }
      ],
      "purl": "pkg:maven/io.vavr/vavr@0.10.2",
      "type": "library",
      "version": "0.10.2"
    },
    {
      "bom-ref": "pkg:maven/io.vavr/vavr-match@0.10.2?package-id=573b33055cbcdc37",
      "cpe": "cpe:2.3:a:vavr-match:vavr-match:0.10.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "68f1af10052713fda01bfb1e5b831dcf6d826ab2"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "io.vavr",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "vavr-match",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vavr-match:vavr_match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vavr_match:vavr-match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vavr_match:vavr_match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:match:vavr-match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:match:vavr_match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vavr-match:match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vavr_match:match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vavr:vavr-match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vavr:vavr_match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:match:match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:vavr:match:0.10.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/vavr-match-0.10.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "vavr-match"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "io.vavr"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/vavr-match-0.10.2.jar"
        }
      ],
      "purl": "pkg:maven/io.vavr/vavr-match@0.10.2",
      "type": "library",
      "version": "0.10.2"
    },
    {
      "bom-ref": "pkg:rpm/rhel/vector@0.35.0-1?arch=x86_64&upstream=vector-0.35.0-1.src.rpm&distro=rhel-8.9&package-id=479231916a859338",
      "cpe": "cpe:2.3:a:vector:vector:0.35.0-1:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MPL-2.0"
          }
        }
      ],
      "name": "vector",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "1"
        },
        {
          "name": "syft:metadata:size",
          "value": "126235062"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "vector-0.35.0-1.src.rpm"
        }
      ],
      "purl": "pkg:rpm/rhel/vector@0.35.0-1?arch=x86_64&upstream=vector-0.35.0-1.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "0.35.0-1"
    },
    {
      "bom-ref": "pkg:maven/org.apache.velocity/velocity-engine-core@2.2?package-id=40135d36eb1c9a01",
      "cpe": "cpe:2.3:a:apache:velocity-engine-core:2.2:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "68d899cb70cd27d495562fa808feb2da4926d38f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.velocity",
      "licenses": [
        {
          "license": {
            "name": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "velocity-engine-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:velocity_engine_core:2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:velocity:2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/velocity-engine-core-2.2.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "velocity-engine-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.velocity"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/velocity-engine-core-2.2.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.velocity/velocity-engine-core@2.2",
      "type": "library",
      "version": "2.2"
    },
    {
      "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-provider-api@2.4?package-id=44862ee399f17f12",
      "cpe": "cpe:2.3:a:apache:wagon-provider-api:2.4:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e40429d9dd849c5fe0bdf97062b1d9358d99826d"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.maven.wagon",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "wagon-provider-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:wagon_provider_api:2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:wagon:2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/wagon-provider-api-2.4.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "wagon-provider-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.maven.wagon"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/wagon-provider-api-2.4.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.maven.wagon/wagon-provider-api@2.4",
      "type": "library",
      "version": "2.4"
    },
    {
      "bom-ref": "pkg:maven/org.apache.druid/web-console@26.0.0?package-id=9b88df664e2f60fb",
      "cpe": "cpe:2.3:a:apache:web-console:26.0.0:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4e34e2c3f534c1fc1852ab38c251e9e9b68e63a7"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.druid",
      "name": "web-console",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:web_console:26.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/web-console-26.0.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "web-console"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.druid"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/web-console-26.0.0.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.druid/web-console@26.0.0",
      "type": "library",
      "version": "26.0.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.1?package-id=0a6c7f4d36bfbde1",
      "cpe": "cpe:2.3:a:woodstox-core:woodstox-core:6.2.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1600925b1ec7c7a3403c8f068ad62feead13132f"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.fasterxml.woodstox",
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "woodstox-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox-core:woodstox_core:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox_core:woodstox-core:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox_core:woodstox_core:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:woodstox-core:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:woodstox_core:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox-core:woodstox:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox:woodstox-core:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox:woodstox_core:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox_core:woodstox:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:woodstox:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox:woodstox:6.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/woodstox-core-6.2.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "woodstox-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.woodstox"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/woodstox-core-6.2.1.jar"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.1",
      "type": "library",
      "version": "6.2.1"
    },
    {
      "bom-ref": "pkg:maven/com.ctc.wstx.osgi.WstxBundleActivator/woodstox-core-asl@4.4.1?package-id=30f4c401d6d23709",
      "cpe": "cpe:2.3:a:http\\:\\/\\/woodstox-codehaus-org:WstxBundleActivator:4.4.1:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "84fee5eb1a4a1cefe65b6883c73b3fa83be3c1a1"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "woodstox-core-asl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/woodstox_codehaus_org:WstxBundleActivator:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/woodstox-codehaus-org:woodstox-core-asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/woodstox-codehaus-org:woodstox_core_asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/woodstox_codehaus_org:woodstox-core-asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/woodstox_codehaus_org:woodstox_core_asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:WstxBundleActivator:WstxBundleActivator:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:WstxBundleActivator:woodstox-core-asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:WstxBundleActivator:woodstox_core_asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox-core-asl:WstxBundleActivator:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox_core_asl:WstxBundleActivator:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox-core-asl:woodstox-core-asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox-core-asl:woodstox_core_asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox_core_asl:woodstox-core-asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox_core_asl:woodstox_core_asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/woodstox-codehaus-org:osgi:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/woodstox-codehaus-org:wstx:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/woodstox_codehaus_org:osgi:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:http\\:\\/\\/woodstox_codehaus_org:wstx:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox-core:WstxBundleActivator:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox_core:WstxBundleActivator:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox-core:woodstox-core-asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox-core:woodstox_core_asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox_core:woodstox-core-asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox_core:woodstox_core_asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox:WstxBundleActivator:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox:woodstox-core-asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox:woodstox_core_asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:WstxBundleActivator:osgi:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:WstxBundleActivator:wstx:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:WstxBundleActivator:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wstx:WstxBundleActivator:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ctc:WstxBundleActivator:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:woodstox-core-asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:woodstox_core_asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox-core-asl:osgi:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox-core-asl:wstx:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox_core_asl:osgi:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox_core_asl:wstx:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wstx:woodstox-core-asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wstx:woodstox_core_asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ctc:woodstox-core-asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ctc:woodstox_core_asl:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox-core:osgi:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox-core:wstx:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox_core:osgi:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox_core:wstx:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox:osgi:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:woodstox:wstx:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:osgi:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:osgi:wstx:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wstx:osgi:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:wstx:wstx:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ctc:osgi:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ctc:wstx:4.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/woodstox-core-asl-4.4.1.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/woodstox-core-asl-4.4.1.jar"
        }
      ],
      "purl": "pkg:maven/com.ctc.wstx.osgi.WstxBundleActivator/woodstox-core-asl@4.4.1",
      "type": "library",
      "version": "4.4.1"
    },
    {
      "bom-ref": "pkg:maven/xmlenc/xmlenc@0.52?package-id=d39a6433ef7e06a6",
      "cpe": "cpe:2.3:a:ernst-de-haan:xmlenc:0.52:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d82554efbe65906d83b3d97bd7509289e9db561a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "xmlenc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ernst_de_haan:xmlenc:0.52:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xmlenc:xmlenc:0.52:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/xmlenc-0.52.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-hdfs-storage/xmlenc-0.52.jar"
        }
      ],
      "purl": "pkg:maven/xmlenc/xmlenc@0.52",
      "type": "library",
      "version": "0.52"
    },
    {
      "bom-ref": "pkg:maven/xmlenc/xmlenc@0.52?package-id=321c7abf93038fe6",
      "cpe": "cpe:2.3:a:ernst-de-haan:xmlenc:0.52:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d82554efbe65906d83b3d97bd7509289e9db561a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "xmlenc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ernst_de_haan:xmlenc:0.52:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xmlenc:xmlenc:0.52:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/xmlenc-0.52.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/xmlenc-0.52.jar"
        }
      ],
      "purl": "pkg:maven/xmlenc/xmlenc@0.52",
      "type": "library",
      "version": "0.52"
    },
    {
      "bom-ref": "pkg:maven/xmlenc/xmlenc@0.52?package-id=4379a8457577bf00",
      "cpe": "cpe:2.3:a:ernst-de-haan:xmlenc:0.52:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d82554efbe65906d83b3d97bd7509289e9db561a"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "xmlenc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ernst_de_haan:xmlenc:0.52:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xmlenc:xmlenc:0.52:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/xmlenc-0.52.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/hadoop-dependencies/hadoop-client/2.8.5/xmlenc-0.52.jar"
        }
      ],
      "purl": "pkg:maven/xmlenc/xmlenc@0.52",
      "type": "library",
      "version": "0.52"
    },
    {
      "bom-ref": "pkg:rpm/rhel/xorg-x11-font-utils@7.5-41.el8?arch=x86_64&epoch=1&upstream=xorg-x11-font-utils-7.5-41.el8.src.rpm&distro=rhel-8.9&package-id=b9bc024e59d46261",
      "cpe": "cpe:2.3:a:xorg-x11-font-utils:xorg-x11-font-utils:1\\:7.5-41.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "xorg-x11-font-utils",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg-x11-font-utils:xorg_x11_font_utils:1\\:7.5-41.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg_x11_font_utils:xorg-x11-font-utils:1\\:7.5-41.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg_x11_font_utils:xorg_x11_font_utils:1\\:7.5-41.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg-x11-font:xorg-x11-font-utils:1\\:7.5-41.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg-x11-font:xorg_x11_font_utils:1\\:7.5-41.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg_x11_font:xorg-x11-font-utils:1\\:7.5-41.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg_x11_font:xorg_x11_font_utils:1\\:7.5-41.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg-x11:xorg-x11-font-utils:1\\:7.5-41.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg-x11:xorg_x11_font_utils:1\\:7.5-41.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg_x11:xorg-x11-font-utils:1\\:7.5-41.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg_x11:xorg_x11_font_utils:1\\:7.5-41.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:xorg-x11-font-utils:1\\:7.5-41.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:xorg_x11_font_utils:1\\:7.5-41.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg:xorg-x11-font-utils:1\\:7.5-41.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg:xorg_x11_font_utils:1\\:7.5-41.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:epoch",
          "value": "1"
        },
        {
          "name": "syft:metadata:release",
          "value": "41.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "370642"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "xorg-x11-font-utils-7.5-41.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/xorg-x11-font-utils@7.5-41.el8?arch=x86_64&epoch=1&upstream=xorg-x11-font-utils-7.5-41.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1:7.5-41.el8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/xorg-x11-fonts-Type1@7.5-19.el8?arch=noarch&upstream=xorg-x11-fonts-7.5-19.el8.src.rpm&distro=rhel-8.9&package-id=f9dab58440640ff4",
      "cpe": "cpe:2.3:a:xorg-x11-fonts-Type1:xorg-x11-fonts-Type1:7.5-19.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "MIT and Lucida and Public Domain"
          }
        }
      ],
      "name": "xorg-x11-fonts-Type1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg-x11-fonts-Type1:xorg_x11_fonts_Type1:7.5-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg_x11_fonts_Type1:xorg-x11-fonts-Type1:7.5-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg_x11_fonts_Type1:xorg_x11_fonts_Type1:7.5-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg-x11-fonts:xorg-x11-fonts-Type1:7.5-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg-x11-fonts:xorg_x11_fonts_Type1:7.5-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg_x11_fonts:xorg-x11-fonts-Type1:7.5-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg_x11_fonts:xorg_x11_fonts_Type1:7.5-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg-x11:xorg-x11-fonts-Type1:7.5-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg-x11:xorg_x11_fonts_Type1:7.5-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg_x11:xorg-x11-fonts-Type1:7.5-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg_x11:xorg_x11_fonts_Type1:7.5-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:xorg-x11-fonts-Type1:7.5-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:xorg_x11_fonts_Type1:7.5-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg:xorg-x11-fonts-Type1:7.5-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xorg:xorg_x11_fonts_Type1:7.5-19.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "19.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "883992"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "xorg-x11-fonts-7.5-19.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/xorg-x11-fonts-Type1@7.5-19.el8?arch=noarch&upstream=xorg-x11-fonts-7.5-19.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "7.5-19.el8"
    },
    {
      "bom-ref": "pkg:maven/net.java.dev.msv/xsdlib@2013.6.1?package-id=154de1f79ab5cb72",
      "cpe": "cpe:2.3:a:xsdlib:xsdlib:2013.6.1:*:*:*:*:*:*:*",
      "group": "net.java.dev.msv",
      "name": "xsdlib",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:java:xsdlib:2013.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dev:xsdlib:2013.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:msv:xsdlib:2013.6.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/woodstox-core-6.2.1.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "xsdlib"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.java.dev.msv"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/woodstox-core-6.2.1.jar:net.java.dev.msv:xsdlib"
        }
      ],
      "purl": "pkg:maven/net.java.dev.msv/xsdlib@2013.6.1",
      "type": "library",
      "version": "2013.6.1"
    },
    {
      "bom-ref": "pkg:maven/org.tukaani.xz/xz@1.8?package-id=5a5b1691c6b76f61",
      "cpe": "cpe:2.3:a:tukaani:xz:1.8:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c4f7d054303948eb6a4066194253886c8af07128"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "xz",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xz:xz:1.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/xz-1.8.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/xz-1.8.jar"
        }
      ],
      "purl": "pkg:maven/org.tukaani.xz/xz@1.8",
      "type": "library",
      "version": "1.8"
    },
    {
      "bom-ref": "pkg:rpm/rhel/xz-libs@5.2.4-4.el8_6?arch=x86_64&upstream=xz-5.2.4-4.el8_6.src.rpm&distro=rhel-8.9&package-id=309b498623f79d72",
      "cpe": "cpe:2.3:a:xz-libs:xz-libs:5.2.4-4.el8_6:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "Public Domain"
          }
        }
      ],
      "name": "xz-libs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xz-libs:xz_libs:5.2.4-4.el8_6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xz_libs:xz-libs:5.2.4-4.el8_6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xz_libs:xz_libs:5.2.4-4.el8_6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:xz-libs:5.2.4-4.el8_6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:redhat:xz_libs:5.2.4-4.el8_6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xz:xz-libs:5.2.4-4.el8_6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:xz:xz_libs:5.2.4-4.el8_6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "4.el8_6"
        },
        {
          "name": "syft:metadata:size",
          "value": "164967"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "xz-5.2.4-4.el8_6.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/xz-libs@5.2.4-4.el8_6?arch=x86_64&upstream=xz-5.2.4-4.el8_6.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "5.2.4-4.el8_6"
    },
    {
      "bom-ref": "pkg:maven/net.openhft/zero-allocation-hashing@0.9?package-id=f09b7ec8d1da672c",
      "cpe": "cpe:2.3:a:zero-allocation-hashing:zero-allocation-hashing:0.9:*:*:*:*:*:*:*",
      "group": "net.openhft",
      "name": "zero-allocation-hashing",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero-allocation-hashing:zero_allocation_hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero_allocation_hashing:zero-allocation-hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero_allocation_hashing:zero_allocation_hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero-allocation:zero-allocation-hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero-allocation:zero_allocation_hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero_allocation:zero-allocation-hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero_allocation:zero_allocation_hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openhft:zero-allocation-hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openhft:zero_allocation_hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero:zero-allocation-hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero:zero_allocation_hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-column-1.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "zero-allocation-hashing"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.openhft"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-column-1.12.0.jar:net.openhft:zero-allocation-hashing"
        }
      ],
      "purl": "pkg:maven/net.openhft/zero-allocation-hashing@0.9",
      "type": "library",
      "version": "0.9"
    },
    {
      "bom-ref": "pkg:maven/net.openhft/zero-allocation-hashing@0.9?package-id=ce77cc46c8ae07bd",
      "cpe": "cpe:2.3:a:zero-allocation-hashing:zero-allocation-hashing:0.9:*:*:*:*:*:*:*",
      "group": "net.openhft",
      "name": "zero-allocation-hashing",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero-allocation-hashing:zero_allocation_hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero_allocation_hashing:zero-allocation-hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero_allocation_hashing:zero_allocation_hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero-allocation:zero-allocation-hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero-allocation:zero_allocation_hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero_allocation:zero-allocation-hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero_allocation:zero_allocation_hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openhft:zero-allocation-hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:openhft:zero_allocation_hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero:zero-allocation-hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zero:zero_allocation_hashing:0.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-hadoop-1.12.0.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "zero-allocation-hashing"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "net.openhft"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/parquet-hadoop-1.12.0.jar:net.openhft:zero-allocation-hashing"
        }
      ],
      "purl": "pkg:maven/net.openhft/zero-allocation-hashing@0.9",
      "type": "library",
      "version": "0.9"
    },
    {
      "bom-ref": "pkg:rpm/rhel/zip@3.0-23.el8?arch=x86_64&upstream=zip-3.0-23.el8.src.rpm&distro=rhel-8.9&package-id=9b2f773804509fa3",
      "cpe": "cpe:2.3:a:redhat:zip:3.0-23.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "name": "zip",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zip:zip:3.0-23.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "23.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "842877"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "zip-3.0-23.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/zip@3.0-23.el8?arch=x86_64&upstream=zip-3.0-23.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "3.0-23.el8"
    },
    {
      "bom-ref": "pkg:maven/com.flipkart.zjsonpatch/zjsonpatch@0.4.11?package-id=6199ebbcdb6e1f21",
      "cpe": "cpe:2.3:a:zjsonpatch:zjsonpatch:0.4.11:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c5500b069122750c79d43167a8bcafd8458747fe"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "com.flipkart.zjsonpatch",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "zjsonpatch",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:flipkart:zjsonpatch:0.4.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/zjsonpatch-0.4.11.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "zjsonpatch"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.flipkart.zjsonpatch"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kubernetes-extensions/zjsonpatch-0.4.11.jar"
        }
      ],
      "purl": "pkg:maven/com.flipkart.zjsonpatch/zjsonpatch@0.4.11",
      "type": "library",
      "version": "0.4.11"
    },
    {
      "bom-ref": "pkg:maven/com.101tec.zkclient/zkclient@0.10?package-id=98498732d49a79ee",
      "cpe": "cpe:2.3:a:zkclient:zkclient:0.10:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c54d4b5a5e89af75a80b6d5857400165ce5188d0"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "name": "zkclient",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:101tec:zkclient:0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/zkclient-0.10.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-ranger-security/zkclient-0.10.jar"
        }
      ],
      "purl": "pkg:maven/com.101tec.zkclient/zkclient@0.10",
      "type": "library",
      "version": "0.10"
    },
    {
      "bom-ref": "pkg:rpm/rhel/zlib@1.2.11-25.el8?arch=x86_64&upstream=zlib-1.2.11-25.el8.src.rpm&distro=rhel-8.9&package-id=27a8eb8d606ddc3b",
      "cpe": "cpe:2.3:a:redhat:zlib:1.2.11-25.el8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "zlib and Boost"
          }
        }
      ],
      "name": "zlib",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "rpm-db-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "rpm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "rpm-db-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zlib:zlib:1.2.11-25.el8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:137b00fe27640d15c94fecf1a60d83911daad61ee3e30f377c00861f741c0d1d"
        },
        {
          "name": "syft:location:0:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:1:layerID",
          "value": "sha256:47fec6f1a9291536e3cc7079eee29b495379346954765a22db896812f035f581"
        },
        {
          "name": "syft:location:1:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:2:layerID",
          "value": "sha256:602e35aaec3fc837bebcbb83cd2053ac2f251d5b1b940b4b72468890f87338cc"
        },
        {
          "name": "syft:location:2:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:3:layerID",
          "value": "sha256:8f42ad26ccdae7ec04dac9501e3c011a88c8663559699974ecf1697999914f0d"
        },
        {
          "name": "syft:location:3:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:location:4:layerID",
          "value": "sha256:d833376d1948ec2fc4fff0fa4d75d19d726fda3446c553388183e531de6d94e0"
        },
        {
          "name": "syft:location:4:path",
          "value": "/var/lib/rpm/Packages"
        },
        {
          "name": "syft:metadata:release",
          "value": "25.el8"
        },
        {
          "name": "syft:metadata:size",
          "value": "199975"
        },
        {
          "name": "syft:metadata:sourceRpm",
          "value": "zlib-1.2.11-25.el8.src.rpm"
        }
      ],
      "publisher": "Red Hat, Inc.",
      "purl": "pkg:rpm/rhel/zlib@1.2.11-25.el8?arch=x86_64&upstream=zlib-1.2.11-25.el8.src.rpm&distro=rhel-8.9",
      "type": "library",
      "version": "1.2.11-25.el8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.10?package-id=a822be6c75c4e42c",
      "cpe": "cpe:2.3:a:apache:zookeeper:3.5.10:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e6c13d4da56d3ab9eb7b140d8522681a053d23e4"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.zookeeper",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "zookeeper",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/zookeeper-3.5.10.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "zookeeper"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.zookeeper"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/zookeeper-3.5.10.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.10",
      "type": "library",
      "version": "3.5.10"
    },
    {
      "bom-ref": "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.5.10?package-id=3b9191b9c570a7a1",
      "cpe": "cpe:2.3:a:apache:zookeeper-jute:3.5.10:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a47bdd09007f2a6b087760590d5507b610781fb6"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "group": "org.apache.zookeeper",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "zookeeper-jute",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:zookeeper_jute:3.5.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:zookeeper:3.5.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/zookeeper-jute-3.5.10.jar"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "zookeeper-jute"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.zookeeper"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/zookeeper-jute-3.5.10.jar"
        }
      ],
      "purl": "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.5.10",
      "type": "library",
      "version": "3.5.10"
    },
    {
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.2-3?package-id=a404acb68077fb63",
      "cpe": "cpe:2.3:a:zstd-jni:zstd-jni:1.5.2-3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f52de0603f31798455e48bd90e10a8f888dd6d93"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "https://opensource.org/licenses/BSD-2-Clause;description=BSD 2-Clause License"
          }
        }
      ],
      "name": "zstd-jni",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/zstd-jni-1.5.2-3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-avro-extensions/zstd-jni-1.5.2-3.jar"
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.2-3",
      "type": "library",
      "version": "1.5.2-3"
    },
    {
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.2-3?package-id=53ba7ffc5c62aff9",
      "cpe": "cpe:2.3:a:zstd-jni:zstd-jni:1.5.2-3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f52de0603f31798455e48bd90e10a8f888dd6d93"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "https://opensource.org/licenses/BSD-2-Clause;description=BSD 2-Clause License"
          }
        }
      ],
      "name": "zstd-jni",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/zstd-jni-1.5.2-3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-extraction-namespace/zstd-jni-1.5.2-3.jar"
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.2-3",
      "type": "library",
      "version": "1.5.2-3"
    },
    {
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.2-3?package-id=ea32d37ef927f11f",
      "cpe": "cpe:2.3:a:zstd-jni:zstd-jni:1.5.2-3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f52de0603f31798455e48bd90e10a8f888dd6d93"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "https://opensource.org/licenses/BSD-2-Clause;description=BSD 2-Clause License"
          }
        }
      ],
      "name": "zstd-jni",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-indexing-service/zstd-jni-1.5.2-3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-kafka-indexing-service/zstd-jni-1.5.2-3.jar"
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.2-3",
      "type": "library",
      "version": "1.5.2-3"
    },
    {
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.2-3?package-id=3600e8f6536f15bd",
      "cpe": "cpe:2.3:a:zstd-jni:zstd-jni:1.5.2-3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f52de0603f31798455e48bd90e10a8f888dd6d93"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "https://opensource.org/licenses/BSD-2-Clause;description=BSD 2-Clause License"
          }
        }
      ],
      "name": "zstd-jni",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/zstd-jni-1.5.2-3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/extensions/druid-parquet-extensions/zstd-jni-1.5.2-3.jar"
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.2-3",
      "type": "library",
      "version": "1.5.2-3"
    },
    {
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.2-3?package-id=b83f1c07feebc851",
      "cpe": "cpe:2.3:a:zstd-jni:zstd-jni:1.5.2-3:*:*:*:*:*:*:*",
      "externalReferences": [
        {
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f52de0603f31798455e48bd90e10a8f888dd6d93"
            }
          ],
          "type": "build-meta",
          "url": ""
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "https://opensource.org/licenses/BSD-2-Clause;description=BSD 2-Clause License"
          }
        }
      ],
      "name": "zstd-jni",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-archive-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd-jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd_jni:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:luben:1.5.2-3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:f77b0765981034cc2f94d351c28e46e871b4538c02a2a7079bb131e77ba6da91"
        },
        {
          "name": "syft:location:0:path",
          "value": "/stackable/apache-druid-26.0.0/lib/zstd-jni-1.5.2-3.jar"
        },
        {
          "name": "syft:metadata:virtualPath",
          "value": "/stackable/apache-druid-26.0.0/lib/zstd-jni-1.5.2-3.jar"
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.2-3",
      "type": "library",
      "version": "1.5.2-3"
    },
    {
      "cpe": "cpe:2.3:o:redhat:enterprise_linux:8:*:baseos:*:*:*:*:*",
      "description": "Red Hat Enterprise Linux 8.9 (Ootpa)",
      "externalReferences": [
        {
          "type": "issue-tracker",
          "url": "https://bugzilla.redhat.com/"
        },
        {
          "type": "website",
          "url": "https://www.redhat.com/"
        }
      ],
      "name": "rhel",
      "properties": [
        {
          "name": "syft:distro:id",
          "value": "rhel"
        },
        {
          "name": "syft:distro:idLike:0",
          "value": "fedora"
        },
        {
          "name": "syft:distro:prettyName",
          "value": "Red Hat Enterprise Linux 8.9 (Ootpa)"
        },
        {
          "name": "syft:distro:versionID",
          "value": "8.9"
        }
      ],
      "swid": {
        "name": "rhel",
        "tagId": "rhel",
        "version": "8.9"
      },
      "type": "operating-system",
      "version": "8.9"
    }
  ],
  "metadata": {
    "component": {
      "author": "Stackable GmbH",
      "bom-ref": "95e0b7ec4adb1a0f",
      "description": "Apache Druid. This image is deployed by the Stackable Operator for Apache Druid.",
      "name": "druid",
      "publisher": "Stackable GmbH",
      "purl": "pkg:docker/sdp/druid@sha256:ef1f300e6f33fa527c8f74765d64e23bb216ad8df7dba982a76e62b3723dc370?repository_url=oci.stackable.tech",
      "supplier": {
        "name": "Stackable GmbH",
        "url": [
          "https://stackable.tech/"
        ]
      },
      "type": "container",
      "version": "26.0.0-stackable24.3.0"
    },
    "properties": [
      {
        "name": "syft:image:labels:architecture",
        "value": "x86_64"
      },
      {
        "name": "syft:image:labels:build-date",
        "value": "2023-11-01T03:17:36"
      },
      {
        "name": "syft:image:labels:com.redhat.component",
        "value": "ubi8-minimal-container"
      },
      {
        "name": "syft:image:labels:com.redhat.license_terms",
        "value": "https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"
      },
      {
        "name": "syft:image:labels:description",
        "value": "This image is deployed by the Stackable Operator for Apache Druid."
      },
      {
        "name": "syft:image:labels:distribution-scope",
        "value": "public"
      },
      {
        "name": "syft:image:labels:io.buildah.version",
        "value": "1.29.0"
      },
      {
        "name": "syft:image:labels:io.k8s.description",
        "value": "The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."
      },
      {
        "name": "syft:image:labels:io.k8s.display-name",
        "value": "Red Hat Universal Base Image 8 Minimal"
      },
      {
        "name": "syft:image:labels:io.openshift.tags",
        "value": "minimal rhel8"
      },
      {
        "name": "syft:image:labels:maintainer",
        "value": "info@stackable.tech"
      },
      {
        "name": "syft:image:labels:name",
        "value": "Apache Druid"
      },
      {
        "name": "syft:image:labels:release",
        "value": "24.3.0"
      },
      {
        "name": "syft:image:labels:summary",
        "value": "The Stackable image for Apache Druid."
      },
      {
        "name": "syft:image:labels:url",
        "value": "https://access.redhat.com/containers/#/registry.access.redhat.com/ubi8-minimal/images/8.9-1029"
      },
      {
        "name": "syft:image:labels:vcs-ref",
        "value": "7e7670a8c8c9a3be83beaa2787f3703b404d4a1d"
      },
      {
        "name": "syft:image:labels:vcs-type",
        "value": "git"
      },
      {
        "name": "syft:image:labels:vendor",
        "value": "Stackable GmbH"
      },
      {
        "name": "syft:image:labels:version",
        "value": "26.0.0"
      }
    ],
    "timestamp": "2024-03-20T09:40:33Z",
    "tools": {
      "components": [
        {
          "author": "anchore",
          "name": "syft",
          "type": "application",
          "version": "0.101.1"
        }
      ]
    }
  },
  "serialNumber": "urn:uuid:dd97e830-d70f-4bf2-afd3-2ae5554fa183",
  "specVersion": "1.5",
  "version": 1
}