{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "components": [
    {
      "bom-ref": "pkg:npm/%40apache-fory/core@1.7.8?package-id=b46024928f945dfa",
      "cpe": "cpe:2.3:a:\\@apache-fory\\/core:\\@apache-fory\\/core:1.7.8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "@apache-fory/core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@apache-fory\\/core:\\@apache_fory\\/core:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@apache_fory\\/core:\\@apache-fory\\/core:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@apache_fory\\/core:\\@apache_fory\\/core:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@apache:\\@apache-fory\\/core:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@apache:\\@apache_fory\\/core:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/%40apache-fory/core@1.7.8",
      "type": "library",
      "version": "1.7.8"
    },
    {
      "bom-ref": "pkg:npm/%40apache-fory/core?package-id=dcf44e08f9b056f9",
      "cpe": "cpe:2.3:a:\\@apache-fory\\/core:\\@apache-fory\\/core:*:*:*:*:*:*:*:*",
      "name": "@apache-fory/core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@apache-fory\\/core:\\@apache_fory\\/core:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@apache_fory\\/core:\\@apache-fory\\/core:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@apache_fory\\/core:\\@apache_fory\\/core:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@apache:\\@apache-fory\\/core:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@apache:\\@apache_fory\\/core:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/%40apache-fory/core",
      "type": "library",
      "version": "UNKNOWN"
    },
    {
      "bom-ref": "pkg:npm/%40apache-fory/hps@1.7.8?package-id=e02958b77ab128ab",
      "cpe": "cpe:2.3:a:\\@apache-fory\\/hps:\\@apache-fory\\/hps:1.7.8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "@apache-fory/hps",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@apache-fory\\/hps:\\@apache_fory\\/hps:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@apache_fory\\/hps:\\@apache-fory\\/hps:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@apache_fory\\/hps:\\@apache_fory\\/hps:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@apache:\\@apache-fory\\/hps:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@apache:\\@apache_fory\\/hps:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/%40apache-fory/hps@1.7.8",
      "type": "library",
      "version": "1.7.8"
    },
    {
      "bom-ref": "pkg:npm/%40apache-fory/hps?package-id=058049edfbdef115",
      "cpe": "cpe:2.3:a:\\@apache-fory\\/hps:\\@apache-fory\\/hps:*:*:*:*:*:*:*:*",
      "name": "@apache-fory/hps",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@apache-fory\\/hps:\\@apache_fory\\/hps:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@apache_fory\\/hps:\\@apache-fory\\/hps:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@apache_fory\\/hps:\\@apache_fory\\/hps:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@apache:\\@apache-fory\\/hps:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@apache:\\@apache_fory\\/hps:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/%40apache-fory/hps",
      "type": "library",
      "version": "UNKNOWN"
    },
    {
      "bom-ref": "pkg:npm/%40isaacs/fs-minipass@4.0.1?package-id=42d1b408f6c030e0",
      "cpe": "cpe:2.3:a:\\@isaacs\\/fs-minipass:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "name": "@isaacs/fs-minipass",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs-minipass:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs_minipass:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs_minipass:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:\\@isaacs\\/fs:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/%40isaacs/fs-minipass@4.0.1",
      "type": "library",
      "version": "4.0.1"
    },
    {
      "bom-ref": "pkg:github/swatinem/rust-cache@v2?package-id=c08d3932dd3152c5",
      "cpe": "cpe:2.3:a:Swatinem\\/rust-cache:Swatinem\\/rust-cache:v2:*:*:*:*:*:*:*",
      "name": "Swatinem/rust-cache",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Swatinem\\/rust-cache:Swatinem\\/rust_cache:v2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Swatinem\\/rust_cache:Swatinem\\/rust-cache:v2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Swatinem\\/rust_cache:Swatinem\\/rust_cache:v2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Swatinem\\/rust:Swatinem\\/rust-cache:v2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Swatinem\\/rust:Swatinem\\/rust_cache:v2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/ci.yml"
        }
      ],
      "purl": "pkg:github/Swatinem/rust-cache@v2",
      "type": "library",
      "version": "v2"
    },
    {
      "bom-ref": "pkg:npm/abbrev@4.0.0?package-id=56a71347558e307d",
      "cpe": "cpe:2.3:a:abbrev:abbrev:4.0.0:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "name": "abbrev",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/abbrev@4.0.0",
      "type": "library",
      "version": "4.0.0"
    },
    {
      "bom-ref": "pkg:github/actions/cache@v6?package-id=3ccf52a699500ebc",
      "cpe": "cpe:2.3:a:actions\\/cache:actions\\/cache:v6:*:*:*:*:*:*:*",
      "name": "actions/cache",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/ci.yml"
        }
      ],
      "purl": "pkg:github/actions/cache@v6",
      "type": "library",
      "version": "v6"
    },
    {
      "bom-ref": "pkg:github/actions/checkout@v7.0.1?package-id=ecdf01b74859222d",
      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*",
      "name": "actions/checkout",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/asf-allowlist.yml"
        }
      ],
      "purl": "pkg:github/actions/checkout@v7.0.1",
      "type": "library",
      "version": "v7.0.1"
    },
    {
      "bom-ref": "pkg:github/actions/checkout@v7.0.1?package-id=f8cbf6e4ee6e2fff",
      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*",
      "name": "actions/checkout",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/build-containerized-pr.yml"
        }
      ],
      "purl": "pkg:github/actions/checkout@v7.0.1",
      "type": "library",
      "version": "v7.0.1"
    },
    {
      "bom-ref": "pkg:github/actions/checkout@v7.0.1?package-id=bf8b136d9039110e",
      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*",
      "name": "actions/checkout",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/build-containerized-release.yml"
        }
      ],
      "purl": "pkg:github/actions/checkout@v7.0.1",
      "type": "library",
      "version": "v7.0.1"
    },
    {
      "bom-ref": "pkg:github/actions/checkout@v7.0.1?package-id=e4c4ca4bd02e46d2",
      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*",
      "name": "actions/checkout",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/build-native-pr.yml"
        }
      ],
      "purl": "pkg:github/actions/checkout@v7.0.1",
      "type": "library",
      "version": "v7.0.1"
    },
    {
      "bom-ref": "pkg:github/actions/checkout@v7.0.1?package-id=c0cf34c0dcfec655",
      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*",
      "name": "actions/checkout",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/build-native-release.yml"
        }
      ],
      "purl": "pkg:github/actions/checkout@v7.0.1",
      "type": "library",
      "version": "v7.0.1"
    },
    {
      "bom-ref": "pkg:github/actions/checkout@v7.0.1?package-id=86139130ac7aa3d9",
      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*",
      "name": "actions/checkout",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/ci.yml"
        }
      ],
      "purl": "pkg:github/actions/checkout@v7.0.1",
      "type": "library",
      "version": "v7.0.1"
    },
    {
      "bom-ref": "pkg:github/actions/checkout@v7.0.1?package-id=167c4a2ef589123a",
      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*",
      "name": "actions/checkout",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/lint.yml"
        }
      ],
      "purl": "pkg:github/actions/checkout@v7.0.1",
      "type": "library",
      "version": "v7.0.1"
    },
    {
      "bom-ref": "pkg:github/actions/checkout@v7.0.1?package-id=1c23447269f4375a",
      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*",
      "name": "actions/checkout",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/release-compiler.yaml"
        }
      ],
      "purl": "pkg:github/actions/checkout@v7.0.1",
      "type": "library",
      "version": "v7.0.1"
    },
    {
      "bom-ref": "pkg:github/actions/checkout@v7.0.1?package-id=c635cf7c5eb3b32f",
      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*",
      "name": "actions/checkout",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/release-csharp.yaml"
        }
      ],
      "purl": "pkg:github/actions/checkout@v7.0.1",
      "type": "library",
      "version": "v7.0.1"
    },
    {
      "bom-ref": "pkg:github/actions/checkout@v7.0.1?package-id=3a08ab69784baab5",
      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*",
      "name": "actions/checkout",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/release-dart.yaml"
        }
      ],
      "purl": "pkg:github/actions/checkout@v7.0.1",
      "type": "library",
      "version": "v7.0.1"
    },
    {
      "bom-ref": "pkg:github/actions/checkout@v7.0.1?package-id=0928810e7b7d9c98",
      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*",
      "name": "actions/checkout",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/release-javascript.yaml"
        }
      ],
      "purl": "pkg:github/actions/checkout@v7.0.1",
      "type": "library",
      "version": "v7.0.1"
    },
    {
      "bom-ref": "pkg:github/actions/checkout@v7.0.1?package-id=369f99346126d9e3",
      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*",
      "name": "actions/checkout",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/release-jvm-snapshot.yaml"
        }
      ],
      "purl": "pkg:github/actions/checkout@v7.0.1",
      "type": "library",
      "version": "v7.0.1"
    },
    {
      "bom-ref": "pkg:github/actions/checkout@v7.0.1?package-id=077bcab07f64c4b6",
      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*",
      "name": "actions/checkout",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/release-rust.yaml"
        }
      ],
      "purl": "pkg:github/actions/checkout@v7.0.1",
      "type": "library",
      "version": "v7.0.1"
    },
    {
      "bom-ref": "pkg:github/actions/checkout@v7.0.1?package-id=b618001c0828484f",
      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*",
      "name": "actions/checkout",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/stage-release-candidate.yml"
        }
      ],
      "purl": "pkg:github/actions/checkout@v7.0.1",
      "type": "library",
      "version": "v7.0.1"
    },
    {
      "bom-ref": "pkg:github/actions/checkout@v7.0.1?package-id=17d0fd3c1356cbfb",
      "cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*",
      "name": "actions/checkout",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/sync.yml"
        }
      ],
      "purl": "pkg:github/actions/checkout@v7.0.1",
      "type": "library",
      "version": "v7.0.1"
    },
    {
      "bom-ref": "pkg:github/actions/download-artifact@v8?package-id=dfede64a8a9db31e",
      "cpe": "cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:v8:*:*:*:*:*:*:*",
      "name": "actions/download-artifact",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:v8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:v8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:v8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/download:actions\\/download-artifact:v8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/download:actions\\/download_artifact:v8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/build-native-pr.yml"
        }
      ],
      "purl": "pkg:github/actions/download-artifact@v8",
      "type": "library",
      "version": "v8"
    },
    {
      "bom-ref": "pkg:github/actions/download-artifact@v8?package-id=1c32647ffb59082f",
      "cpe": "cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:v8:*:*:*:*:*:*:*",
      "name": "actions/download-artifact",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:v8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:v8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:v8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/download:actions\\/download-artifact:v8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/download:actions\\/download_artifact:v8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/build-native-release.yml"
        }
      ],
      "purl": "pkg:github/actions/download-artifact@v8",
      "type": "library",
      "version": "v8"
    },
    {
      "bom-ref": "pkg:github/actions/download-artifact@v8?package-id=3587713585944a0b",
      "cpe": "cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:v8:*:*:*:*:*:*:*",
      "name": "actions/download-artifact",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:v8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:v8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:v8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/download:actions\\/download-artifact:v8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/download:actions\\/download_artifact:v8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/release-python.yaml"
        }
      ],
      "purl": "pkg:github/actions/download-artifact@v8",
      "type": "library",
      "version": "v8"
    },
    {
      "bom-ref": "pkg:github/actions/setup-dotnet@v6?package-id=34f6b07ee784e120",
      "cpe": "cpe:2.3:a:actions\\/setup-dotnet:actions\\/setup-dotnet:v6:*:*:*:*:*:*:*",
      "name": "actions/setup-dotnet",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup-dotnet:actions\\/setup_dotnet:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_dotnet:actions\\/setup-dotnet:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_dotnet:actions\\/setup_dotnet:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-dotnet:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_dotnet:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/ci.yml"
        }
      ],
      "purl": "pkg:github/actions/setup-dotnet@v6",
      "type": "library",
      "version": "v6"
    },
    {
      "bom-ref": "pkg:github/actions/setup-dotnet@v6?package-id=05c1290ee0eedad1",
      "cpe": "cpe:2.3:a:actions\\/setup-dotnet:actions\\/setup-dotnet:v6:*:*:*:*:*:*:*",
      "name": "actions/setup-dotnet",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup-dotnet:actions\\/setup_dotnet:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_dotnet:actions\\/setup-dotnet:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_dotnet:actions\\/setup_dotnet:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-dotnet:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_dotnet:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/release-csharp.yaml"
        }
      ],
      "purl": "pkg:github/actions/setup-dotnet@v6",
      "type": "library",
      "version": "v6"
    },
    {
      "bom-ref": "pkg:github/actions/setup-go@v7?package-id=1c4ae80ce213826a",
      "cpe": "cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7:*:*:*:*:*:*:*",
      "name": "actions/setup-go",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/ci.yml"
        }
      ],
      "purl": "pkg:github/actions/setup-go@v7",
      "type": "library",
      "version": "v7"
    },
    {
      "bom-ref": "pkg:github/actions/setup-java@v6?package-id=89efa96c5161cbb1",
      "cpe": "cpe:2.3:a:actions\\/setup-java:actions\\/setup-java:v6:*:*:*:*:*:*:*",
      "name": "actions/setup-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup-java:actions\\/setup_java:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_java:actions\\/setup-java:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_java:actions\\/setup_java:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-java:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_java:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/ci.yml"
        }
      ],
      "purl": "pkg:github/actions/setup-java@v6",
      "type": "library",
      "version": "v6"
    },
    {
      "bom-ref": "pkg:github/actions/setup-java@v6?package-id=c65ef600262c8443",
      "cpe": "cpe:2.3:a:actions\\/setup-java:actions\\/setup-java:v6:*:*:*:*:*:*:*",
      "name": "actions/setup-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup-java:actions\\/setup_java:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_java:actions\\/setup-java:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_java:actions\\/setup_java:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-java:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_java:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/release-jvm-snapshot.yaml"
        }
      ],
      "purl": "pkg:github/actions/setup-java@v6",
      "type": "library",
      "version": "v6"
    },
    {
      "bom-ref": "pkg:github/actions/setup-java@v6.1.0?package-id=8faabd9ed7a0b544",
      "cpe": "cpe:2.3:a:actions\\/setup-java:actions\\/setup-java:v6.1.0:*:*:*:*:*:*:*",
      "name": "actions/setup-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup-java:actions\\/setup_java:v6.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_java:actions\\/setup-java:v6.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_java:actions\\/setup_java:v6.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-java:v6.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_java:v6.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/stage-release-candidate.yml"
        }
      ],
      "purl": "pkg:github/actions/setup-java@v6.1.0",
      "type": "library",
      "version": "v6.1.0"
    },
    {
      "bom-ref": "pkg:github/actions/setup-node@v7?package-id=cd42f376cb6074c6",
      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v7:*:*:*:*:*:*:*",
      "name": "actions/setup-node",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/ci.yml"
        }
      ],
      "purl": "pkg:github/actions/setup-node@v7",
      "type": "library",
      "version": "v7"
    },
    {
      "bom-ref": "pkg:github/actions/setup-node@v7?package-id=78372e046f67058d",
      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v7:*:*:*:*:*:*:*",
      "name": "actions/setup-node",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/lint.yml"
        }
      ],
      "purl": "pkg:github/actions/setup-node@v7",
      "type": "library",
      "version": "v7"
    },
    {
      "bom-ref": "pkg:github/actions/setup-node@v7?package-id=aa8bddc9fa29742b",
      "cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v7:*:*:*:*:*:*:*",
      "name": "actions/setup-node",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/release-javascript.yaml"
        }
      ],
      "purl": "pkg:github/actions/setup-node@v7",
      "type": "library",
      "version": "v7"
    },
    {
      "bom-ref": "pkg:github/actions/setup-python@v7.1.0?package-id=a963ad4a9ac0405f",
      "cpe": "cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v7.1.0:*:*:*:*:*:*:*",
      "name": "actions/setup-python",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/build-native-pr.yml"
        }
      ],
      "purl": "pkg:github/actions/setup-python@v7.1.0",
      "type": "library",
      "version": "v7.1.0"
    },
    {
      "bom-ref": "pkg:github/actions/setup-python@v7.1.0?package-id=8a5507f1d66010f5",
      "cpe": "cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v7.1.0:*:*:*:*:*:*:*",
      "name": "actions/setup-python",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/build-native-release.yml"
        }
      ],
      "purl": "pkg:github/actions/setup-python@v7.1.0",
      "type": "library",
      "version": "v7.1.0"
    },
    {
      "bom-ref": "pkg:github/actions/setup-python@v7.1.0?package-id=8550f1f6ef87e37a",
      "cpe": "cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v7.1.0:*:*:*:*:*:*:*",
      "name": "actions/setup-python",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/ci.yml"
        }
      ],
      "purl": "pkg:github/actions/setup-python@v7.1.0",
      "type": "library",
      "version": "v7.1.0"
    },
    {
      "bom-ref": "pkg:github/actions/setup-python@v7.1.0?package-id=19431dd64311c653",
      "cpe": "cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v7.1.0:*:*:*:*:*:*:*",
      "name": "actions/setup-python",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/lint.yml"
        }
      ],
      "purl": "pkg:github/actions/setup-python@v7.1.0",
      "type": "library",
      "version": "v7.1.0"
    },
    {
      "bom-ref": "pkg:github/actions/setup-python@v7.1.0?package-id=fd98649f91a28932",
      "cpe": "cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v7.1.0:*:*:*:*:*:*:*",
      "name": "actions/setup-python",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/release-compiler.yaml"
        }
      ],
      "purl": "pkg:github/actions/setup-python@v7.1.0",
      "type": "library",
      "version": "v7.1.0"
    },
    {
      "bom-ref": "pkg:github/actions/setup-python@v7.1.0?package-id=6de9b18caff69a9d",
      "cpe": "cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v7.1.0:*:*:*:*:*:*:*",
      "name": "actions/setup-python",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/release-csharp.yaml"
        }
      ],
      "purl": "pkg:github/actions/setup-python@v7.1.0",
      "type": "library",
      "version": "v7.1.0"
    },
    {
      "bom-ref": "pkg:github/actions/setup-python@v7.1.0?package-id=3171abf71c0c655a",
      "cpe": "cpe:2.3:a:actions\\/setup-python:actions\\/setup-python:v7.1.0:*:*:*:*:*:*:*",
      "name": "actions/setup-python",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup-python:actions\\/setup_python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_python:actions\\/setup-python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup_python:actions\\/setup_python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup-python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/setup:actions\\/setup_python:v7.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/release-dart.yaml"
        }
      ],
      "purl": "pkg:github/actions/setup-python@v7.1.0",
      "type": "library",
      "version": "v7.1.0"
    },
    {
      "bom-ref": "pkg:github/actions/upload-artifact@v7?package-id=4744a318c3f9d9b6",
      "cpe": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7:*:*:*:*:*:*:*",
      "name": "actions/upload-artifact",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/build-containerized-pr.yml"
        }
      ],
      "purl": "pkg:github/actions/upload-artifact@v7",
      "type": "library",
      "version": "v7"
    },
    {
      "bom-ref": "pkg:github/actions/upload-artifact@v7?package-id=faed79c33bbc144a",
      "cpe": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7:*:*:*:*:*:*:*",
      "name": "actions/upload-artifact",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/build-containerized-release.yml"
        }
      ],
      "purl": "pkg:github/actions/upload-artifact@v7",
      "type": "library",
      "version": "v7"
    },
    {
      "bom-ref": "pkg:github/actions/upload-artifact@v7?package-id=9cf7121b06c65c11",
      "cpe": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7:*:*:*:*:*:*:*",
      "name": "actions/upload-artifact",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/build-native-pr.yml"
        }
      ],
      "purl": "pkg:github/actions/upload-artifact@v7",
      "type": "library",
      "version": "v7"
    },
    {
      "bom-ref": "pkg:github/actions/upload-artifact@v7?package-id=c65f05cb6387b8f0",
      "cpe": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7:*:*:*:*:*:*:*",
      "name": "actions/upload-artifact",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/build-native-release.yml"
        }
      ],
      "purl": "pkg:github/actions/upload-artifact@v7",
      "type": "library",
      "version": "v7"
    },
    {
      "bom-ref": "pkg:github/actions/upload-artifact@v7?package-id=1a04d6ded5f2e2e2",
      "cpe": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7:*:*:*:*:*:*:*",
      "name": "actions/upload-artifact",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/ci.yml"
        }
      ],
      "purl": "pkg:github/actions/upload-artifact@v7",
      "type": "library",
      "version": "v7"
    },
    {
      "bom-ref": "pkg:github/amannn/action-semantic-pull-request@v6?package-id=c7fba18ee5cbca22",
      "cpe": "cpe:2.3:a:amannn\\/action-semantic-pull-request:amannn\\/action-semantic-pull-request:v6:*:*:*:*:*:*:*",
      "name": "amannn/action-semantic-pull-request",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amannn\\/action-semantic-pull-request:amannn\\/action_semantic_pull_request:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amannn\\/action_semantic_pull_request:amannn\\/action-semantic-pull-request:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amannn\\/action_semantic_pull_request:amannn\\/action_semantic_pull_request:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amannn\\/action-semantic-pull:amannn\\/action-semantic-pull-request:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amannn\\/action-semantic-pull:amannn\\/action_semantic_pull_request:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amannn\\/action_semantic_pull:amannn\\/action-semantic-pull-request:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amannn\\/action_semantic_pull:amannn\\/action_semantic_pull_request:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amannn\\/action-semantic:amannn\\/action-semantic-pull-request:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amannn\\/action-semantic:amannn\\/action_semantic_pull_request:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amannn\\/action_semantic:amannn\\/action-semantic-pull-request:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amannn\\/action_semantic:amannn\\/action_semantic_pull_request:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amannn\\/action:amannn\\/action-semantic-pull-request:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:amannn\\/action:amannn\\/action_semantic_pull_request:v6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/pr-lint.yml"
        }
      ],
      "purl": "pkg:github/amannn/action-semantic-pull-request@v6",
      "type": "library",
      "version": "v6"
    },
    {
      "bom-ref": "pkg:github/apache/infrastructure-actions@b41ca1cbe4d8a214dea50788a0e037184a69ad3f?package-id=64e9707f825ebb28#allowlist-check",
      "cpe": "cpe:2.3:a:apache\\/infrastructure-actions\\/allowlist-check:apache\\/infrastructure-actions\\/allowlist-check:b41ca1cbe4d8a214dea50788a0e037184a69ad3f:*:*:*:*:*:*:*",
      "name": "apache/infrastructure-actions/allowlist-check",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/infrastructure-actions\\/allowlist-check:apache\\/infrastructure_actions\\/allowlist_check:b41ca1cbe4d8a214dea50788a0e037184a69ad3f:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/infrastructure_actions\\/allowlist_check:apache\\/infrastructure-actions\\/allowlist-check:b41ca1cbe4d8a214dea50788a0e037184a69ad3f:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/infrastructure_actions\\/allowlist_check:apache\\/infrastructure_actions\\/allowlist_check:b41ca1cbe4d8a214dea50788a0e037184a69ad3f:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/infrastructure-actions\\/allowlist:apache\\/infrastructure-actions\\/allowlist-check:b41ca1cbe4d8a214dea50788a0e037184a69ad3f:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/infrastructure-actions\\/allowlist:apache\\/infrastructure_actions\\/allowlist_check:b41ca1cbe4d8a214dea50788a0e037184a69ad3f:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/infrastructure_actions\\/allowlist:apache\\/infrastructure-actions\\/allowlist-check:b41ca1cbe4d8a214dea50788a0e037184a69ad3f:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/infrastructure_actions\\/allowlist:apache\\/infrastructure_actions\\/allowlist_check:b41ca1cbe4d8a214dea50788a0e037184a69ad3f:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/infrastructure:apache\\/infrastructure-actions\\/allowlist-check:b41ca1cbe4d8a214dea50788a0e037184a69ad3f:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/infrastructure:apache\\/infrastructure_actions\\/allowlist_check:b41ca1cbe4d8a214dea50788a0e037184a69ad3f:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/asf-allowlist.yml"
        }
      ],
      "purl": "pkg:github/apache/infrastructure-actions@b41ca1cbe4d8a214dea50788a0e037184a69ad3f#allowlist-check",
      "type": "library",
      "version": "b41ca1cbe4d8a214dea50788a0e037184a69ad3f"
    },
    {
      "bom-ref": "pkg:github/apache/tooling-actions@43a38c48536aaf8f29c58aed22d7ac9f170eced7?package-id=d6a62e58de2c9fd3#upload-to-atr",
      "cpe": "cpe:2.3:a:apache\\/tooling-actions\\/upload-to-atr:apache\\/tooling-actions\\/upload-to-atr:43a38c48536aaf8f29c58aed22d7ac9f170eced7:*:*:*:*:*:*:*",
      "name": "apache/tooling-actions/upload-to-atr",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/tooling-actions\\/upload-to-atr:apache\\/tooling_actions\\/upload_to_atr:43a38c48536aaf8f29c58aed22d7ac9f170eced7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/tooling_actions\\/upload_to_atr:apache\\/tooling-actions\\/upload-to-atr:43a38c48536aaf8f29c58aed22d7ac9f170eced7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/tooling_actions\\/upload_to_atr:apache\\/tooling_actions\\/upload_to_atr:43a38c48536aaf8f29c58aed22d7ac9f170eced7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/tooling-actions\\/upload-to:apache\\/tooling-actions\\/upload-to-atr:43a38c48536aaf8f29c58aed22d7ac9f170eced7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/tooling-actions\\/upload-to:apache\\/tooling_actions\\/upload_to_atr:43a38c48536aaf8f29c58aed22d7ac9f170eced7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/tooling_actions\\/upload_to:apache\\/tooling-actions\\/upload-to-atr:43a38c48536aaf8f29c58aed22d7ac9f170eced7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/tooling_actions\\/upload_to:apache\\/tooling_actions\\/upload_to_atr:43a38c48536aaf8f29c58aed22d7ac9f170eced7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/tooling-actions\\/upload:apache\\/tooling-actions\\/upload-to-atr:43a38c48536aaf8f29c58aed22d7ac9f170eced7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/tooling-actions\\/upload:apache\\/tooling_actions\\/upload_to_atr:43a38c48536aaf8f29c58aed22d7ac9f170eced7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/tooling_actions\\/upload:apache\\/tooling-actions\\/upload-to-atr:43a38c48536aaf8f29c58aed22d7ac9f170eced7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/tooling_actions\\/upload:apache\\/tooling_actions\\/upload_to_atr:43a38c48536aaf8f29c58aed22d7ac9f170eced7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/tooling:apache\\/tooling-actions\\/upload-to-atr:43a38c48536aaf8f29c58aed22d7ac9f170eced7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache\\/tooling:apache\\/tooling_actions\\/upload_to_atr:43a38c48536aaf8f29c58aed22d7ac9f170eced7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/stage-release-candidate.yml"
        }
      ],
      "purl": "pkg:github/apache/tooling-actions@43a38c48536aaf8f29c58aed22d7ac9f170eced7#upload-to-atr",
      "type": "library",
      "version": "43a38c48536aaf8f29c58aed22d7ac9f170eced7"
    },
    {
      "bom-ref": "pkg:maven/org.apache.arrow/arrow-memory-core@18.3.0?package-id=a6817dd6d11cada9",
      "cpe": "cpe:2.3:a:apache:arrow-memory-core:18.3.0:*:*:*:*:*:*:*",
      "group": "org.apache.arrow",
      "name": "arrow-memory-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:arrow_memory_core:18.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:arrow:18.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-format/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "arrow-memory-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.arrow"
        }
      ],
      "purl": "pkg:maven/org.apache.arrow/arrow-memory-core@18.3.0",
      "type": "library",
      "version": "18.3.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.arrow/arrow-memory-unsafe@18.3.0?package-id=c55a6a7dd936f1fd",
      "cpe": "cpe:2.3:a:apache:arrow-memory-unsafe:18.3.0:*:*:*:*:*:*:*",
      "group": "org.apache.arrow",
      "name": "arrow-memory-unsafe",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:arrow_memory_unsafe:18.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:arrow:18.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-format/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "arrow-memory-unsafe"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.arrow"
        }
      ],
      "purl": "pkg:maven/org.apache.arrow/arrow-memory-unsafe@18.3.0",
      "type": "library",
      "version": "18.3.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.arrow/arrow-vector@18.3.0?package-id=82f2371af43b8769",
      "cpe": "cpe:2.3:a:apache:arrow-vector:18.3.0:*:*:*:*:*:*:*",
      "group": "org.apache.arrow",
      "name": "arrow-vector",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:arrow_vector:18.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:arrow:18.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-format/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "arrow-vector"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.arrow"
        }
      ],
      "purl": "pkg:maven/org.apache.arrow/arrow-vector@18.3.0",
      "type": "library",
      "version": "18.3.0"
    },
    {
      "bom-ref": "pkg:github/bazel-contrib/setup-bazel@0.19.1?package-id=cab81bdfd106b645",
      "cpe": "cpe:2.3:a:bazel-contrib\\/setup-bazel:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*",
      "name": "bazel-contrib/setup-bazel",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel-contrib\\/setup-bazel:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel_contrib\\/setup_bazel:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel_contrib\\/setup_bazel:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel-contrib\\/setup:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel-contrib\\/setup:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel_contrib\\/setup:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel_contrib\\/setup:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/build-containerized-pr.yml"
        }
      ],
      "purl": "pkg:github/bazel-contrib/setup-bazel@0.19.1",
      "type": "library",
      "version": "0.19.1"
    },
    {
      "bom-ref": "pkg:github/bazel-contrib/setup-bazel@0.19.1?package-id=6cca159d91c34c15",
      "cpe": "cpe:2.3:a:bazel-contrib\\/setup-bazel:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*",
      "name": "bazel-contrib/setup-bazel",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel-contrib\\/setup-bazel:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel_contrib\\/setup_bazel:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel_contrib\\/setup_bazel:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel-contrib\\/setup:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel-contrib\\/setup:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel_contrib\\/setup:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel_contrib\\/setup:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/build-containerized-release.yml"
        }
      ],
      "purl": "pkg:github/bazel-contrib/setup-bazel@0.19.1",
      "type": "library",
      "version": "0.19.1"
    },
    {
      "bom-ref": "pkg:github/bazel-contrib/setup-bazel@0.19.1?package-id=e872a35b55e9b4f5",
      "cpe": "cpe:2.3:a:bazel-contrib\\/setup-bazel:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*",
      "name": "bazel-contrib/setup-bazel",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel-contrib\\/setup-bazel:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel_contrib\\/setup_bazel:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel_contrib\\/setup_bazel:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel-contrib\\/setup:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel-contrib\\/setup:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel_contrib\\/setup:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel_contrib\\/setup:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/build-native-pr.yml"
        }
      ],
      "purl": "pkg:github/bazel-contrib/setup-bazel@0.19.1",
      "type": "library",
      "version": "0.19.1"
    },
    {
      "bom-ref": "pkg:github/bazel-contrib/setup-bazel@0.19.1?package-id=de9d91d7c450a602",
      "cpe": "cpe:2.3:a:bazel-contrib\\/setup-bazel:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*",
      "name": "bazel-contrib/setup-bazel",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel-contrib\\/setup-bazel:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel_contrib\\/setup_bazel:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel_contrib\\/setup_bazel:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel-contrib\\/setup:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel-contrib\\/setup:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel_contrib\\/setup:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel_contrib\\/setup:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/build-native-release.yml"
        }
      ],
      "purl": "pkg:github/bazel-contrib/setup-bazel@0.19.1",
      "type": "library",
      "version": "0.19.1"
    },
    {
      "bom-ref": "pkg:github/bazel-contrib/setup-bazel@0.19.1?package-id=ff870666fb2c6866",
      "cpe": "cpe:2.3:a:bazel-contrib\\/setup-bazel:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*",
      "name": "bazel-contrib/setup-bazel",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel-contrib\\/setup-bazel:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel_contrib\\/setup_bazel:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel_contrib\\/setup_bazel:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel-contrib\\/setup:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel-contrib\\/setup:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel_contrib\\/setup:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel_contrib\\/setup:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel:bazel-contrib\\/setup-bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:bazel:bazel_contrib\\/setup_bazel:0.19.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/ci.yml"
        }
      ],
      "purl": "pkg:github/bazel-contrib/setup-bazel@0.19.1",
      "type": "library",
      "version": "0.19.1"
    },
    {
      "bom-ref": "pkg:github/betahuhn/repo-file-sync-action@8b92be3375cf1d1b0cd579af488a9255572e4619?package-id=d5901414aa890163",
      "cpe": "cpe:2.3:a:betahuhn\\/repo-file-sync-action:betahuhn\\/repo-file-sync-action:8b92be3375cf1d1b0cd579af488a9255572e4619:*:*:*:*:*:*:*",
      "name": "betahuhn/repo-file-sync-action",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:betahuhn\\/repo-file-sync-action:betahuhn\\/repo_file_sync_action:8b92be3375cf1d1b0cd579af488a9255572e4619:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:betahuhn\\/repo_file_sync_action:betahuhn\\/repo-file-sync-action:8b92be3375cf1d1b0cd579af488a9255572e4619:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:betahuhn\\/repo_file_sync_action:betahuhn\\/repo_file_sync_action:8b92be3375cf1d1b0cd579af488a9255572e4619:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:betahuhn\\/repo-file-sync:betahuhn\\/repo-file-sync-action:8b92be3375cf1d1b0cd579af488a9255572e4619:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:betahuhn\\/repo-file-sync:betahuhn\\/repo_file_sync_action:8b92be3375cf1d1b0cd579af488a9255572e4619:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:betahuhn\\/repo_file_sync:betahuhn\\/repo-file-sync-action:8b92be3375cf1d1b0cd579af488a9255572e4619:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:betahuhn\\/repo_file_sync:betahuhn\\/repo_file_sync_action:8b92be3375cf1d1b0cd579af488a9255572e4619:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:betahuhn\\/repo-file:betahuhn\\/repo-file-sync-action:8b92be3375cf1d1b0cd579af488a9255572e4619:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:betahuhn\\/repo-file:betahuhn\\/repo_file_sync_action:8b92be3375cf1d1b0cd579af488a9255572e4619:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:betahuhn\\/repo_file:betahuhn\\/repo-file-sync-action:8b92be3375cf1d1b0cd579af488a9255572e4619:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:betahuhn\\/repo_file:betahuhn\\/repo_file_sync_action:8b92be3375cf1d1b0cd579af488a9255572e4619:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:betahuhn\\/repo:betahuhn\\/repo-file-sync-action:8b92be3375cf1d1b0cd579af488a9255572e4619:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:betahuhn\\/repo:betahuhn\\/repo_file_sync_action:8b92be3375cf1d1b0cd579af488a9255572e4619:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/sync.yml"
        }
      ],
      "purl": "pkg:github/betahuhn/repo-file-sync-action@8b92be3375cf1d1b0cd579af488a9255572e4619",
      "type": "library",
      "version": "8b92be3375cf1d1b0cd579af488a9255572e4619"
    },
    {
      "bom-ref": "pkg:npm/bindings@1.2.1?package-id=31033b818af73152",
      "cpe": "cpe:2.3:a:bindings:bindings:1.2.1:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "bindings",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/bindings@1.2.1",
      "type": "library",
      "version": "1.2.1"
    },
    {
      "bom-ref": "pkg:npm/chownr@3.0.0?package-id=8b3aa59475f01435",
      "cpe": "cpe:2.3:a:chownr:chownr:3.0.0:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "name": "chownr",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/chownr@3.0.0",
      "type": "library",
      "version": "3.0.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.18.0?package-id=3c323a7b18e64ba2",
      "cpe": "cpe:2.3:a:apache:commons-lang3:3.18.0:*:*:*:*:*:*:*",
      "group": "org.apache.commons",
      "name": "commons-lang3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons_lang3:3.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:commons:3.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-test-core/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "commons-lang3"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.commons"
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.18.0",
      "type": "library",
      "version": "3.18.0"
    },
    {
      "bom-ref": "pkg:github/dart-lang/setup-dart@v1.8.1?package-id=ce45b9ed14656d21",
      "cpe": "cpe:2.3:a:dart-lang\\/setup-dart:dart-lang\\/setup-dart:v1.8.1:*:*:*:*:*:*:*",
      "name": "dart-lang/setup-dart",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dart-lang\\/setup-dart:dart_lang\\/setup_dart:v1.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dart_lang\\/setup_dart:dart-lang\\/setup-dart:v1.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dart_lang\\/setup_dart:dart_lang\\/setup_dart:v1.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dart-lang\\/setup:dart-lang\\/setup-dart:v1.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dart-lang\\/setup:dart_lang\\/setup_dart:v1.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dart_lang\\/setup:dart-lang\\/setup-dart:v1.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dart_lang\\/setup:dart_lang\\/setup_dart:v1.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dart:dart-lang\\/setup-dart:v1.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dart:dart_lang\\/setup_dart:v1.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/ci.yml"
        }
      ],
      "purl": "pkg:github/dart-lang/setup-dart@v1.8.1",
      "type": "library",
      "version": "v1.8.1"
    },
    {
      "bom-ref": "pkg:github/dart-lang/setup-dart@v1.8.1?package-id=0112e6f5d1ca6b8c",
      "cpe": "cpe:2.3:a:dart-lang\\/setup-dart:dart-lang\\/setup-dart:v1.8.1:*:*:*:*:*:*:*",
      "name": "dart-lang/setup-dart",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dart-lang\\/setup-dart:dart_lang\\/setup_dart:v1.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dart_lang\\/setup_dart:dart-lang\\/setup-dart:v1.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dart_lang\\/setup_dart:dart_lang\\/setup_dart:v1.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dart-lang\\/setup:dart-lang\\/setup-dart:v1.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dart-lang\\/setup:dart_lang\\/setup_dart:v1.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dart_lang\\/setup:dart-lang\\/setup-dart:v1.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dart_lang\\/setup:dart_lang\\/setup_dart:v1.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dart:dart-lang\\/setup-dart:v1.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dart:dart_lang\\/setup_dart:v1.8.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/release-dart.yaml"
        }
      ],
      "purl": "pkg:github/dart-lang/setup-dart@v1.8.1",
      "type": "library",
      "version": "v1.8.1"
    },
    {
      "bom-ref": "pkg:github/dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4?package-id=25bc746fdfb387a8",
      "cpe": "cpe:2.3:a:dtolnay\\/rust-toolchain:dtolnay\\/rust-toolchain:4cda84d5c5c54efe2404f9d843567869ab1699d4:*:*:*:*:*:*:*",
      "name": "dtolnay/rust-toolchain",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dtolnay\\/rust-toolchain:dtolnay\\/rust_toolchain:4cda84d5c5c54efe2404f9d843567869ab1699d4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dtolnay\\/rust_toolchain:dtolnay\\/rust-toolchain:4cda84d5c5c54efe2404f9d843567869ab1699d4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dtolnay\\/rust_toolchain:dtolnay\\/rust_toolchain:4cda84d5c5c54efe2404f9d843567869ab1699d4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dtolnay\\/rust:dtolnay\\/rust-toolchain:4cda84d5c5c54efe2404f9d843567869ab1699d4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dtolnay\\/rust:dtolnay\\/rust_toolchain:4cda84d5c5c54efe2404f9d843567869ab1699d4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/release-rust.yaml"
        }
      ],
      "purl": "pkg:github/dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4",
      "type": "library",
      "version": "4cda84d5c5c54efe2404f9d843567869ab1699d4"
    },
    {
      "bom-ref": "pkg:npm/env-paths@2.2.1?package-id=ffcc832fb9e2dede",
      "cpe": "cpe:2.3:a:env-paths:env-paths:2.2.1:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "env-paths",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env-paths:env_paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env_paths:env-paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env_paths:env_paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env:env-paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:env:env_paths:2.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/env-paths@2.2.1",
      "type": "library",
      "version": "2.2.1"
    },
    {
      "bom-ref": "pkg:npm/exponential-backoff@3.1.3?package-id=6f34a1fcea03a0ab",
      "cpe": "cpe:2.3:a:exponential-backoff:exponential-backoff:3.1.3:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "exponential-backoff",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential-backoff:exponential_backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential_backoff:exponential-backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential_backoff:exponential_backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential:exponential-backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:exponential:exponential_backoff:3.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/exponential-backoff@3.1.3",
      "type": "library",
      "version": "3.1.3"
    },
    {
      "bom-ref": "pkg:pub/external_type_test_models@1.0.0?package-id=aa1a428aa7f932fc",
      "cpe": "cpe:2.3:a:external-type-test-models:external-type-test-models:1.0.0:*:*:*:*:*:*:*",
      "name": "external_type_test_models",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dart-pubspec-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "dart"
        },
        {
          "name": "syft:package:type",
          "value": "dart-pub"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dart-pubspec"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:external-type-test-models:external_type_test_models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:external_type_test_models:external-type-test-models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:external_type_test_models:external_type_test_models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:external-type-test:external-type-test-models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:external-type-test:external_type_test_models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:external_type_test:external-type-test-models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:external_type_test:external_type_test_models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:external-type:external-type-test-models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:external-type:external_type_test_models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:external_type:external-type-test-models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:external_type:external_type_test_models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:external:external-type-test-models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:external:external_type_test_models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/dart/packages/external-type-test-models/pubspec.yaml"
        }
      ],
      "purl": "pkg:pub/external_type_test_models@1.0.0",
      "type": "library",
      "version": "1.0.0"
    },
    {
      "bom-ref": "pkg:maven/com.alibaba/fastjson@1.2.84?package-id=863ab2339e528e03",
      "cpe": "cpe:2.3:a:com.alibaba:fastjson:1.2.84:*:*:*:*:*:*:*",
      "group": "com.alibaba",
      "name": "fastjson",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fastjson:fastjson:1.2.84:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibaba:fastjson:1.2.84:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-testsuite/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "fastjson"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.alibaba"
        }
      ],
      "purl": "pkg:maven/com.alibaba/fastjson@1.2.84",
      "type": "library",
      "version": "1.2.84"
    },
    {
      "bom-ref": "pkg:maven/it.unimi.dsi/fastutil@8.5.6?package-id=6882fcf1e8f7054f",
      "cpe": "cpe:2.3:a:fastutil:fastutil:8.5.6:*:*:*:*:*:*:*",
      "group": "it.unimi.dsi",
      "name": "fastutil",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-testsuite/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "fastutil"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "it.unimi.dsi"
        }
      ],
      "purl": "pkg:maven/it.unimi.dsi/fastutil@8.5.6",
      "type": "library",
      "version": "8.5.6"
    },
    {
      "bom-ref": "pkg:npm/fdir@6.5.0?package-id=9e6636a8bbae7911",
      "cpe": "cpe:2.3:a:fdir:fdir:6.5.0:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "fdir",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/fdir@6.5.0",
      "type": "library",
      "version": "6.5.0"
    },
    {
      "bom-ref": "pkg:pub/fory@1.7.8?package-id=6805cbb3793b8082",
      "cpe": "cpe:2.3:a:fory:fory:1.7.8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "fory",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dart-pubspec-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "dart"
        },
        {
          "name": "syft:package:type",
          "value": "dart-pub"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dart-pubspec"
        },
        {
          "name": "syft:location:0:path",
          "value": "/dart/packages/fory/pubspec.yaml"
        }
      ],
      "purl": "pkg:pub/fory@1.7.8",
      "type": "library",
      "version": "1.7.8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.fory/fory-annotation-processor@1.7.8?package-id=8d6d8555937acbc4",
      "cpe": "cpe:2.3:a:apache:fory-annotation-processor:1.7.8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "The Apache License, Version 2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "fory-annotation-processor",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory_annotation_processor:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-annotation-processor/pom.xml"
        }
      ],
      "purl": "pkg:maven/org.apache.fory/fory-annotation-processor@1.7.8",
      "type": "library",
      "version": "1.7.8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.fory/fory-core@1.7.8?package-id=ae7fb2be15c7e52e",
      "cpe": "cpe:2.3:a:apache:fory-core:1.7.8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "The Apache License, Version 2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "fory-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory_core:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-core/pom.xml"
        }
      ],
      "purl": "pkg:maven/org.apache.fory/fory-core@1.7.8",
      "type": "library",
      "version": "1.7.8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.fory/fory-extensions@1.7.8?package-id=7fa47f5d5daf8740",
      "cpe": "cpe:2.3:a:apache:fory-extensions:1.7.8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "The Apache License, Version 2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "fory-extensions",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory_extensions:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-extensions/pom.xml"
        }
      ],
      "purl": "pkg:maven/org.apache.fory/fory-extensions@1.7.8",
      "type": "library",
      "version": "1.7.8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.fory/fory-format@1.7.8?package-id=caafdfbd10b6d1e0",
      "cpe": "cpe:2.3:a:apache:fory-format:1.7.8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "The Apache License, Version 2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "fory-format",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory_format:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-format/pom.xml"
        }
      ],
      "purl": "pkg:maven/org.apache.fory/fory-format@1.7.8",
      "type": "library",
      "version": "1.7.8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.fory/fory-json@1.7.8?package-id=b45270dbff2b927e",
      "cpe": "cpe:2.3:a:apache:fory-json:1.7.8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "The Apache License, Version 2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "fory-json",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory_json:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-json/pom.xml"
        }
      ],
      "purl": "pkg:maven/org.apache.fory/fory-json@1.7.8",
      "type": "library",
      "version": "1.7.8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.fory/fory-json-kotlin@1.7.8?package-id=ed520e275a62d39d",
      "cpe": "cpe:2.3:a:apache:fory-json-kotlin:1.7.8:*:*:*:*:*:*:*",
      "name": "fory-json-kotlin",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory_json_kotlin:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/kotlin/fory-json-kotlin/pom.xml"
        }
      ],
      "purl": "pkg:maven/org.apache.fory/fory-json-kotlin@1.7.8",
      "type": "library",
      "version": "1.7.8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.fory/fory-json-kotlin-ksp@1.7.8?package-id=2a282b14ad7482cc",
      "cpe": "cpe:2.3:a:apache:fory-json-kotlin-ksp:1.7.8:*:*:*:*:*:*:*",
      "name": "fory-json-kotlin-ksp",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory_json_kotlin_ksp:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/kotlin/fory-json-kotlin-ksp/pom.xml"
        }
      ],
      "purl": "pkg:maven/org.apache.fory/fory-json-kotlin-ksp@1.7.8",
      "type": "library",
      "version": "1.7.8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.fory/fory-kotlin@1.7.8?package-id=d81dcaed7dfe7db1",
      "cpe": "cpe:2.3:a:apache:fory-kotlin:1.7.8:*:*:*:*:*:*:*",
      "name": "fory-kotlin",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory_kotlin:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/kotlin/fory-kotlin/pom.xml"
        }
      ],
      "purl": "pkg:maven/org.apache.fory/fory-kotlin@1.7.8",
      "type": "library",
      "version": "1.7.8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.fory/fory-kotlin-ksp@1.7.8?package-id=770b2f0ae81400ee",
      "cpe": "cpe:2.3:a:apache:fory-kotlin-ksp:1.7.8:*:*:*:*:*:*:*",
      "name": "fory-kotlin-ksp",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory_kotlin_ksp:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/kotlin/fory-kotlin-ksp/pom.xml"
        }
      ],
      "purl": "pkg:maven/org.apache.fory/fory-kotlin-ksp@1.7.8",
      "type": "library",
      "version": "1.7.8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.fory/fory-kotlin-parent@1.7.8?package-id=4eb4f0701279c9c3",
      "cpe": "cpe:2.3:a:apache:fory-kotlin-parent:1.7.8:*:*:*:*:*:*:*",
      "name": "fory-kotlin-parent",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory_kotlin_parent:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/kotlin/pom.xml"
        }
      ],
      "purl": "pkg:maven/org.apache.fory/fory-kotlin-parent@1.7.8",
      "type": "library",
      "version": "1.7.8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.fory/fory-kotlin-tests@1.7.8?package-id=1ea89304ac3a5156",
      "cpe": "cpe:2.3:a:apache:fory-kotlin-tests:1.7.8:*:*:*:*:*:*:*",
      "name": "fory-kotlin-tests",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory_kotlin_tests:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/kotlin/fory-kotlin-tests/pom.xml"
        }
      ],
      "purl": "pkg:maven/org.apache.fory/fory-kotlin-tests@1.7.8",
      "type": "library",
      "version": "1.7.8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.fory/fory-latest-jdk-tests@1.7.8?package-id=4231cae5580f952c",
      "cpe": "cpe:2.3:a:apache:fory-latest-jdk-tests:1.7.8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "The Apache License, Version 2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "fory-latest-jdk-tests",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory_latest_jdk_tests:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-latest-jdk-tests/pom.xml"
        }
      ],
      "purl": "pkg:maven/org.apache.fory/fory-latest-jdk-tests@1.7.8",
      "type": "library",
      "version": "1.7.8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.fory/fory-parent@1.7.8?package-id=e5ba5ce2bb788c47",
      "cpe": "cpe:2.3:a:apache:fory-parent:1.7.8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "The Apache License, Version 2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "fory-parent",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory_parent:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/pom.xml"
        }
      ],
      "purl": "pkg:maven/org.apache.fory/fory-parent@1.7.8",
      "type": "library",
      "version": "1.7.8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.fory/fory-test-core@1.7.8?package-id=e9fce77b022bdf5c",
      "cpe": "cpe:2.3:a:apache:fory-test-core:1.7.8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "The Apache License, Version 2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "fory-test-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory_test_core:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-test-core/pom.xml"
        }
      ],
      "purl": "pkg:maven/org.apache.fory/fory-test-core@1.7.8",
      "type": "library",
      "version": "1.7.8"
    },
    {
      "bom-ref": "pkg:maven/org.apache.fory/fory-testsuite@1.7.8?package-id=e93028ac398b78f5",
      "cpe": "cpe:2.3:a:apache:fory-testsuite:1.7.8:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "name": "The Apache License, Version 2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ],
      "name": "fory-testsuite",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory_testsuite:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:fory:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-testsuite/pom.xml"
        }
      ],
      "purl": "pkg:maven/org.apache.fory/fory-testsuite@1.7.8",
      "type": "library",
      "version": "1.7.8"
    },
    {
      "bom-ref": "pkg:pub/fory_dart@1.7.8?package-id=50b576226864b3c5",
      "cpe": "cpe:2.3:a:fory-dart:fory-dart:1.7.8:*:*:*:*:*:*:*",
      "name": "fory_dart",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dart-pubspec-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "dart"
        },
        {
          "name": "syft:package:type",
          "value": "dart-pub"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dart-pubspec"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fory-dart:fory_dart:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fory_dart:fory-dart:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fory_dart:fory_dart:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fory:fory-dart:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fory:fory_dart:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/dart/pubspec.yaml"
        }
      ],
      "purl": "pkg:pub/fory_dart@1.7.8",
      "type": "library",
      "version": "1.7.8"
    },
    {
      "bom-ref": "pkg:pub/fory_test@1.7.8?package-id=f8e9b893cf45d1bf",
      "cpe": "cpe:2.3:a:fory-test:fory-test:1.7.8:*:*:*:*:*:*:*",
      "name": "fory_test",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dart-pubspec-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "dart"
        },
        {
          "name": "syft:package:type",
          "value": "dart-pub"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dart-pubspec"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fory-test:fory_test:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fory_test:fory-test:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fory_test:fory_test:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fory:fory-test:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fory:fory_test:1.7.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/dart/packages/fory-test/pubspec.yaml"
        }
      ],
      "purl": "pkg:pub/fory_test@1.7.8",
      "type": "library",
      "version": "1.7.8"
    },
    {
      "bom-ref": "pkg:npm/fs-extra@11.3.5?package-id=59de452ea597dd65",
      "cpe": "cpe:2.3:a:fs-extra:fs-extra:11.3.5:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "fs-extra",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs-extra:fs_extra:11.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs_extra:fs-extra:11.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs_extra:fs_extra:11.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs:fs-extra:11.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fs:fs_extra:11.3.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/fs-extra@11.3.5",
      "type": "library",
      "version": "11.3.5"
    },
    {
      "bom-ref": "pkg:maven/de.ruedigermoeller/fst@2.57?package-id=c257a0231a8a4242",
      "cpe": "cpe:2.3:a:fst:fst:2.57:*:*:*:*:*:*:*",
      "group": "de.ruedigermoeller",
      "name": "fst",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-test-core/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "fst"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "de.ruedigermoeller"
        }
      ],
      "purl": "pkg:maven/de.ruedigermoeller/fst@2.57",
      "type": "library",
      "version": "2.57"
    },
    {
      "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1?package-id=2b4c6dfc29eb30de",
      "cpe": "cpe:2.3:a:davecgh:go-spew:v1.1.1:*:*:*:*:*:*:*",
      "name": "github.com/davecgh/go-spew",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-file-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:davecgh:go_spew:v1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/go/fory/go.mod"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c="
        }
      ],
      "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.1",
      "type": "library",
      "version": "v1.1.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/pmezard/go-difflib@v1.0.0?package-id=f0bd18edd3f21956",
      "cpe": "cpe:2.3:a:pmezard:go-difflib:v1.0.0:*:*:*:*:*:*:*",
      "name": "github.com/pmezard/go-difflib",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-file-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pmezard:go_difflib:v1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/go/fory/go.mod"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM="
        }
      ],
      "purl": "pkg:golang/github.com/pmezard/go-difflib@v1.0.0",
      "type": "library",
      "version": "v1.0.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/stretchr/testify@v1.7.0?package-id=866c833a647b5110",
      "cpe": "cpe:2.3:a:stretchr:testify:v1.7.0:*:*:*:*:*:*:*",
      "name": "github.com/stretchr/testify",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-file-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-entry"
        },
        {
          "name": "syft:location:0:path",
          "value": "/go/fory/go.mod"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:nwc3DEeHmmLAfoZucVR881uASk0Mfjw8xYJ99tb5CcY="
        }
      ],
      "purl": "pkg:golang/github.com/stretchr/testify@v1.7.0",
      "type": "library",
      "version": "v1.7.0"
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=7226da13311e083a",
      "cpe": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*",
      "name": "gopkg.in/yaml.v3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-file-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-entry"
        },
        {
          "name": "syft:location:0:path",
          "value": "/go/fory/go.mod"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA="
        }
      ],
      "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
      "type": "library",
      "version": "v3.0.1"
    },
    {
      "bom-ref": "pkg:maven/org.graalvm.sdk/graal-sdk@23.1.0?package-id=f7f61fa6e79f8aa2",
      "cpe": "cpe:2.3:a:org.graalvm.sdk:graal-sdk:23.1.0:*:*:*:*:*:*:*",
      "group": "org.graalvm.sdk",
      "name": "graal-sdk",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.graalvm.sdk:graal_sdk:23.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graal-sdk:graal-sdk:23.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graal-sdk:graal_sdk:23.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graal_sdk:graal-sdk:23.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graal_sdk:graal_sdk:23.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.graalvm.sdk:sdk:23.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graalvm:graal-sdk:23.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graalvm:graal_sdk:23.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graal:graal-sdk:23.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graal:graal_sdk:23.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graal-sdk:sdk:23.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graal_sdk:sdk:23.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sdk:graal-sdk:23.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sdk:graal_sdk:23.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graalvm:sdk:23.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graal:sdk:23.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sdk:sdk:23.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-core/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "graal-sdk"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.graalvm.sdk"
        }
      ],
      "purl": "pkg:maven/org.graalvm.sdk/graal-sdk@23.1.0",
      "type": "library",
      "version": "23.1.0"
    },
    {
      "bom-ref": "pkg:github/graalvm/setup-graalvm@v1.6.8?package-id=767d9a1cae24182f",
      "cpe": "cpe:2.3:a:graalvm\\/setup-graalvm:graalvm\\/setup-graalvm:v1.6.8:*:*:*:*:*:*:*",
      "name": "graalvm/setup-graalvm",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graalvm\\/setup-graalvm:graalvm\\/setup_graalvm:v1.6.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graalvm\\/setup_graalvm:graalvm\\/setup-graalvm:v1.6.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graalvm\\/setup_graalvm:graalvm\\/setup_graalvm:v1.6.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graalvm\\/setup:graalvm\\/setup-graalvm:v1.6.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graalvm\\/setup:graalvm\\/setup_graalvm:v1.6.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/ci.yml"
        }
      ],
      "purl": "pkg:github/graalvm/setup-graalvm@v1.6.8",
      "type": "library",
      "version": "v1.6.8"
    },
    {
      "bom-ref": "pkg:npm/graceful-fs@4.2.11?package-id=bbe74d0411f8ebea",
      "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.11:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "name": "graceful-fs",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful-fs:graceful_fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful_fs:graceful-fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful_fs:graceful_fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful:graceful-fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graceful:graceful_fs:4.2.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.2.11",
      "type": "library",
      "version": "4.2.11"
    },
    {
      "bom-ref": "pkg:github/gradle/actions@v6.4.1?package-id=ecb22d6a34d101cb#setup-gradle",
      "cpe": "cpe:2.3:a:gradle\\/actions\\/setup-gradle:gradle\\/actions\\/setup-gradle:v6.4.1:*:*:*:*:*:*:*",
      "name": "gradle/actions/setup-gradle",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gradle\\/actions\\/setup-gradle:gradle\\/actions\\/setup_gradle:v6.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gradle\\/actions\\/setup_gradle:gradle\\/actions\\/setup-gradle:v6.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gradle\\/actions\\/setup_gradle:gradle\\/actions\\/setup_gradle:v6.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gradle\\/actions\\/setup:gradle\\/actions\\/setup-gradle:v6.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gradle\\/actions\\/setup:gradle\\/actions\\/setup_gradle:v6.4.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/ci.yml"
        }
      ],
      "purl": "pkg:github/gradle/actions@v6.4.1#setup-gradle",
      "type": "library",
      "version": "v6.4.1"
    },
    {
      "bom-ref": "pkg:maven/com.google.guava/guava@33.8.0-jre?package-id=474c7eadd79aef0b",
      "cpe": "cpe:2.3:a:com.google.guava:guava:33.8.0-jre:*:*:*:*:*:*:*",
      "group": "com.google.guava",
      "name": "guava",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:guava:33.8.0-jre:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:guava:guava:33.8.0-jre:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-core/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "guava"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.guava"
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@33.8.0-jre",
      "type": "library",
      "version": "33.8.0-jre"
    },
    {
      "bom-ref": "pkg:pub/inheritance_test_models@1.0.0?package-id=9312406f2f5ffdac",
      "cpe": "cpe:2.3:a:inheritance-test-models:inheritance-test-models:1.0.0:*:*:*:*:*:*:*",
      "name": "inheritance_test_models",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "dart-pubspec-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "dart"
        },
        {
          "name": "syft:package:type",
          "value": "dart-pub"
        },
        {
          "name": "syft:package:metadataType",
          "value": "dart-pubspec"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inheritance-test-models:inheritance_test_models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inheritance_test_models:inheritance-test-models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inheritance_test_models:inheritance_test_models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inheritance-test:inheritance-test-models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inheritance-test:inheritance_test_models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inheritance_test:inheritance-test-models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inheritance_test:inheritance_test_models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inheritance:inheritance-test-models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:inheritance:inheritance_test_models:1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/dart/packages/inheritance-test-models/pubspec.yaml"
        }
      ],
      "purl": "pkg:pub/inheritance_test_models@1.0.0",
      "type": "library",
      "version": "1.0.0"
    },
    {
      "bom-ref": "pkg:npm/isexe@4.0.0?package-id=ab42ff7a026025a9",
      "cpe": "cpe:2.3:a:isexe:isexe:4.0.0:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "name": "isexe",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/isexe@4.0.0",
      "type": "library",
      "version": "4.0.0"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.11?package-id=a94699f5753422a1",
      "cpe": "cpe:2.3:a:com.fasterxml.jackson.core:jackson-core:2.18.11:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.fasterxml.jackson.core:jackson_core:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.fasterxml.jackson.core:core:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson-core:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson_core:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson-core:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson_core:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-core:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_core:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:jackson:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-core:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_core:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:jackson:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-core:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_core:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-core:core:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_core:core:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:core:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:core:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:core:2.18.11:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-test-core/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.11",
      "type": "library",
      "version": "2.18.11"
    },
    {
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind?package-id=4438217a7e947f7d",
      "cpe": "cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:*:*:*:*:*:*:*:*",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.fasterxml.jackson.core:jackson:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson-databind:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson_databind:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson-databind:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson_databind:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson_databind:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson-databind:jackson:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson-databind:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson_databind:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson_databind:jackson:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson-databind:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson_databind:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:fasterxml:jackson:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jackson:jackson:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:core:jackson:*:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-format/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jackson-databind"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.fasterxml.jackson.core"
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind",
      "type": "library",
      "version": "UNKNOWN"
    },
    {
      "bom-ref": "pkg:maven/org.codehaus.janino/janino@3.1.12?package-id=3e744949e7a490a9",
      "cpe": "cpe:2.3:a:org.codehaus.janino:janino:3.1.12:*:*:*:*:*:*:*",
      "group": "org.codehaus.janino",
      "name": "janino",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:codehaus:janino:3.1.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:janino:janino:3.1.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-core/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "janino"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.codehaus.janino"
        }
      ],
      "purl": "pkg:maven/org.codehaus.janino/janino@3.1.12",
      "type": "library",
      "version": "3.1.12"
    },
    {
      "bom-ref": "pkg:npm/jsonfile@6.2.1?package-id=37a5ff5c1c493b89",
      "cpe": "cpe:2.3:a:jsonfile:jsonfile:6.2.1:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "jsonfile",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/jsonfile@6.2.1",
      "type": "library",
      "version": "6.2.1"
    },
    {
      "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?package-id=57a3f0a86b61de97",
      "cpe": "cpe:2.3:a:com.google.code.findbugs:jsr305:3.0.2:*:*:*:*:*:*:*",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:findbugs:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jsr305:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:code:jsr305:3.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-core/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "jsr305"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.code.findbugs"
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
      "type": "library",
      "version": "3.0.2"
    },
    {
      "bom-ref": "pkg:github/korandoru/hawkeye@v6?package-id=d480a5d5f508d27d",
      "cpe": "cpe:2.3:a:korandoru\\/hawkeye:korandoru\\/hawkeye:v6:*:*:*:*:*:*:*",
      "name": "korandoru/hawkeye",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/ci.yml"
        }
      ],
      "purl": "pkg:github/korandoru/hawkeye@v6",
      "type": "library",
      "version": "v6"
    },
    {
      "bom-ref": "pkg:maven/org.jetbrains.kotlin/kotlin-metadata-jvm@2.3.20?package-id=ac954724cb57b30b",
      "cpe": "cpe:2.3:a:org.jetbrains.kotlin:kotlin-metadata-jvm:2.3.20:*:*:*:*:*:*:*",
      "group": "org.jetbrains.kotlin",
      "name": "kotlin-metadata-jvm",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jetbrains.kotlin:kotlin_metadata_jvm:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin-metadata-jvm:kotlin-metadata-jvm:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin-metadata-jvm:kotlin_metadata_jvm:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin_metadata_jvm:kotlin-metadata-jvm:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin_metadata_jvm:kotlin_metadata_jvm:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin-metadata:kotlin-metadata-jvm:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin-metadata:kotlin_metadata_jvm:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin_metadata:kotlin-metadata-jvm:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin_metadata:kotlin_metadata_jvm:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetbrains:kotlin-metadata-jvm:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetbrains:kotlin_metadata_jvm:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jetbrains.kotlin:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin-metadata-jvm:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin:kotlin-metadata-jvm:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin:kotlin_metadata_jvm:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin_metadata_jvm:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin-metadata:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin_metadata:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetbrains:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/kotlin/fory-json-kotlin/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "kotlin-metadata-jvm"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.jetbrains.kotlin"
        }
      ],
      "purl": "pkg:maven/org.jetbrains.kotlin/kotlin-metadata-jvm@2.3.20",
      "type": "library",
      "version": "2.3.20"
    },
    {
      "bom-ref": "pkg:maven/org.jetbrains.kotlin/kotlin-reflect@2.3.20?package-id=884bf28693ada203",
      "cpe": "cpe:2.3:a:org.jetbrains.kotlin:kotlin-reflect:2.3.20:*:*:*:*:*:*:*",
      "group": "org.jetbrains.kotlin",
      "name": "kotlin-reflect",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jetbrains.kotlin:kotlin_reflect:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin-reflect:kotlin-reflect:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin-reflect:kotlin_reflect:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin_reflect:kotlin-reflect:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin_reflect:kotlin_reflect:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jetbrains.kotlin:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetbrains:kotlin-reflect:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetbrains:kotlin_reflect:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin-reflect:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin:kotlin-reflect:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin:kotlin_reflect:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin_reflect:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetbrains:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/kotlin/fory-json-kotlin/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "kotlin-reflect"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.jetbrains.kotlin"
        }
      ],
      "purl": "pkg:maven/org.jetbrains.kotlin/kotlin-reflect@2.3.20",
      "type": "library",
      "version": "2.3.20"
    },
    {
      "bom-ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.20?package-id=aaf1d81b056b646b",
      "cpe": "cpe:2.3:a:org.jetbrains.kotlin:kotlin-stdlib:2.3.20:*:*:*:*:*:*:*",
      "group": "org.jetbrains.kotlin",
      "name": "kotlin-stdlib",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jetbrains.kotlin:kotlin_stdlib:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin-stdlib:kotlin-stdlib:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin-stdlib:kotlin_stdlib:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin_stdlib:kotlin-stdlib:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin_stdlib:kotlin_stdlib:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jetbrains.kotlin:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetbrains:kotlin-stdlib:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetbrains:kotlin_stdlib:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin-stdlib:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin:kotlin-stdlib:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin:kotlin_stdlib:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin_stdlib:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetbrains:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/kotlin/fory-json-kotlin-ksp/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "kotlin-stdlib"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.jetbrains.kotlin"
        }
      ],
      "purl": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.20",
      "type": "library",
      "version": "2.3.20"
    },
    {
      "bom-ref": "pkg:maven/org.jetbrains.kotlin/kotlin-test-testng@2.3.20?package-id=8545854594519588",
      "cpe": "cpe:2.3:a:org.jetbrains.kotlin:kotlin-test-testng:2.3.20:*:*:*:*:*:*:*",
      "group": "org.jetbrains.kotlin",
      "name": "kotlin-test-testng",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jetbrains.kotlin:kotlin_test_testng:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin-test-testng:kotlin-test-testng:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin-test-testng:kotlin_test_testng:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin_test_testng:kotlin-test-testng:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin_test_testng:kotlin_test_testng:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin-test:kotlin-test-testng:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin-test:kotlin_test_testng:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin_test:kotlin-test-testng:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin_test:kotlin_test_testng:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetbrains:kotlin-test-testng:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetbrains:kotlin_test_testng:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.jetbrains.kotlin:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin-test-testng:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin:kotlin-test-testng:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin:kotlin_test_testng:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin_test_testng:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin-test:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin_test:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jetbrains:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kotlin:kotlin:2.3.20:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/kotlin/fory-json-kotlin-ksp/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "kotlin-test-testng"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.jetbrains.kotlin"
        }
      ],
      "purl": "pkg:maven/org.jetbrains.kotlin/kotlin-test-testng@2.3.20",
      "type": "library",
      "version": "2.3.20"
    },
    {
      "bom-ref": "pkg:maven/com.esotericsoftware/kryo@4.0.0?package-id=6dca43c7868468f2",
      "cpe": "cpe:2.3:a:com.esotericsoftware:kryo:4.0.0:*:*:*:*:*:*:*",
      "group": "com.esotericsoftware",
      "name": "kryo",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esotericsoftware:kryo:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kryo:kryo:4.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-testsuite/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "kryo"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.esotericsoftware"
        }
      ],
      "purl": "pkg:maven/com.esotericsoftware/kryo@4.0.0",
      "type": "library",
      "version": "4.0.0"
    },
    {
      "bom-ref": "pkg:maven/com.esotericsoftware/kryo@5.5.0?package-id=09771cad6fa70b77",
      "cpe": "cpe:2.3:a:com.esotericsoftware:kryo:5.5.0:*:*:*:*:*:*:*",
      "group": "com.esotericsoftware",
      "name": "kryo",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esotericsoftware:kryo:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:kryo:kryo:5.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-test-core/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "kryo"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.esotericsoftware"
        }
      ],
      "purl": "pkg:maven/com.esotericsoftware/kryo@5.5.0",
      "type": "library",
      "version": "5.5.0"
    },
    {
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.5?package-id=243be0eff1384366",
      "cpe": "cpe:2.3:a:apache:log4j-api:2.25.5:*:*:*:*:*:*:*",
      "group": "org.apache.logging.log4j",
      "name": "log4j-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j_api:2.25.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j:2.25.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-test-core/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "log4j-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.logging.log4j"
        }
      ],
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.5",
      "type": "library",
      "version": "2.25.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.5?package-id=1285d05b2a6c27a4",
      "cpe": "cpe:2.3:a:apache:log4j-core:2.25.5:*:*:*:*:*:*:*",
      "group": "org.apache.logging.log4j",
      "name": "log4j-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j_core:2.25.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j:2.25.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-test-core/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "log4j-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.logging.log4j"
        }
      ],
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.5",
      "type": "library",
      "version": "2.25.5"
    },
    {
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.25.5?package-id=d360599fe74be267",
      "cpe": "cpe:2.3:a:apache:log4j-slf4j2-impl:2.25.5:*:*:*:*:*:*:*",
      "group": "org.apache.logging.log4j",
      "name": "log4j-slf4j2-impl",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j_slf4j2_impl:2.25.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:log4j:2.25.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-test-core/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "log4j-slf4j2-impl"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.logging.log4j"
        }
      ],
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.25.5",
      "type": "library",
      "version": "2.25.5"
    },
    {
      "bom-ref": "pkg:maven/org.projectlombok/lombok@1.18.48?package-id=74a750df11774a7f",
      "cpe": "cpe:2.3:a:org.projectlombok:lombok:1.18.48:*:*:*:*:*:*:*",
      "group": "org.projectlombok",
      "name": "lombok",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:projectlombok:lombok:1.18.48:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lombok:lombok:1.18.48:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-test-core/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "lombok"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.projectlombok"
        }
      ],
      "purl": "pkg:maven/org.projectlombok/lombok@1.18.48",
      "type": "library",
      "version": "1.18.48"
    },
    {
      "bom-ref": "pkg:maven/com.github.olivergondza/maven-jdk-tools-wrapper@0.1?package-id=7098b786c229c77c",
      "cpe": "cpe:2.3:a:com.github.olivergondza:maven-jdk-tools-wrapper:0.1:*:*:*:*:*:*:*",
      "group": "com.github.olivergondza",
      "name": "maven-jdk-tools-wrapper",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.github.olivergondza:maven_jdk_tools_wrapper:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:maven-jdk-tools-wrapper:maven-jdk-tools-wrapper:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:maven-jdk-tools-wrapper:maven_jdk_tools_wrapper:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:maven_jdk_tools_wrapper:maven-jdk-tools-wrapper:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:maven_jdk_tools_wrapper:maven_jdk_tools_wrapper:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:maven-jdk-tools:maven-jdk-tools-wrapper:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:maven-jdk-tools:maven_jdk_tools_wrapper:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:maven_jdk_tools:maven-jdk-tools-wrapper:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:maven_jdk_tools:maven_jdk_tools_wrapper:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:olivergondza:maven-jdk-tools-wrapper:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:olivergondza:maven_jdk_tools_wrapper:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:maven-jdk:maven-jdk-tools-wrapper:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:maven-jdk:maven_jdk_tools_wrapper:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:maven_jdk:maven-jdk-tools-wrapper:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:maven_jdk:maven_jdk_tools_wrapper:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:maven-jdk-tools-wrapper:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:maven_jdk_tools_wrapper:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:maven:maven-jdk-tools-wrapper:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:maven:maven_jdk_tools_wrapper:0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-test-core/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "maven-jdk-tools-wrapper"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.github.olivergondza"
        }
      ],
      "purl": "pkg:maven/com.github.olivergondza/maven-jdk-tools-wrapper@0.1",
      "type": "library",
      "version": "0.1"
    },
    {
      "bom-ref": "pkg:npm/minipass@7.1.3?package-id=bbec71090b493b3b",
      "cpe": "cpe:2.3:a:minipass:minipass:7.1.3:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "name": "minipass",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/minipass@7.1.3",
      "type": "library",
      "version": "7.1.3"
    },
    {
      "bom-ref": "pkg:npm/minizlib@3.1.0?package-id=a416e114aee04c8d",
      "cpe": "cpe:2.3:a:minizlib:minizlib:3.1.0:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "minizlib",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/minizlib@3.1.0",
      "type": "library",
      "version": "3.1.0"
    },
    {
      "bom-ref": "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?package-id=5ec697defac230d1",
      "cpe": "cpe:2.3:a:com.esotericsoftware.minlog:minlog:1.2:*:*:*:*:*:*:*",
      "group": "com.esotericsoftware.minlog",
      "name": "minlog",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esotericsoftware:minlog:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:minlog:minlog:1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-test-core/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "minlog"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.esotericsoftware.minlog"
        }
      ],
      "purl": "pkg:maven/com.esotericsoftware.minlog/minlog@1.2",
      "type": "library",
      "version": "1.2"
    },
    {
      "bom-ref": "pkg:maven/org.mockito/mockito-core@4.11.0?package-id=bbc2b9b1bcaf2cea",
      "cpe": "cpe:2.3:a:mockito-core:mockito-core:4.11.0:*:*:*:*:*:*:*",
      "group": "org.mockito",
      "name": "mockito-core",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mockito-core:mockito_core:4.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mockito_core:mockito-core:4.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mockito_core:mockito_core:4.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.mockito:mockito-core:4.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.mockito:mockito_core:4.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mockito:mockito-core:4.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mockito:mockito_core:4.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-core/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "mockito-core"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.mockito"
        }
      ],
      "purl": "pkg:maven/org.mockito/mockito-core@4.11.0",
      "type": "library",
      "version": "4.11.0"
    },
    {
      "bom-ref": "pkg:npm/nan@2.27.0?package-id=de119a54ebcb93cc",
      "cpe": "cpe:2.3:a:nan:nan:2.27.0:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "nan",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/nan@2.27.0",
      "type": "library",
      "version": "2.27.0"
    },
    {
      "bom-ref": "pkg:maven/org.graalvm.sdk/nativeimage@23.1.0?package-id=233ce5da6f247ed7",
      "cpe": "cpe:2.3:a:org.graalvm.sdk:nativeimage:23.1.0:*:*:*:*:*:*:*",
      "group": "org.graalvm.sdk",
      "name": "nativeimage",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:nativeimage:nativeimage:23.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:graalvm:nativeimage:23.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sdk:nativeimage:23.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-core/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "nativeimage"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.graalvm.sdk"
        }
      ],
      "purl": "pkg:maven/org.graalvm.sdk/nativeimage@23.1.0",
      "type": "library",
      "version": "23.1.0"
    },
    {
      "bom-ref": "pkg:npm/node-gyp@12.4.0?package-id=4aecf037814af1d1",
      "cpe": "cpe:2.3:a:node-gyp:node-gyp:12.4.0:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "node-gyp",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node-gyp:node_gyp:12.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_gyp:node-gyp:12.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node_gyp:node_gyp:12.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node:node-gyp:12.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:node:node_gyp:12.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/node-gyp@12.4.0",
      "type": "library",
      "version": "12.4.0"
    },
    {
      "bom-ref": "pkg:npm/nopt@9.0.0?package-id=ade16af0bec5a16f",
      "cpe": "cpe:2.3:a:nopt:nopt:9.0.0:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "name": "nopt",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/nopt@9.0.0",
      "type": "library",
      "version": "9.0.0"
    },
    {
      "bom-ref": "pkg:npm/picomatch@4.0.4?package-id=e49c6beac20fc24c",
      "cpe": "cpe:2.3:a:jonschlinkert:picomatch:4.0.4:*:*:*:*:node.js:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "picomatch",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/picomatch@4.0.4",
      "type": "library",
      "version": "4.0.4"
    },
    {
      "bom-ref": "pkg:npm/proc-log@6.1.0?package-id=3b89122886f314c5",
      "cpe": "cpe:2.3:a:proc-log:proc-log:6.1.0:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "name": "proc-log",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc-log:proc_log:6.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc_log:proc-log:6.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc_log:proc_log:6.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc:proc-log:6.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:proc:proc_log:6.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/proc-log@6.1.0",
      "type": "library",
      "version": "6.1.0"
    },
    {
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@3.25.5?package-id=cdca137f341bcdb0",
      "cpe": "cpe:2.3:a:com.google.protobuf:protobuf-java:3.25.5:*:*:*:*:*:*:*",
      "group": "com.google.protobuf",
      "name": "protobuf-java",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.google.protobuf:protobuf_java:3.25.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.google.protobuf:protobuf:3.25.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf-java:3.25.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf_java:3.25.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf-java:3.25.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf_java:3.25.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf-java:protobuf:3.25.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf-java:3.25.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf_java:3.25.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf_java:protobuf:3.25.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf-java:3.25.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf_java:3.25.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:protobuf:protobuf:3.25.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:protobuf:3.25.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-extensions/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "protobuf-java"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.protobuf"
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@3.25.5",
      "type": "library",
      "version": "3.25.5"
    },
    {
      "bom-ref": "pkg:github/pypa/gh-action-pypi-publish@v1.14.0?package-id=8ac90912e6248fdf",
      "cpe": "cpe:2.3:a:pypa\\/gh-action-pypi-publish:pypa\\/gh-action-pypi-publish:v1.14.0:*:*:*:*:*:*:*",
      "name": "pypa/gh-action-pypi-publish",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh-action-pypi-publish:pypa\\/gh_action_pypi_publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh_action_pypi_publish:pypa\\/gh-action-pypi-publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh_action_pypi_publish:pypa\\/gh_action_pypi_publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh-action-pypi:pypa\\/gh-action-pypi-publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh-action-pypi:pypa\\/gh_action_pypi_publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh_action_pypi:pypa\\/gh-action-pypi-publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh_action_pypi:pypa\\/gh_action_pypi_publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh-action:pypa\\/gh-action-pypi-publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh-action:pypa\\/gh_action_pypi_publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh_action:pypa\\/gh-action-pypi-publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh_action:pypa\\/gh_action_pypi_publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh:pypa\\/gh-action-pypi-publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh:pypa\\/gh_action_pypi_publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/release-compiler.yaml"
        }
      ],
      "purl": "pkg:github/pypa/gh-action-pypi-publish@v1.14.0",
      "type": "library",
      "version": "v1.14.0"
    },
    {
      "bom-ref": "pkg:github/pypa/gh-action-pypi-publish@v1.14.0?package-id=f5b6ba53d896c5df",
      "cpe": "cpe:2.3:a:pypa\\/gh-action-pypi-publish:pypa\\/gh-action-pypi-publish:v1.14.0:*:*:*:*:*:*:*",
      "name": "pypa/gh-action-pypi-publish",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh-action-pypi-publish:pypa\\/gh_action_pypi_publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh_action_pypi_publish:pypa\\/gh-action-pypi-publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh_action_pypi_publish:pypa\\/gh_action_pypi_publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh-action-pypi:pypa\\/gh-action-pypi-publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh-action-pypi:pypa\\/gh_action_pypi_publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh_action_pypi:pypa\\/gh-action-pypi-publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh_action_pypi:pypa\\/gh_action_pypi_publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh-action:pypa\\/gh-action-pypi-publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh-action:pypa\\/gh_action_pypi_publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh_action:pypa\\/gh-action-pypi-publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh_action:pypa\\/gh_action_pypi_publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh:pypa\\/gh-action-pypi-publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pypa\\/gh:pypa\\/gh_action_pypi_publish:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/release-python.yaml"
        }
      ],
      "purl": "pkg:github/pypa/gh-action-pypi-publish@v1.14.0",
      "type": "library",
      "version": "v1.14.0"
    },
    {
      "bom-ref": "pkg:github/reactivecircus/android-emulator-runner@v2.38.0?package-id=fa2e3de486670209",
      "cpe": "cpe:2.3:a:reactivecircus\\/android-emulator-runner:reactivecircus\\/android-emulator-runner:v2.38.0:*:*:*:*:*:*:*",
      "name": "reactivecircus/android-emulator-runner",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactivecircus\\/android-emulator-runner:reactivecircus\\/android_emulator_runner:v2.38.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactivecircus\\/android_emulator_runner:reactivecircus\\/android-emulator-runner:v2.38.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactivecircus\\/android_emulator_runner:reactivecircus\\/android_emulator_runner:v2.38.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactivecircus\\/android-emulator:reactivecircus\\/android-emulator-runner:v2.38.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactivecircus\\/android-emulator:reactivecircus\\/android_emulator_runner:v2.38.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactivecircus\\/android_emulator:reactivecircus\\/android-emulator-runner:v2.38.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactivecircus\\/android_emulator:reactivecircus\\/android_emulator_runner:v2.38.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactivecircus\\/android:reactivecircus\\/android-emulator-runner:v2.38.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reactivecircus\\/android:reactivecircus\\/android_emulator_runner:v2.38.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/ci.yml"
        }
      ],
      "purl": "pkg:github/reactivecircus/android-emulator-runner@v2.38.0",
      "type": "library",
      "version": "v2.38.0"
    },
    {
      "bom-ref": "pkg:maven/com.esotericsoftware/reflectasm@1.11.3?package-id=e6f875f721bc0853",
      "cpe": "cpe:2.3:a:com.esotericsoftware:reflectasm:1.11.3:*:*:*:*:*:*:*",
      "group": "com.esotericsoftware",
      "name": "reflectasm",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:esotericsoftware:reflectasm:1.11.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:reflectasm:reflectasm:1.11.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-test-core/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "reflectasm"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.esotericsoftware"
        }
      ],
      "purl": "pkg:maven/com.esotericsoftware/reflectasm@1.11.3",
      "type": "library",
      "version": "1.11.3"
    },
    {
      "bom-ref": "pkg:github/rust-lang/crates-io-auth-action@v1.0.6?package-id=a8c91004e29f0a5e",
      "cpe": "cpe:2.3:a:rust-lang\\/crates-io-auth-action:rust-lang\\/crates-io-auth-action:v1.0.6:*:*:*:*:*:*:*",
      "name": "rust-lang/crates-io-auth-action",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust-lang\\/crates-io-auth-action:rust_lang\\/crates_io_auth_action:v1.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust_lang\\/crates_io_auth_action:rust-lang\\/crates-io-auth-action:v1.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust_lang\\/crates_io_auth_action:rust_lang\\/crates_io_auth_action:v1.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust-lang\\/crates-io-auth:rust-lang\\/crates-io-auth-action:v1.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust-lang\\/crates-io-auth:rust_lang\\/crates_io_auth_action:v1.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust_lang\\/crates_io_auth:rust-lang\\/crates-io-auth-action:v1.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust_lang\\/crates_io_auth:rust_lang\\/crates_io_auth_action:v1.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust-lang\\/crates-io:rust-lang\\/crates-io-auth-action:v1.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust-lang\\/crates-io:rust_lang\\/crates_io_auth_action:v1.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust_lang\\/crates_io:rust-lang\\/crates-io-auth-action:v1.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust_lang\\/crates_io:rust_lang\\/crates_io_auth_action:v1.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust-lang\\/crates:rust-lang\\/crates-io-auth-action:v1.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust-lang\\/crates:rust_lang\\/crates_io_auth_action:v1.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust_lang\\/crates:rust-lang\\/crates-io-auth-action:v1.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust_lang\\/crates:rust_lang\\/crates_io_auth_action:v1.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust:rust-lang\\/crates-io-auth-action:v1.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rust:rust_lang\\/crates_io_auth_action:v1.0.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/release-rust.yaml"
        }
      ],
      "purl": "pkg:github/rust-lang/crates-io-auth-action@v1.0.6",
      "type": "library",
      "version": "v1.0.6"
    },
    {
      "bom-ref": "pkg:github/sbt/setup-sbt@v1.5.13?package-id=93d14b8e1a5f780a",
      "cpe": "cpe:2.3:a:sbt\\/setup-sbt:sbt\\/setup-sbt:v1.5.13:*:*:*:*:*:*:*",
      "name": "sbt/setup-sbt",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sbt\\/setup-sbt:sbt\\/setup_sbt:v1.5.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sbt\\/setup_sbt:sbt\\/setup-sbt:v1.5.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sbt\\/setup_sbt:sbt\\/setup_sbt:v1.5.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sbt\\/setup:sbt\\/setup-sbt:v1.5.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sbt\\/setup:sbt\\/setup_sbt:v1.5.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/ci.yml"
        }
      ],
      "purl": "pkg:github/sbt/setup-sbt@v1.5.13",
      "type": "library",
      "version": "v1.5.13"
    },
    {
      "bom-ref": "pkg:github/sbt/setup-sbt@v1.5.13?package-id=c240a707fa5c6ec9",
      "cpe": "cpe:2.3:a:sbt\\/setup-sbt:sbt\\/setup-sbt:v1.5.13:*:*:*:*:*:*:*",
      "name": "sbt/setup-sbt",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sbt\\/setup-sbt:sbt\\/setup_sbt:v1.5.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sbt\\/setup_sbt:sbt\\/setup-sbt:v1.5.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sbt\\/setup_sbt:sbt\\/setup_sbt:v1.5.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sbt\\/setup:sbt\\/setup-sbt:v1.5.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sbt\\/setup:sbt\\/setup_sbt:v1.5.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/release-jvm-snapshot.yaml"
        }
      ],
      "purl": "pkg:github/sbt/setup-sbt@v1.5.13",
      "type": "library",
      "version": "v1.5.13"
    },
    {
      "bom-ref": "pkg:github/sbt/setup-sbt@v1.5.13?package-id=7c6d5bf87010d2ae",
      "cpe": "cpe:2.3:a:sbt\\/setup-sbt:sbt\\/setup-sbt:v1.5.13:*:*:*:*:*:*:*",
      "name": "sbt/setup-sbt",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sbt\\/setup-sbt:sbt\\/setup_sbt:v1.5.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sbt\\/setup_sbt:sbt\\/setup-sbt:v1.5.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sbt\\/setup_sbt:sbt\\/setup_sbt:v1.5.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sbt\\/setup:sbt\\/setup-sbt:v1.5.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sbt\\/setup:sbt\\/setup_sbt:v1.5.13:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/stage-release-candidate.yml"
        }
      ],
      "purl": "pkg:github/sbt/setup-sbt@v1.5.13",
      "type": "library",
      "version": "v1.5.13"
    },
    {
      "bom-ref": "pkg:npm/semver@7.8.5?package-id=d0a9b6bbd492754d",
      "cpe": "cpe:2.3:a:npmjs:semver:7.8.5:*:*:*:*:node.js:*:*",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "name": "semver",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/semver@7.8.5",
      "type": "library",
      "version": "7.8.5"
    },
    {
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@2.0.12?package-id=e96526c633f61cd4",
      "cpe": "cpe:2.3:a:org.slf4j:slf4j-api:2.0.12:*:*:*:*:*:*:*",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:org.slf4j:slf4j_api:2.0.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-api:slf4j-api:2.0.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j-api:slf4j_api:2.0.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j-api:2.0.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j_api:slf4j_api:2.0.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j-api:2.0.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:slf4j:slf4j_api:2.0.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-core/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "slf4j-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.slf4j"
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@2.0.12",
      "type": "library",
      "version": "2.0.12"
    },
    {
      "bom-ref": "pkg:maven/org.apache.spark/spark-sql_2.13@3.5.7?package-id=7592f976508f7151",
      "cpe": "cpe:2.3:a:apache:spark-sql-2.13:3.5.7:*:*:*:*:*:*:*",
      "group": "org.apache.spark",
      "name": "spark-sql_2.13",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:spark-sql_2.13:3.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:spark_sql_2.13:3.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:apache:spark:3.5.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-testsuite/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "spark-sql_2.13"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.apache.spark"
        }
      ],
      "purl": "pkg:maven/org.apache.spark/spark-sql_2.13@3.5.7",
      "type": "library",
      "version": "3.5.7"
    },
    {
      "bom-ref": "pkg:github/subosito/flutter-action@v2?package-id=a68a10a4641d57ca",
      "cpe": "cpe:2.3:a:subosito\\/flutter-action:subosito\\/flutter-action:v2:*:*:*:*:*:*:*",
      "name": "subosito/flutter-action",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "github-actions-usage-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "github-action"
        },
        {
          "name": "syft:package:metadataType",
          "value": "github-actions-use-statement"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:subosito\\/flutter-action:subosito\\/flutter_action:v2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:subosito\\/flutter_action:subosito\\/flutter-action:v2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:subosito\\/flutter_action:subosito\\/flutter_action:v2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:subosito\\/flutter:subosito\\/flutter-action:v2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:subosito\\/flutter:subosito\\/flutter_action:v2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/.github/workflows/ci.yml"
        }
      ],
      "purl": "pkg:github/subosito/flutter-action@v2",
      "type": "library",
      "version": "v2"
    },
    {
      "bom-ref": "pkg:swift/github.com/swiftlang/swift-syntax@600.0.1?package-id=261644e824bb0e58",
      "cpe": "cpe:2.3:a:swift-syntax:swift-syntax:600.0.1:*:*:*:*:*:*:*",
      "name": "swift-syntax",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "swift-package-manager-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "swift"
        },
        {
          "name": "syft:package:type",
          "value": "swift"
        },
        {
          "name": "syft:package:metadataType",
          "value": "swift-package-manager-lock-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swift-syntax:swift_syntax:600.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swift_syntax:swift-syntax:600.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swift_syntax:swift_syntax:600.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swift:swift-syntax:600.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:swift:swift_syntax:600.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/swift/Package.resolved"
        }
      ],
      "purl": "pkg:swift/github.com/swiftlang/swift-syntax@600.0.1",
      "type": "library",
      "version": "600.0.1"
    },
    {
      "bom-ref": "pkg:maven/com.google.devtools.ksp/symbol-processing-api@2.3.8?package-id=3a31187a56ac8107",
      "cpe": "cpe:2.3:a:com.google.devtools.ksp:symbol-processing-api:2.3.8:*:*:*:*:*:*:*",
      "group": "com.google.devtools.ksp",
      "name": "symbol-processing-api",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.google.devtools.ksp:symbol_processing_api:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:symbol-processing-api:symbol-processing-api:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:symbol-processing-api:symbol_processing_api:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:symbol_processing_api:symbol-processing-api:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:symbol_processing_api:symbol_processing_api:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:symbol-processing:symbol-processing-api:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:symbol-processing:symbol_processing_api:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:symbol_processing:symbol-processing-api:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:symbol_processing:symbol_processing_api:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:devtools:symbol-processing-api:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:devtools:symbol_processing_api:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:symbol-processing-api:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:symbol_processing_api:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:symbol:symbol-processing-api:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:symbol:symbol_processing_api:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ksp:symbol-processing-api:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ksp:symbol_processing_api:2.3.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/kotlin/fory-json-kotlin-ksp/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "symbol-processing-api"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.google.devtools.ksp"
        }
      ],
      "purl": "pkg:maven/com.google.devtools.ksp/symbol-processing-api@2.3.8",
      "type": "library",
      "version": "2.3.8"
    },
    {
      "bom-ref": "pkg:npm/tar@7.5.22?package-id=80e68364dbdff16d",
      "cpe": "cpe:2.3:a:tar_project:tar:7.5.22:*:*:*:*:node.js:*:*",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "name": "tar",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tar_project:tar:7.5.22:*:*:*:*:rust:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:isaacs:tar:7.5.22:*:*:*:*:node.js:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/tar@7.5.22",
      "type": "library",
      "version": "7.5.22"
    },
    {
      "bom-ref": "pkg:maven/org.testng/testng@7.5.1?package-id=ed8d92221c14cce8",
      "cpe": "cpe:2.3:a:org.testng:testng:7.5.1:*:*:*:*:*:*:*",
      "group": "org.testng",
      "name": "testng",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:testng:testng:7.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-annotation-processor/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "testng"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "org.testng"
        }
      ],
      "purl": "pkg:maven/org.testng/testng@7.5.1",
      "type": "library",
      "version": "7.5.1"
    },
    {
      "bom-ref": "pkg:npm/tinyglobby@0.2.17?package-id=fdd914927f3740fc",
      "cpe": "cpe:2.3:a:tinyglobby:tinyglobby:0.2.17:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "tinyglobby",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/tinyglobby@0.2.17",
      "type": "library",
      "version": "0.2.17"
    },
    {
      "bom-ref": "pkg:npm/tslib@2.8.1?package-id=0308ea4b01f0d700",
      "cpe": "cpe:2.3:a:tslib:tslib:2.8.1:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "0BSD"
          }
        }
      ],
      "name": "tslib",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/tslib@2.8.1",
      "type": "library",
      "version": "2.8.1"
    },
    {
      "bom-ref": "pkg:npm/undici@6.29.1?package-id=1abee5028595164d",
      "cpe": "cpe:2.3:a:nodejs:undici:6.29.1:*:*:*:*:node.js:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "undici",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/undici@6.29.1",
      "type": "library",
      "version": "6.29.1"
    },
    {
      "bom-ref": "pkg:npm/universalify@2.0.1?package-id=08f785ea0e1ac16d",
      "cpe": "cpe:2.3:a:universalify:universalify:2.0.1:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "name": "universalify",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/universalify@2.0.1",
      "type": "library",
      "version": "2.0.1"
    },
    {
      "bom-ref": "pkg:npm/which@6.0.1?package-id=925655207eb65ead",
      "cpe": "cpe:2.3:a:which:which:6.0.1:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "name": "which",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/which@6.0.1",
      "type": "library",
      "version": "6.0.1"
    },
    {
      "bom-ref": "pkg:npm/yallist@5.0.0?package-id=bf441da658f2223e",
      "cpe": "cpe:2.3:a:yallist:yallist:5.0.0:*:*:*:*:*:*:*",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0"
          }
        }
      ],
      "name": "yallist",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "javascript-lock-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "javascript"
        },
        {
          "name": "syft:package:type",
          "value": "npm"
        },
        {
          "name": "syft:package:metadataType",
          "value": "javascript-npm-package-lock-entry"
        },
        {
          "name": "syft:location:0:path",
          "value": "/javascript/package-lock.json"
        }
      ],
      "purl": "pkg:npm/yallist@5.0.0",
      "type": "library",
      "version": "5.0.0"
    },
    {
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.6-9?package-id=14ff77d816b1c9e5",
      "cpe": "cpe:2.3:a:com.github.luben:zstd-jni:1.5.6-9:*:*:*:*:*:*:*",
      "group": "com.github.luben",
      "name": "zstd-jni",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "java-pom-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "java"
        },
        {
          "name": "syft:package:type",
          "value": "java-archive"
        },
        {
          "name": "syft:package:metadataType",
          "value": "java-archive"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:com.github.luben:zstd_jni:1.5.6-9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:zstd-jni:1.5.6-9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd-jni:zstd_jni:1.5.6-9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd-jni:1.5.6-9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd_jni:zstd_jni:1.5.6-9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd-jni:1.5.6-9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:github:zstd_jni:1.5.6-9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd-jni:1.5.6-9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:luben:zstd_jni:1.5.6-9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd-jni:1.5.6-9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:zstd:zstd_jni:1.5.6-9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:path",
          "value": "/java/fory-extensions/pom.xml"
        },
        {
          "name": "syft:metadata:-:artifactID",
          "value": "zstd-jni"
        },
        {
          "name": "syft:metadata:-:groupID",
          "value": "com.github.luben"
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.6-9",
      "type": "library",
      "version": "1.5.6-9"
    },
    {
      "bom-ref": "27ea18269b857254",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f6624240a1b6d0286ea71725c22fa4555590c946"
        },
        {
          "alg": "SHA-256",
          "content": "205b5b28430d10c1f04e4c059b5e756b7696fa6353af96e2e8025c6f7bb5c420"
        }
      ],
      "name": "/.github/workflows/asf-allowlist.yml",
      "type": "file"
    },
    {
      "bom-ref": "681cb42217e47686",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ced3dbde0b49966bd65b7eda36255c29f4bf710f"
        },
        {
          "alg": "SHA-256",
          "content": "d065767658e17d1f0d3dd380d5156a240bf3ddcd3b83e09b69477365b6cae215"
        }
      ],
      "name": "/.github/workflows/build-containerized-pr.yml",
      "type": "file"
    },
    {
      "bom-ref": "13dea271767f8eaf",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3edfe350c2172fbd6f2fd3019a44a78742445d4f"
        },
        {
          "alg": "SHA-256",
          "content": "a9aa41c60dfbbb122f2e47413e3472229cb6925aeaf4e6a14422810e82748506"
        }
      ],
      "name": "/.github/workflows/build-containerized-release.yml",
      "type": "file"
    },
    {
      "bom-ref": "5797fab5d6bf998d",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "31042d4411944043f2a371be03b54d9df9f266de"
        },
        {
          "alg": "SHA-256",
          "content": "a94003269cf00d69cb43f6ca467467e54a5ec21af2570a9fcb4dfe6bd9984fc5"
        }
      ],
      "name": "/.github/workflows/build-native-pr.yml",
      "type": "file"
    },
    {
      "bom-ref": "85a45ce7fec3c956",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "97be04dc3cb6f529b17a0a02ce393d809fae8d48"
        },
        {
          "alg": "SHA-256",
          "content": "262fde733c069a40a7ddb1453cf0ec3567cee9776b8f0d0550d0f3829271d44c"
        }
      ],
      "name": "/.github/workflows/build-native-release.yml",
      "type": "file"
    },
    {
      "bom-ref": "7561d461b00ff11d",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "48d461286ae35b638594f4fd55d3cf50aa5a4511"
        },
        {
          "alg": "SHA-256",
          "content": "d9bc19557fb7db923cb046ce04d90f50ed669802c905633c53836e986580e138"
        }
      ],
      "name": "/.github/workflows/ci.yml",
      "type": "file"
    },
    {
      "bom-ref": "5ebde7ddc8076c2b",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "80837cf498ba95968bd23dd487bb621b78ef9c45"
        },
        {
          "alg": "SHA-256",
          "content": "5d04f74c24a68ba395d406823bdbe1778aa27ade3d1774d1d3060185d89ae8e4"
        }
      ],
      "name": "/.github/workflows/lint.yml",
      "type": "file"
    },
    {
      "bom-ref": "7a40caaaf8f4dc20",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a26b044276f7e94b490b1caffdd618dfdf210201"
        },
        {
          "alg": "SHA-256",
          "content": "32f0d93ad6a9b164965dbfd839b322085aad3d6aae22ebf94c1d673069a78e5a"
        }
      ],
      "name": "/.github/workflows/pr-lint.yml",
      "type": "file"
    },
    {
      "bom-ref": "17285aff709064e0",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fc7a2e269a10d049a5600e540832509a2ca871d2"
        },
        {
          "alg": "SHA-256",
          "content": "9f5eb29379f241e10bda9e3754b09d721681acc57b3e2cd1d0c043fe1b354bf6"
        }
      ],
      "name": "/.github/workflows/release-compiler.yaml",
      "type": "file"
    },
    {
      "bom-ref": "b57564420846bafc",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "59b86b0a6db36125fb7a838dabbdc8d830c78ff9"
        },
        {
          "alg": "SHA-256",
          "content": "5a54dbe8eadd45749058e5cee30e3aaeaf1aa6cddf6af87c3f633847d47f17b8"
        }
      ],
      "name": "/.github/workflows/release-csharp.yaml",
      "type": "file"
    },
    {
      "bom-ref": "1472be0f7811c261",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b20d6a8cb2823200bfc7dbb544992635deb5ed1b"
        },
        {
          "alg": "SHA-256",
          "content": "24bf84dd0d7af5db120b086ed76ed4fab1a6db43a024168d236d511eb8ad96db"
        }
      ],
      "name": "/.github/workflows/release-dart.yaml",
      "type": "file"
    },
    {
      "bom-ref": "50ee05de8dba9510",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "36443934c42c2a88be5f60e196ef4bc7b5f2f9ce"
        },
        {
          "alg": "SHA-256",
          "content": "236c9b9ddc29d56c7b8689a12f96188107449da6ef4b8ad159f62c594e2c5686"
        }
      ],
      "name": "/.github/workflows/release-javascript.yaml",
      "type": "file"
    },
    {
      "bom-ref": "9452bb7ad2fdb775",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "494416291adabf810cbdc0e79cc5da393f308b7a"
        },
        {
          "alg": "SHA-256",
          "content": "8022b82d6dd8a40889db39b3c49c6312b76176a8a93b82d57f54e1756a1070a7"
        }
      ],
      "name": "/.github/workflows/release-jvm-snapshot.yaml",
      "type": "file"
    },
    {
      "bom-ref": "b0ac9b147b5e05a6",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d74b8a86b3974b598a8806ebd7d5f35059dd3bca"
        },
        {
          "alg": "SHA-256",
          "content": "25e205e35a50bc371b3e853930efc4a1a9762848e60c4b7483d362e53923d224"
        }
      ],
      "name": "/.github/workflows/release-python.yaml",
      "type": "file"
    },
    {
      "bom-ref": "3cd1c6858c30459b",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "01e0edf9366a958073efd826b264f426b7c22cd6"
        },
        {
          "alg": "SHA-256",
          "content": "1eedb9ba3043189c8215cf09377a3a1658c24557cdef67a96522b78900183fa5"
        }
      ],
      "name": "/.github/workflows/release-rust.yaml",
      "type": "file"
    },
    {
      "bom-ref": "171adff4787bb936",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0910f89168edd1520f15f02c8198e4e448df7d2c"
        },
        {
          "alg": "SHA-256",
          "content": "bc256bfb75661fd4b2ea05fbd46e09798ab3c04bfc2b2edad58f44c098080a1b"
        }
      ],
      "name": "/.github/workflows/stage-release-candidate.yml",
      "type": "file"
    },
    {
      "bom-ref": "cbbb57827f0f16c5",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5a7ee19570afc0f0f32be8b8be1511a9fc5eec9f"
        },
        {
          "alg": "SHA-256",
          "content": "c77227bec7fea2bd1b40c1d9e5e5344fdc6945dfeb64711ba75e3b5618942e28"
        }
      ],
      "name": "/.github/workflows/sync.yml",
      "type": "file"
    },
    {
      "bom-ref": "9be3ca4979292081",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3f3b354f67ccfdc12ad676cbe1ed6f091cee1e78"
        },
        {
          "alg": "SHA-256",
          "content": "80b3ccd9547aeb31d366c0f8aedaee24e35f03db2b826b4387731de5852b71ce"
        }
      ],
      "name": "/dart/packages/external-type-test-models/pubspec.yaml",
      "type": "file"
    },
    {
      "bom-ref": "01696ba83a771652",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "27f50412cd6efe729df999451dff706e02658743"
        },
        {
          "alg": "SHA-256",
          "content": "eb458d0d69530023edfb0c22b52d44b7b95435dcdd15aa73aba818b0f5a77017"
        }
      ],
      "name": "/dart/packages/fory-test/pubspec.yaml",
      "type": "file"
    },
    {
      "bom-ref": "054c2dbb7d062990",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d96818e344221f58f3373a694d5b5b5192b1707"
        },
        {
          "alg": "SHA-256",
          "content": "3560dd023259a37618c077a98e8156ff3273e52aaf2894f6d8ea6a67be71b8d8"
        }
      ],
      "name": "/dart/packages/fory/pubspec.yaml",
      "type": "file"
    },
    {
      "bom-ref": "54ec18d0b99b7517",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8dcfa160e6f2a9315c070999596435c2432d1c32"
        },
        {
          "alg": "SHA-256",
          "content": "b40c29164e505c703878b59791bd89fe9defc6652dd226880117041382c0e0cb"
        }
      ],
      "name": "/dart/packages/inheritance-test-models/pubspec.yaml",
      "type": "file"
    },
    {
      "bom-ref": "8496c6ae3016541d",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1ac01a552c63721f0dde5bef863fdf3e5d8ce21b"
        },
        {
          "alg": "SHA-256",
          "content": "091ac2daadd0681606e13aecb987d9937c96b2fb821b8b9b96eba4f7f3c5092c"
        }
      ],
      "name": "/dart/pubspec.yaml",
      "type": "file"
    },
    {
      "bom-ref": "9241f2792b88c558",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e26c2b136108b94bb838e0385b0aa95c3291e5ed"
        },
        {
          "alg": "SHA-256",
          "content": "3da5b3ffc0f6822191ba6cbaea451dfea1613e43b62b087fb439be0309b057fa"
        }
      ],
      "name": "/go/fory/go.mod",
      "type": "file"
    },
    {
      "bom-ref": "202d08db4203706f",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cd757b6f718b5771afe336e3f4ae54aef083fd1a"
        },
        {
          "alg": "SHA-256",
          "content": "6b47409fa037d3282b415bd75b73d2b96223c39a113b6393a7a559e48090849d"
        }
      ],
      "name": "/java/fory-annotation-processor/pom.xml",
      "type": "file"
    },
    {
      "bom-ref": "7c05954c477a496e",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ba69a8808f4f5a528bf36160a19c108c0a6d45b3"
        },
        {
          "alg": "SHA-256",
          "content": "00775ca68c3b1eabbd00514aac52bb0f8e566e9b119b3f35643821bcd75c39b8"
        }
      ],
      "name": "/java/fory-core/pom.xml",
      "type": "file"
    },
    {
      "bom-ref": "43becb497e9dc3ff",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b224c87f2d7d55a738811bfd3b3c0832a1d13258"
        },
        {
          "alg": "SHA-256",
          "content": "42dd3a6d835ba80e19f53ef1b4a8f6e85f2e0a9ba4cfc32477cc1a303f3b30e4"
        }
      ],
      "name": "/java/fory-extensions/pom.xml",
      "type": "file"
    },
    {
      "bom-ref": "534a1eb339e8141e",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e5477df6ac853831dd4610738573d9e0a54af590"
        },
        {
          "alg": "SHA-256",
          "content": "a44656257f587b19f7257af77a8f5ac92df0936600d538c15ca793662a7ab8c1"
        }
      ],
      "name": "/java/fory-format/pom.xml",
      "type": "file"
    },
    {
      "bom-ref": "f71e6c52079fd946",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5bdee37fe0f03ecd8a14250de6e4e95eb47e9cc7"
        },
        {
          "alg": "SHA-256",
          "content": "ba5041ce70d6b5713887ae8b74ea3b637ee0cd1f431056f0939bb0b1647f3f99"
        }
      ],
      "name": "/java/fory-json/pom.xml",
      "type": "file"
    },
    {
      "bom-ref": "3d84b2ddf5d223fe",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "45faafe6fc49ee8007d46f3b1e94a791d7a63494"
        },
        {
          "alg": "SHA-256",
          "content": "798804ef4b27a215121a2efb7e8d33d8fefa172af6b55b4adbf22a418be3fd51"
        }
      ],
      "name": "/java/fory-latest-jdk-tests/pom.xml",
      "type": "file"
    },
    {
      "bom-ref": "6ca9efd20fc3f354",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bbe97d16512fcf418ba8032af1d30668dd62e41a"
        },
        {
          "alg": "SHA-256",
          "content": "c220a601a1c9b6e5e254d95f6ee3f1c958e0cd11a569fc5a30c506334cc88279"
        }
      ],
      "name": "/java/fory-test-core/pom.xml",
      "type": "file"
    },
    {
      "bom-ref": "3dbf81f41580cb26",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5c0578bb2128b1199ffc3c661ba30b7d50ac96fa"
        },
        {
          "alg": "SHA-256",
          "content": "c0015bc7f1625a418b28a8336f761c37271c8b192ed6750471ccbb10699dea8f"
        }
      ],
      "name": "/java/fory-testsuite/pom.xml",
      "type": "file"
    },
    {
      "bom-ref": "96b283d3686e2071",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "98836832aaa0df75f607d691c5dee86c93a31608"
        },
        {
          "alg": "SHA-256",
          "content": "5d4b8cf3fa6a2a3d7d985cf9f606ae59247a38434d6e5498626ace94fdc6faed"
        }
      ],
      "name": "/java/pom.xml",
      "type": "file"
    },
    {
      "bom-ref": "773a1be24b18b837",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3db5478262bab21d20003000e31fa1592b447a33"
        },
        {
          "alg": "SHA-256",
          "content": "0736e78afdbf8e0ef84a5e9b5de3d31ef72932c62bc14d04317e575ad8b63065"
        }
      ],
      "name": "/javascript/package-lock.json",
      "type": "file"
    },
    {
      "bom-ref": "67190d00f568a897",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5541532d1b46a7eb4e02702d9001ae9300107faf"
        },
        {
          "alg": "SHA-256",
          "content": "7145459ecc3316874e73ce9928379ab7b0c7f0b0fad2397916c7ee8451806a82"
        }
      ],
      "name": "/kotlin/fory-json-kotlin-ksp/pom.xml",
      "type": "file"
    },
    {
      "bom-ref": "ddd12fca8864f09a",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "35dba86845a3447ddd335c1be3be29304118383f"
        },
        {
          "alg": "SHA-256",
          "content": "92817a8393ee4d1b654636593cbafc7edd1549fe8431c6a5c7b12fb49d386dd4"
        }
      ],
      "name": "/kotlin/fory-json-kotlin/pom.xml",
      "type": "file"
    },
    {
      "bom-ref": "7e780565e9ca3517",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b32f50b23a389f181935314135c85f7e79fbb408"
        },
        {
          "alg": "SHA-256",
          "content": "25a28fee4a53218b8f871b63675e929f01f5deb1e937a8a7f2951078fb0b0ff9"
        }
      ],
      "name": "/kotlin/fory-kotlin-ksp/pom.xml",
      "type": "file"
    },
    {
      "bom-ref": "c47612a0e6060874",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8f0db05b9d4451370ba17e3156108712df2641eb"
        },
        {
          "alg": "SHA-256",
          "content": "2ec3e6175f48d3d1465ebe23a755797d9387dd925ef67948ccabd5a8a58709b9"
        }
      ],
      "name": "/kotlin/fory-kotlin-tests/pom.xml",
      "type": "file"
    },
    {
      "bom-ref": "00f6c8ca2d03004f",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5ef18198959d72cb44ff4b1512116f03bf516366"
        },
        {
          "alg": "SHA-256",
          "content": "da0c739b6b2c2509853c24943eec7341cb1518ca288de538e4311d70f709ecf0"
        }
      ],
      "name": "/kotlin/fory-kotlin/pom.xml",
      "type": "file"
    },
    {
      "bom-ref": "af9ce92f73021848",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e9616293bb2a4c92f43eb3a4cd67815cc7d7283e"
        },
        {
          "alg": "SHA-256",
          "content": "fd0c3730b8dbd17127ec2ea577d942f3568bce9d9158963030330b47ef61f9c8"
        }
      ],
      "name": "/kotlin/pom.xml",
      "type": "file"
    },
    {
      "bom-ref": "1c718f5ebfafeaa7",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e0249d22676d65b1d24cd729443df5d042446478"
        },
        {
          "alg": "SHA-256",
          "content": "fcca22ad5959568a23e509e13ff616cd1c8619243eec63d625dfc262fb8bbfed"
        }
      ],
      "name": "/swift/Package.resolved",
      "type": "file"
    }
  ],
  "compositions": [
    {
      "aggregate": "incomplete",
      "assemblies": [
        "af63bd4c8601b7f1"
      ]
    }
  ],
  "dependencies": [
    {
      "dependsOn": [
        "pkg:maven/org.apache.fory/fory-core@1.7.8?package-id=ae7fb2be15c7e52e",
        "pkg:maven/org.apache.fory/fory-json@1.7.8?package-id=b45270dbff2b927e",
        "pkg:maven/org.testng/testng@7.5.1?package-id=ed8d92221c14cce8"
      ],
      "ref": "pkg:maven/org.apache.fory/fory-annotation-processor@1.7.8?package-id=8d6d8555937acbc4"
    },
    {
      "dependsOn": [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?package-id=57a3f0a86b61de97",
        "pkg:maven/com.google.guava/guava@33.8.0-jre?package-id=474c7eadd79aef0b",
        "pkg:maven/org.apache.fory/fory-test-core@1.7.8?package-id=e9fce77b022bdf5c",
        "pkg:maven/org.codehaus.janino/janino@3.1.12?package-id=3e744949e7a490a9",
        "pkg:maven/org.graalvm.sdk/graal-sdk@23.1.0?package-id=f7f61fa6e79f8aa2",
        "pkg:maven/org.graalvm.sdk/nativeimage@23.1.0?package-id=233ce5da6f247ed7",
        "pkg:maven/org.mockito/mockito-core@4.11.0?package-id=bbc2b9b1bcaf2cea",
        "pkg:maven/org.slf4j/slf4j-api@2.0.12?package-id=e96526c633f61cd4"
      ],
      "ref": "pkg:maven/org.apache.fory/fory-core@1.7.8?package-id=ae7fb2be15c7e52e"
    },
    {
      "dependsOn": [
        "pkg:maven/com.github.luben/zstd-jni@1.5.6-9?package-id=14ff77d816b1c9e5",
        "pkg:maven/com.google.protobuf/protobuf-java@3.25.5?package-id=cdca137f341bcdb0",
        "pkg:maven/org.apache.fory/fory-core@1.7.8?package-id=ae7fb2be15c7e52e",
        "pkg:maven/org.apache.fory/fory-test-core@1.7.8?package-id=e9fce77b022bdf5c"
      ],
      "ref": "pkg:maven/org.apache.fory/fory-extensions@1.7.8?package-id=7fa47f5d5daf8740"
    },
    {
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind?package-id=4438217a7e947f7d",
        "pkg:maven/com.google.guava/guava@33.8.0-jre?package-id=474c7eadd79aef0b",
        "pkg:maven/org.apache.arrow/arrow-memory-core@18.3.0?package-id=a6817dd6d11cada9",
        "pkg:maven/org.apache.arrow/arrow-memory-unsafe@18.3.0?package-id=c55a6a7dd936f1fd",
        "pkg:maven/org.apache.arrow/arrow-vector@18.3.0?package-id=82f2371af43b8769",
        "pkg:maven/org.apache.fory/fory-core@1.7.8?package-id=ae7fb2be15c7e52e",
        "pkg:maven/org.apache.fory/fory-test-core@1.7.8?package-id=e9fce77b022bdf5c"
      ],
      "ref": "pkg:maven/org.apache.fory/fory-format@1.7.8?package-id=caafdfbd10b6d1e0"
    },
    {
      "dependsOn": [
        "pkg:maven/com.google.devtools.ksp/symbol-processing-api@2.3.8?package-id=3a31187a56ac8107",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.20?package-id=aaf1d81b056b646b",
        "pkg:maven/org.jetbrains.kotlin/kotlin-test-testng@2.3.20?package-id=8545854594519588"
      ],
      "ref": "pkg:maven/org.apache.fory/fory-json-kotlin-ksp@1.7.8?package-id=2a282b14ad7482cc"
    },
    {
      "dependsOn": [
        "pkg:maven/org.apache.fory/fory-json@1.7.8?package-id=b45270dbff2b927e",
        "pkg:maven/org.jetbrains.kotlin/kotlin-metadata-jvm@2.3.20?package-id=ac954724cb57b30b",
        "pkg:maven/org.jetbrains.kotlin/kotlin-reflect@2.3.20?package-id=884bf28693ada203",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.20?package-id=aaf1d81b056b646b",
        "pkg:maven/org.jetbrains.kotlin/kotlin-test-testng@2.3.20?package-id=8545854594519588"
      ],
      "ref": "pkg:maven/org.apache.fory/fory-json-kotlin@1.7.8?package-id=ed520e275a62d39d"
    },
    {
      "dependsOn": [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?package-id=57a3f0a86b61de97",
        "pkg:maven/com.google.guava/guava@33.8.0-jre?package-id=474c7eadd79aef0b",
        "pkg:maven/org.apache.fory/fory-core@1.7.8?package-id=ae7fb2be15c7e52e",
        "pkg:maven/org.apache.fory/fory-test-core@1.7.8?package-id=e9fce77b022bdf5c",
        "pkg:maven/org.graalvm.sdk/graal-sdk@23.1.0?package-id=f7f61fa6e79f8aa2",
        "pkg:maven/org.graalvm.sdk/nativeimage@23.1.0?package-id=233ce5da6f247ed7"
      ],
      "ref": "pkg:maven/org.apache.fory/fory-json@1.7.8?package-id=b45270dbff2b927e"
    },
    {
      "dependsOn": [
        "pkg:maven/com.google.devtools.ksp/symbol-processing-api@2.3.8?package-id=3a31187a56ac8107",
        "pkg:maven/org.apache.fory/fory-kotlin@1.7.8?package-id=d81dcaed7dfe7db1",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.20?package-id=aaf1d81b056b646b",
        "pkg:maven/org.jetbrains.kotlin/kotlin-test-testng@2.3.20?package-id=8545854594519588"
      ],
      "ref": "pkg:maven/org.apache.fory/fory-kotlin-ksp@1.7.8?package-id=770b2f0ae81400ee"
    },
    {
      "dependsOn": [
        "pkg:maven/org.apache.fory/fory-kotlin@1.7.8?package-id=d81dcaed7dfe7db1",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.20?package-id=aaf1d81b056b646b"
      ],
      "ref": "pkg:maven/org.apache.fory/fory-kotlin-tests@1.7.8?package-id=1ea89304ac3a5156"
    },
    {
      "dependsOn": [
        "pkg:maven/org.apache.fory/fory-core@1.7.8?package-id=ae7fb2be15c7e52e",
        "pkg:maven/org.jetbrains.kotlin/kotlin-reflect@2.3.20?package-id=884bf28693ada203",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.20?package-id=aaf1d81b056b646b",
        "pkg:maven/org.jetbrains.kotlin/kotlin-test-testng@2.3.20?package-id=8545854594519588"
      ],
      "ref": "pkg:maven/org.apache.fory/fory-kotlin@1.7.8?package-id=d81dcaed7dfe7db1"
    },
    {
      "dependsOn": [
        "pkg:maven/org.apache.fory/fory-annotation-processor@1.7.8?package-id=8d6d8555937acbc4",
        "pkg:maven/org.apache.fory/fory-core@1.7.8?package-id=ae7fb2be15c7e52e",
        "pkg:maven/org.apache.fory/fory-format@1.7.8?package-id=caafdfbd10b6d1e0",
        "pkg:maven/org.apache.fory/fory-test-core@1.7.8?package-id=e9fce77b022bdf5c",
        "pkg:maven/org.mockito/mockito-core@4.11.0?package-id=bbc2b9b1bcaf2cea"
      ],
      "ref": "pkg:maven/org.apache.fory/fory-latest-jdk-tests@1.7.8?package-id=4231cae5580f952c"
    },
    {
      "dependsOn": [
        "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?package-id=5ec697defac230d1",
        "pkg:maven/com.esotericsoftware/kryo@5.5.0?package-id=09771cad6fa70b77",
        "pkg:maven/com.esotericsoftware/reflectasm@1.11.3?package-id=e6f875f721bc0853",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.11?package-id=a94699f5753422a1",
        "pkg:maven/com.github.olivergondza/maven-jdk-tools-wrapper@0.1?package-id=7098b786c229c77c",
        "pkg:maven/de.ruedigermoeller/fst@2.57?package-id=c257a0231a8a4242",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?package-id=3c323a7b18e64ba2",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.5?package-id=243be0eff1384366",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.5?package-id=1285d05b2a6c27a4",
        "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.25.5?package-id=d360599fe74be267",
        "pkg:maven/org.codehaus.janino/janino@3.1.12?package-id=3e744949e7a490a9",
        "pkg:maven/org.projectlombok/lombok@1.18.48?package-id=74a750df11774a7f",
        "pkg:maven/org.testng/testng@7.5.1?package-id=ed8d92221c14cce8"
      ],
      "ref": "pkg:maven/org.apache.fory/fory-test-core@1.7.8?package-id=e9fce77b022bdf5c"
    },
    {
      "dependsOn": [
        "pkg:maven/com.alibaba/fastjson@1.2.84?package-id=863ab2339e528e03",
        "pkg:maven/com.esotericsoftware.minlog/minlog@1.2?package-id=5ec697defac230d1",
        "pkg:maven/com.esotericsoftware/kryo@4.0.0?package-id=6dca43c7868468f2",
        "pkg:maven/com.esotericsoftware/reflectasm@1.11.3?package-id=e6f875f721bc0853",
        "pkg:maven/com.google.guava/guava@33.8.0-jre?package-id=474c7eadd79aef0b",
        "pkg:maven/de.ruedigermoeller/fst@2.57?package-id=c257a0231a8a4242",
        "pkg:maven/it.unimi.dsi/fastutil@8.5.6?package-id=6882fcf1e8f7054f",
        "pkg:maven/org.apache.fory/fory-core@1.7.8?package-id=ae7fb2be15c7e52e",
        "pkg:maven/org.apache.fory/fory-format@1.7.8?package-id=caafdfbd10b6d1e0",
        "pkg:maven/org.apache.fory/fory-test-core@1.7.8?package-id=e9fce77b022bdf5c",
        "pkg:maven/org.apache.spark/spark-sql_2.13@3.5.7?package-id=7592f976508f7151",
        "pkg:maven/org.slf4j/slf4j-api@2.0.12?package-id=e96526c633f61cd4",
        "pkg:maven/org.testng/testng@7.5.1?package-id=ed8d92221c14cce8"
      ],
      "ref": "pkg:maven/org.apache.fory/fory-testsuite@1.7.8?package-id=e93028ac398b78f5"
    },
    {
      "dependsOn": [
        "pkg:npm/node-gyp@12.4.0?package-id=4aecf037814af1d1",
        "pkg:npm/tslib@2.8.1?package-id=0308ea4b01f0d700"
      ],
      "ref": "pkg:npm/%40apache-fory/core@1.7.8?package-id=b46024928f945dfa"
    },
    {
      "dependsOn": [
        "pkg:npm/bindings@1.2.1?package-id=31033b818af73152",
        "pkg:npm/fs-extra@11.3.5?package-id=59de452ea597dd65",
        "pkg:npm/nan@2.27.0?package-id=de119a54ebcb93cc",
        "pkg:npm/node-gyp@12.4.0?package-id=4aecf037814af1d1"
      ],
      "ref": "pkg:npm/%40apache-fory/hps@1.7.8?package-id=e02958b77ab128ab"
    },
    {
      "dependsOn": [
        "pkg:npm/minipass@7.1.3?package-id=bbec71090b493b3b"
      ],
      "ref": "pkg:npm/%40isaacs/fs-minipass@4.0.1?package-id=42d1b408f6c030e0"
    },
    {
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.11?package-id=bbe74d0411f8ebea",
        "pkg:npm/jsonfile@6.2.1?package-id=37a5ff5c1c493b89",
        "pkg:npm/universalify@2.0.1?package-id=08f785ea0e1ac16d"
      ],
      "ref": "pkg:npm/fs-extra@11.3.5?package-id=59de452ea597dd65"
    },
    {
      "dependsOn": [
        "pkg:npm/universalify@2.0.1?package-id=08f785ea0e1ac16d"
      ],
      "ref": "pkg:npm/jsonfile@6.2.1?package-id=37a5ff5c1c493b89"
    },
    {
      "dependsOn": [
        "pkg:npm/minipass@7.1.3?package-id=bbec71090b493b3b"
      ],
      "ref": "pkg:npm/minizlib@3.1.0?package-id=a416e114aee04c8d"
    },
    {
      "dependsOn": [
        "pkg:npm/env-paths@2.2.1?package-id=ffcc832fb9e2dede",
        "pkg:npm/exponential-backoff@3.1.3?package-id=6f34a1fcea03a0ab",
        "pkg:npm/graceful-fs@4.2.11?package-id=bbe74d0411f8ebea",
        "pkg:npm/nopt@9.0.0?package-id=ade16af0bec5a16f",
        "pkg:npm/proc-log@6.1.0?package-id=3b89122886f314c5",
        "pkg:npm/semver@7.8.5?package-id=d0a9b6bbd492754d",
        "pkg:npm/tar@7.5.22?package-id=80e68364dbdff16d",
        "pkg:npm/tinyglobby@0.2.17?package-id=fdd914927f3740fc",
        "pkg:npm/undici@6.29.1?package-id=1abee5028595164d",
        "pkg:npm/which@6.0.1?package-id=925655207eb65ead"
      ],
      "ref": "pkg:npm/node-gyp@12.4.0?package-id=4aecf037814af1d1"
    },
    {
      "dependsOn": [
        "pkg:npm/abbrev@4.0.0?package-id=56a71347558e307d"
      ],
      "ref": "pkg:npm/nopt@9.0.0?package-id=ade16af0bec5a16f"
    },
    {
      "dependsOn": [
        "pkg:npm/%40isaacs/fs-minipass@4.0.1?package-id=42d1b408f6c030e0",
        "pkg:npm/chownr@3.0.0?package-id=8b3aa59475f01435",
        "pkg:npm/minipass@7.1.3?package-id=bbec71090b493b3b",
        "pkg:npm/minizlib@3.1.0?package-id=a416e114aee04c8d",
        "pkg:npm/yallist@5.0.0?package-id=bf441da658f2223e"
      ],
      "ref": "pkg:npm/tar@7.5.22?package-id=80e68364dbdff16d"
    },
    {
      "dependsOn": [
        "pkg:npm/fdir@6.5.0?package-id=9e6636a8bbae7911",
        "pkg:npm/picomatch@4.0.4?package-id=e49c6beac20fc24c"
      ],
      "ref": "pkg:npm/tinyglobby@0.2.17?package-id=fdd914927f3740fc"
    },
    {
      "dependsOn": [
        "pkg:npm/isexe@4.0.0?package-id=ab42ff7a026025a9"
      ],
      "ref": "pkg:npm/which@6.0.1?package-id=925655207eb65ead"
    }
  ],
  "metadata": {
    "component": {
      "bom-ref": "af63bd4c8601b7f1",
      "description": "Source archive inventory from included manifests and lock files; not a resolved dependency inventory of built runtime packages.",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b18c54fe15c9f5803c8948be62644c37e9d36d544a952030db82dcdc2342b50591f17f16b17cb9d6a5ab6b100f89e2558a185a7533dc8b6ae1c63ea4feb1ba2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "name": "apache-fory-1.7.8-src.tar.gz",
      "supplier": {
        "name": "The Apache Software Foundation"
      },
      "type": "file",
      "version": "1.7.8"
    },
    "supplier": {
      "name": "The Apache Software Foundation"
    },
    "timestamp": "2026-11-09T12:39:11Z",
    "tools": {
      "components": [
        {
          "author": "anchore",
          "name": "syft",
          "type": "application",
          "version": "1.57.0"
        }
      ]
    }
  },
  "serialNumber": "urn:uuid:8a5062d6-9384-5fc6-9978-20529ef6c4b0",
  "specVersion": "1.6",
  "version": 1
}