{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ca31a0a3-6b60-4afb-bbaa-8bc9cb5edfbb",
  "version": 1,
  "metadata": {
    "timestamp": "2026-07-30T13:01:47Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "name": "pfcli-sbom",
          "version": "1.6.32",
          "manufacturer": {
            "name": "CloudLinux"
          }
        }
      ]
    },
    "component": {
      "type": "application",
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-jdbc-dbcp2@2.22.1-tuxcare.3",
      "group": "org.apache.logging.log4j",
      "name": "log4j-jdbc-dbcp2",
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-jdbc-dbcp2@2.22.1-tuxcare.3",
      "version": "2.22.1-tuxcare.3"
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-core@2.22.1-tuxcare.3",
      "group": "org.apache.logging.log4j",
      "name": "log4j-core",
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-core@2.22.1-tuxcare.3",
      "version": "2.22.1-tuxcare.3",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-api@2.22.1-tuxcare.3",
      "group": "org.apache.logging.log4j",
      "name": "log4j-api",
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-api@2.22.1-tuxcare.3",
      "version": "2.22.1-tuxcare.3",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-dbcp2@2.11.0",
      "group": "org.apache.commons",
      "name": "commons-dbcp2",
      "purl": "pkg:maven/org.apache.commons/commons-dbcp2@2.11.0",
      "version": "2.11.0",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-pool2@2.12.0",
      "group": "org.apache.commons",
      "name": "commons-pool2",
      "purl": "pkg:maven/org.apache.commons/commons-pool2@2.12.0",
      "version": "2.12.0",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.3.0",
      "group": "commons-logging",
      "name": "commons-logging",
      "purl": "pkg:maven/commons-logging/commons-logging@1.3.0",
      "version": "1.3.0",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.transaction/jakarta.transaction-api@2.0.0",
      "group": "jakarta.transaction",
      "name": "jakarta.transaction-api",
      "purl": "pkg:maven/jakarta.transaction/jakarta.transaction-api@2.0.0",
      "version": "2.0.0",
      "scope": "required"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/biz.aQute.bnd/biz.aQute.bnd.annotation@7.0.0",
      "group": "biz.aQute.bnd",
      "name": "biz.aQute.bnd.annotation",
      "purl": "pkg:maven/biz.aQute.bnd/biz.aQute.bnd.annotation@7.0.0",
      "version": "7.0.0",
      "scope": "optional"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.osgi/org.osgi.resource@1.0.0",
      "group": "org.osgi",
      "name": "org.osgi.resource",
      "purl": "pkg:maven/org.osgi/org.osgi.resource@1.0.0",
      "version": "1.0.0",
      "scope": "optional"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.osgi/org.osgi.service.serviceloader@1.0.0",
      "group": "org.osgi",
      "name": "org.osgi.service.serviceloader",
      "purl": "pkg:maven/org.osgi/org.osgi.service.serviceloader@1.0.0",
      "version": "1.0.0",
      "scope": "optional"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.23.0",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.23.0",
      "version": "2.23.0",
      "scope": "optional"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.osgi/osgi.annotation@8.1.0",
      "group": "org.osgi",
      "name": "osgi.annotation",
      "purl": "pkg:maven/org.osgi/osgi.annotation@8.1.0",
      "version": "8.1.0",
      "scope": "optional"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.osgi/org.osgi.annotation.bundle@2.0.0",
      "group": "org.osgi",
      "name": "org.osgi.annotation.bundle",
      "purl": "pkg:maven/org.osgi/org.osgi.annotation.bundle@2.0.0",
      "version": "2.0.0",
      "scope": "optional"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.osgi/org.osgi.annotation.versioning@1.1.2",
      "group": "org.osgi",
      "name": "org.osgi.annotation.versioning",
      "purl": "pkg:maven/org.osgi/org.osgi.annotation.versioning@1.1.2",
      "version": "1.1.2",
      "scope": "optional"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.3",
      "group": "com.github.spotbugs",
      "name": "spotbugs-annotations",
      "purl": "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.3",
      "version": "4.8.3",
      "scope": "optional"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
      "version": "3.0.2",
      "scope": "optional"
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.logging.log4j/log4j-jdbc-dbcp2@2.22.1-tuxcare.3",
      "dependsOn": [
        "pkg:maven/biz.aQute.bnd/biz.aQute.bnd.annotation@7.0.0",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.3",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.23.0",
        "pkg:maven/org.apache.commons/commons-dbcp2@2.11.0",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.22.1-tuxcare.3",
        "pkg:maven/org.osgi/org.osgi.annotation.bundle@2.0.0",
        "pkg:maven/org.osgi/osgi.annotation@8.1.0"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.logging.log4j/log4j-core@2.22.1-tuxcare.3",
      "dependsOn": [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.22.1-tuxcare.3"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.logging.log4j/log4j-api@2.22.1-tuxcare.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-dbcp2@2.11.0",
      "dependsOn": [
        "pkg:maven/commons-logging/commons-logging@1.3.0",
        "pkg:maven/jakarta.transaction/jakarta.transaction-api@2.0.0",
        "pkg:maven/org.apache.commons/commons-pool2@2.12.0"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-pool2@2.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/commons-logging/commons-logging@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.transaction/jakarta.transaction-api@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/biz.aQute.bnd/biz.aQute.bnd.annotation@7.0.0",
      "dependsOn": [
        "pkg:maven/org.osgi/org.osgi.resource@1.0.0",
        "pkg:maven/org.osgi/org.osgi.service.serviceloader@1.0.0"
      ]
    },
    {
      "ref": "pkg:maven/org.osgi/org.osgi.resource@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.osgi/org.osgi.service.serviceloader@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.23.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.osgi/osgi.annotation@8.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.osgi/org.osgi.annotation.bundle@2.0.0",
      "dependsOn": [
        "pkg:maven/org.osgi/org.osgi.annotation.versioning@1.1.2"
      ]
    },
    {
      "ref": "pkg:maven/org.osgi/org.osgi.annotation.versioning@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.3",
      "dependsOn": [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2"
      ]
    },
    {
      "ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
      "dependsOn": []
    }
  ]
}