{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:999b6c24-4319-41a0-9bc4-6bd5a89d71cd",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-26T21:48:51Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "name": "pfcli-sbom",
          "version": "1.6.132",
          "manufacturer": {
            "name": "CloudLinux"
          }
        }
      ]
    },
    "component": {
      "type": "application",
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-docker@2.21.1-tuxcare.1",
      "group": "org.apache.logging.log4j",
      "name": "log4j-docker",
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-docker@2.21.1-tuxcare.1",
      "version": "2.21.1-tuxcare.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-api@2.21.1-tuxcare.1",
      "group": "org.apache.logging.log4j",
      "name": "log4j-api",
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-api@2.21.1-tuxcare.1",
      "version": "2.21.1-tuxcare.1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-core@2.21.1-tuxcare.1",
      "group": "org.apache.logging.log4j",
      "name": "log4j-core",
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-core@2.21.1-tuxcare.1",
      "version": "2.21.1-tuxcare.1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2",
      "version": "2.15.2",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2-tuxcare.1",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2-tuxcare.1",
      "version": "2.15.2-tuxcare.1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2-tuxcare.1",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2-tuxcare.1",
      "version": "2.15.2-tuxcare.1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/biz.aQute.bnd/biz.aQute.bnd.annotation@6.4.1",
      "group": "biz.aQute.bnd",
      "name": "biz.aQute.bnd.annotation",
      "purl": "pkg:maven/biz.aQute.bnd/biz.aQute.bnd.annotation@6.4.1",
      "version": "6.4.1",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "(Apache-2.0 OR EPL-2.0)",
            "url": "https://opensource.org/licenses/Apache-2.0,https://opensource.org/licenses/EPL-2.0"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.osgi/org.osgi.resource@1.0.0",
      "group": "org.osgi",
      "name": "org.osgi.resource",
      "purl": "pkg:maven/org.osgi/org.osgi.resource@1.0.0",
      "version": "1.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://opensource.org/licenses/apache2.0.php"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.osgi/org.osgi.service.serviceloader@1.0.0",
      "group": "org.osgi",
      "name": "org.osgi.service.serviceloader",
      "purl": "pkg:maven/org.osgi/org.osgi.service.serviceloader@1.0.0",
      "version": "1.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://opensource.org/licenses/apache2.0.php"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.osgi/osgi.annotation@8.1.0",
      "group": "org.osgi",
      "name": "osgi.annotation",
      "purl": "pkg:maven/org.osgi/osgi.annotation@8.1.0",
      "version": "8.1.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.osgi/org.osgi.annotation.bundle@2.0.0",
      "group": "org.osgi",
      "name": "org.osgi.annotation.bundle",
      "purl": "pkg:maven/org.osgi/org.osgi.annotation.bundle@2.0.0",
      "version": "2.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.osgi/org.osgi.annotation.versioning@1.1.2",
      "group": "org.osgi",
      "name": "org.osgi.annotation.versioning",
      "purl": "pkg:maven/org.osgi/org.osgi.annotation.versioning@1.1.2",
      "version": "1.1.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.3",
      "group": "com.github.spotbugs",
      "name": "spotbugs-annotations",
      "purl": "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.3",
      "version": "4.7.3",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1",
            "url": "https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
      "version": "3.0.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.logging.log4j/log4j-docker@2.21.1-tuxcare.1",
      "dependsOn": [
        "pkg:maven/biz.aQute.bnd/biz.aQute.bnd.annotation@6.4.1",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2-tuxcare.1",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2-tuxcare.1",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.3",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.21.1-tuxcare.1",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.21.1-tuxcare.1",
        "pkg:maven/org.osgi/org.osgi.annotation.bundle@2.0.0",
        "pkg:maven/org.osgi/osgi.annotation@8.1.0"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.logging.log4j/log4j-api@2.21.1-tuxcare.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.logging.log4j/log4j-core@2.21.1-tuxcare.1",
      "dependsOn": [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.21.1-tuxcare.1"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2-tuxcare.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2-tuxcare.1",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2-tuxcare.1"
      ]
    },
    {
      "ref": "pkg:maven/biz.aQute.bnd/biz.aQute.bnd.annotation@6.4.1",
      "dependsOn": [
        "pkg:maven/org.osgi/org.osgi.resource@1.0.0",
        "pkg:maven/org.osgi/org.osgi.service.serviceloader@1.0.0"
      ]
    },
    {
      "ref": "pkg:maven/org.osgi/org.osgi.resource@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.osgi/org.osgi.service.serviceloader@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.osgi/osgi.annotation@8.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.osgi/org.osgi.annotation.bundle@2.0.0",
      "dependsOn": [
        "pkg:maven/org.osgi/org.osgi.annotation.versioning@1.1.2"
      ]
    },
    {
      "ref": "pkg:maven/org.osgi/org.osgi.annotation.versioning@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.3",
      "dependsOn": [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2"
      ]
    },
    {
      "ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2",
      "dependsOn": []
    }
  ]
}