{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4e538730-e7b3-422c-bad8-18b4e5bfc433",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-13T11:35:48Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "name": "pfcli-sbom",
          "version": "1.6.98",
          "manufacturer": {
            "name": "CloudLinux"
          }
        }
      ]
    },
    "component": {
      "type": "application",
      "bom-ref": "pkg:maven/org.apache.rocketmq/rocketmq-example@4.8.0-tuxcare.1",
      "group": "org.apache.rocketmq",
      "name": "rocketmq-example",
      "purl": "pkg:maven/org.apache.rocketmq/rocketmq-example@4.8.0-tuxcare.1",
      "version": "4.8.0-tuxcare.1",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ]
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.rocketmq/rocketmq-client@4.8.0-tuxcare.1",
      "group": "org.apache.rocketmq",
      "name": "rocketmq-client",
      "purl": "pkg:maven/org.apache.rocketmq/rocketmq-client@4.8.0-tuxcare.1",
      "version": "4.8.0-tuxcare.1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.rocketmq/rocketmq-common@4.8.0-tuxcare.1",
      "group": "org.apache.rocketmq",
      "name": "rocketmq-common",
      "purl": "pkg:maven/org.apache.rocketmq/rocketmq-common@4.8.0-tuxcare.1",
      "version": "4.8.0-tuxcare.1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.rocketmq/rocketmq-remoting@4.8.0-tuxcare.1",
      "group": "org.apache.rocketmq",
      "name": "rocketmq-remoting",
      "purl": "pkg:maven/org.apache.rocketmq/rocketmq-remoting@4.8.0-tuxcare.1",
      "version": "4.8.0-tuxcare.1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.4-tuxcare.1",
      "group": "org.apache.commons",
      "name": "commons-lang3",
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.4-tuxcare.1",
      "version": "3.4-tuxcare.1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-validator/commons-validator@1.6",
      "group": "commons-validator",
      "name": "commons-validator",
      "purl": "pkg:maven/commons-validator/commons-validator@1.6",
      "version": "1.6",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.rocketmq/rocketmq-srvutil@4.8.0-tuxcare.1",
      "group": "org.apache.rocketmq",
      "name": "rocketmq-srvutil",
      "purl": "pkg:maven/org.apache.rocketmq/rocketmq-srvutil@4.8.0-tuxcare.1",
      "version": "4.8.0-tuxcare.1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.alibaba/fastjson@1.2.69",
      "group": "com.alibaba",
      "name": "fastjson",
      "purl": "pkg:maven/com.alibaba/fastjson@1.2.69",
      "version": "1.2.69",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Apache 2",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.netty/netty-all@4.0.42.Final",
      "group": "io.netty",
      "name": "netty-all",
      "purl": "pkg:maven/io.netty/netty-all@4.0.42.Final",
      "version": "4.0.42.Final",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.rocketmq/rocketmq-logging@4.8.0-tuxcare.1",
      "group": "org.apache.rocketmq",
      "name": "rocketmq-logging",
      "purl": "pkg:maven/org.apache.rocketmq/rocketmq-logging@4.8.0-tuxcare.1",
      "version": "4.8.0-tuxcare.1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.netty/netty-tcnative-boringssl-static@1.1.33.Fork26",
      "group": "io.netty",
      "name": "netty-tcnative-boringssl-static",
      "purl": "pkg:maven/io.netty/netty-tcnative-boringssl-static@1.1.33.Fork26",
      "version": "1.1.33.Fork26",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-cli/commons-cli@1.2",
      "group": "commons-cli",
      "name": "commons-cli",
      "purl": "pkg:maven/commons-cli/commons-cli@1.2",
      "version": "1.2",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.rocketmq/rocketmq-openmessaging@4.8.0-tuxcare.1",
      "group": "org.apache.rocketmq",
      "name": "rocketmq-openmessaging",
      "purl": "pkg:maven/org.apache.rocketmq/rocketmq-openmessaging@4.8.0-tuxcare.1",
      "version": "4.8.0-tuxcare.1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.openmessaging/openmessaging-api@0.3.1-alpha",
      "group": "io.openmessaging",
      "name": "openmessaging-api",
      "purl": "pkg:maven/io.openmessaging/openmessaging-api@0.3.1-alpha",
      "version": "0.3.1-alpha",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.rocketmq/rocketmq-acl@4.8.0-tuxcare.1",
      "group": "org.apache.rocketmq",
      "name": "rocketmq-acl",
      "purl": "pkg:maven/org.apache.rocketmq/rocketmq-acl@4.8.0-tuxcare.1",
      "version": "4.8.0-tuxcare.1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.yaml/snakeyaml@1.19",
      "group": "org.yaml",
      "name": "snakeyaml",
      "purl": "pkg:maven/org.yaml/snakeyaml@1.19",
      "version": "1.19",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.9",
      "group": "commons-codec",
      "name": "commons-codec",
      "purl": "pkg:maven/commons-codec/commons-codec@1.9",
      "version": "1.9",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-beanutils/commons-beanutils@1.9.2",
      "group": "commons-beanutils",
      "name": "commons-beanutils",
      "purl": "pkg:maven/commons-beanutils/commons-beanutils@1.9.2",
      "version": "1.9.2",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.2",
      "group": "commons-logging",
      "name": "commons-logging",
      "purl": "pkg:maven/commons-logging/commons-logging@1.2",
      "version": "1.2",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-collections/commons-collections@3.2.2",
      "group": "commons-collections",
      "name": "commons-collections",
      "purl": "pkg:maven/commons-collections/commons-collections@3.2.2",
      "version": "3.2.2",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-digester/commons-digester@1.8.1",
      "group": "commons-digester",
      "name": "commons-digester",
      "purl": "pkg:maven/commons-digester/commons-digester@1.8.1",
      "version": "1.8.1",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "The Apache Software License, Version 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-classic@1.0.13",
      "group": "ch.qos.logback",
      "name": "logback-classic",
      "purl": "pkg:maven/ch.qos.logback/logback-classic@1.0.13",
      "version": "1.0.13",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Eclipse Public License - v 1.0",
            "url": "http://www.eclipse.org/legal/epl-v10.html"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License",
            "url": "http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-core@1.0.13",
      "group": "ch.qos.logback",
      "name": "logback-core",
      "purl": "pkg:maven/ch.qos.logback/logback-core@1.0.13",
      "version": "1.0.13",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Eclipse Public License - v 1.0",
            "url": "http://www.eclipse.org/legal/epl-v10.html"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License",
            "url": "http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.7",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.7",
      "version": "1.7.7",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "MIT License",
            "url": "http://www.opensource.org/licenses/mit-license.php"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.javassist/javassist@3.20.0-GA",
      "group": "org.javassist",
      "name": "javassist",
      "purl": "pkg:maven/org.javassist/javassist@3.20.0-GA",
      "version": "3.20.0-GA",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "MPL 1.1",
            "url": "http://www.mozilla.org/MPL/MPL-1.1.html"
          }
        },
        {
          "license": {
            "name": "LGPL 2.1",
            "url": "http://www.gnu.org/licenses/lgpl-2.1.html"
          }
        },
        {
          "license": {
            "name": "Apache License 2.0",
            "url": "http://www.apache.org/licenses/"
          }
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.rocketmq/rocketmq-example@4.8.0-tuxcare.1",
      "dependsOn": [
        "pkg:maven/ch.qos.logback/logback-classic@1.0.13",
        "pkg:maven/org.apache.rocketmq/rocketmq-acl@4.8.0-tuxcare.1",
        "pkg:maven/org.apache.rocketmq/rocketmq-client@4.8.0-tuxcare.1",
        "pkg:maven/org.apache.rocketmq/rocketmq-openmessaging@4.8.0-tuxcare.1",
        "pkg:maven/org.apache.rocketmq/rocketmq-srvutil@4.8.0-tuxcare.1",
        "pkg:maven/org.javassist/javassist@3.20.0-GA"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.rocketmq/rocketmq-client@4.8.0-tuxcare.1",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.4-tuxcare.1",
        "pkg:maven/org.apache.rocketmq/rocketmq-common@4.8.0-tuxcare.1"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.rocketmq/rocketmq-common@4.8.0-tuxcare.1",
      "dependsOn": [
        "pkg:maven/commons-validator/commons-validator@1.6",
        "pkg:maven/org.apache.commons/commons-lang3@3.4-tuxcare.1",
        "pkg:maven/org.apache.rocketmq/rocketmq-remoting@4.8.0-tuxcare.1"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.rocketmq/rocketmq-remoting@4.8.0-tuxcare.1",
      "dependsOn": [
        "pkg:maven/com.alibaba/fastjson@1.2.69",
        "pkg:maven/io.netty/netty-all@4.0.42.Final",
        "pkg:maven/io.netty/netty-tcnative-boringssl-static@1.1.33.Fork26",
        "pkg:maven/org.apache.rocketmq/rocketmq-logging@4.8.0-tuxcare.1"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-lang3@3.4-tuxcare.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/commons-validator/commons-validator@1.6",
      "dependsOn": [
        "pkg:maven/commons-beanutils/commons-beanutils@1.9.2",
        "pkg:maven/commons-collections/commons-collections@3.2.2",
        "pkg:maven/commons-digester/commons-digester@1.8.1",
        "pkg:maven/commons-logging/commons-logging@1.2"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.rocketmq/rocketmq-srvutil@4.8.0-tuxcare.1",
      "dependsOn": [
        "pkg:maven/commons-cli/commons-cli@1.2",
        "pkg:maven/org.apache.rocketmq/rocketmq-common@4.8.0-tuxcare.1",
        "pkg:maven/org.apache.rocketmq/rocketmq-remoting@4.8.0-tuxcare.1"
      ]
    },
    {
      "ref": "pkg:maven/com.alibaba/fastjson@1.2.69",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.netty/netty-all@4.0.42.Final",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.rocketmq/rocketmq-logging@4.8.0-tuxcare.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.netty/netty-tcnative-boringssl-static@1.1.33.Fork26",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/commons-cli/commons-cli@1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.rocketmq/rocketmq-openmessaging@4.8.0-tuxcare.1",
      "dependsOn": [
        "pkg:maven/io.openmessaging/openmessaging-api@0.3.1-alpha",
        "pkg:maven/org.apache.rocketmq/rocketmq-client@4.8.0-tuxcare.1"
      ]
    },
    {
      "ref": "pkg:maven/io.openmessaging/openmessaging-api@0.3.1-alpha",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.rocketmq/rocketmq-acl@4.8.0-tuxcare.1",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.9",
        "pkg:maven/commons-validator/commons-validator@1.6",
        "pkg:maven/org.apache.commons/commons-lang3@3.4-tuxcare.1",
        "pkg:maven/org.apache.rocketmq/rocketmq-common@4.8.0-tuxcare.1",
        "pkg:maven/org.apache.rocketmq/rocketmq-logging@4.8.0-tuxcare.1",
        "pkg:maven/org.apache.rocketmq/rocketmq-remoting@4.8.0-tuxcare.1",
        "pkg:maven/org.apache.rocketmq/rocketmq-srvutil@4.8.0-tuxcare.1",
        "pkg:maven/org.yaml/snakeyaml@1.19"
      ]
    },
    {
      "ref": "pkg:maven/org.yaml/snakeyaml@1.19",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/commons-codec/commons-codec@1.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/commons-beanutils/commons-beanutils@1.9.2",
      "dependsOn": [
        "pkg:maven/commons-collections/commons-collections@3.2.2",
        "pkg:maven/commons-logging/commons-logging@1.2"
      ]
    },
    {
      "ref": "pkg:maven/commons-logging/commons-logging@1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/commons-collections/commons-collections@3.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/commons-digester/commons-digester@1.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-classic@1.0.13",
      "dependsOn": [
        "pkg:maven/ch.qos.logback/logback-core@1.0.13",
        "pkg:maven/org.slf4j/slf4j-api@1.7.7"
      ]
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-core@1.0.13",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.slf4j/slf4j-api@1.7.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.javassist/javassist@3.20.0-GA",
      "dependsOn": []
    }
  ]
}