{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:077a3e24-3c87-4177-a181-fc38574fa364",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-22T18:25:37Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "name": "pfcli-sbom",
          "version": "1.6.118",
          "manufacturer": {
            "name": "CloudLinux"
          }
        }
      ]
    },
    "component": {
      "type": "application",
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-jakarta-web@2.20.0-tuxcare.2",
      "group": "org.apache.logging.log4j",
      "name": "log4j-jakarta-web",
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-jakarta-web@2.20.0-tuxcare.2",
      "version": "2.20.0-tuxcare.2",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0",
      "group": "jakarta.servlet",
      "name": "jakarta.servlet-api",
      "purl": "pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0",
      "version": "5.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "EPL 2.0",
            "url": "http://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "name": "GPL2 w/ CPE",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0-tuxcare.2",
      "group": "org.apache.logging.log4j",
      "name": "log4j-api",
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0-tuxcare.2",
      "version": "2.20.0-tuxcare.2",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0-tuxcare.2",
      "group": "org.apache.logging.log4j",
      "name": "log4j-core",
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0-tuxcare.2",
      "version": "2.20.0-tuxcare.2",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0.txt"
          }
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.logging.log4j/log4j-jakarta-web@2.20.0-tuxcare.2",
      "dependsOn": [
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0-tuxcare.2",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0-tuxcare.2"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0-tuxcare.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0-tuxcare.2",
      "dependsOn": [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0-tuxcare.2"
      ]
    }
  ]
}