<?xml version="1.0"?>
<bom serialNumber="urn:uuid:3e671687-395b-41f5-a30f-a58921a69b79" version="1" xmlns="http://cyclonedx.org/schema/bom/1.3">
    <metadata>
        <timestamp>2020-04-07T07:01:00Z</timestamp>
        <tools>
            <tool>
                <vendor>Awesome Vendor</vendor>
                <name>Awesome Tool</name>
                <version>9.1.2</version>
                <hashes>
                    <hash alg="SHA-1">25ed8e31b995bb927966616df2a42b979a2717f0</hash>
                    <hash alg="SHA-256">a74f733635a19aefb1f73e5947cef59cd7440c6952ef0f03d09d974274cbd6df</hash>
                </hashes>
            </tool>
        </tools>
        <authors>
            <author>
                <name>Samantha Wright</name>
                <email>samantha.wright@example.com</email>
                <phone>800-555-1212</phone>
            </author>
        </authors>
        <component type="application">
            <author>Acme Super Heros</author>
            <name>Acme Application</name>
            <version>9.1.1</version>
            <swid tagId="swidgen-242eb18a-503e-ca37-393b-cf156ef09691_9.1.1" name="Acme Application" version="9.1.1">
                <text content-type="text/xml" encoding="base64">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</text>
            </swid>
        </component>
        <manufacture>
            <name>Acme, Inc.</name>
            <url>https://example.com</url>
            <contact>
                <name>Acme Professional Services</name>
                <email>professional.services@example.com</email>
            </contact>
        </manufacture>
        <supplier>
            <name>Acme, Inc.</name>
            <url>https://example.com</url>
            <contact>
                <name>Acme Distribution</name>
                <email>distribution@example.com</email>
            </contact>
        </supplier>
    </metadata>
    <components>
        <component type="application">
            <author>Acme Super Heros</author>
            <publisher>Acme Inc</publisher>
            <group>com.acme</group>
            <name>tomcat-catalina</name>
            <version>9.0.14</version>
            <description>Modified version of Apache Catalina</description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">3942447fac867ae5cdb3229b658f4d48</hash>
                <hash alg="SHA-1">e6b1000b94e835ffd37f4c6dcbdad43f4b48a02a</hash>
                <hash alg="SHA-256">f498a8ff2dd007e29c2074f5e4b01a9a01775c3ff3aeaf6906ea503bc5791b7b</hash>
                <hash alg="SHA-512">e8f33e424f3f4ed6db76a482fde1a5298970e442c531729119e37991884bdffab4f9426b7ee11fccd074eeda0634d71697d6f88a460dce0ac8d627a29f7d1282</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                    <text content-type="text/plain" encoding="base64">[encoded data, 15144 characters]</text>
                    <url>https://www.apache.org/licenses/LICENSE-2.0.txt</url>
                </license>
            </licenses>
            <purl>pkg:maven/com.acme/tomcat-catalina@9.0.14?packaging=jar</purl>
            <pedigree>
                <ancestors>
                    <component type="application">
                        <author>Apache Super Heros</author>
                        <publisher>Apache</publisher>
                        <group>org.apache.tomcat</group>
                        <name>tomcat-catalina</name>
                        <version>9.0.14</version>
                        <description>Apache Catalina</description>
                        <licenses>
                            <license>
                                <id>Apache-2.0</id>
                            </license>
                        </licenses>
                        <purl>pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.14?packaging=jar</purl>
                    </component>
                </ancestors>
                <commits>
                    <commit>
                        <uid>7638417db6d59f3c431d3e1f261cc637155684cd</uid>
                        <url>https://location/to/7638417db6d59f3c431d3e1f261cc637155684cd</url>
                        <author>
                            <timestamp>2018-11-07T22:01:45Z</timestamp>
                            <name>John Doe</name>
                            <email>john.doe@example.com</email>
                        </author>
                        <committer>
                            <timestamp>2018-11-07T22:01:45Z</timestamp>
                            <name>Jane Doe</name>
                            <email>jane.doe@example.com</email>
                        </committer>
                        <message>Initial commit</message>
                    </commit>
                </commits>
                <notes>Commentary here</notes>
            </pedigree>
        </component>
        <component type="library">
            <supplier>
                <name>Example Inc.</name>
                <url>https://example.com</url>
                <url>https://example.net</url>
                <contact>
                    <name>Example Support AMER</name>
                    <email>support@example.com</email>
                    <phone>800-555-1212</phone>
                </contact>
                <contact>
                    <name>Example Support APAC</name>
                    <email>support@apac.example.com</email>
                </contact>
            </supplier>
            <author>Example Super Heros</author>
            <group>org.example</group>
            <name>mylibrary</name>
            <version>1.0.0</version>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">2342c2eaf1feb9a80195dbaddf2ebaa3</hash>
                <hash alg="SHA-1">68b78babe00a053f9e35ec6a2d9080f5b90122b0</hash>
                <hash alg="SHA-256">708f1f53b41f11f02d12a11b1a38d2905d47b099afc71a0f1124ef8582ec7313</hash>
                <hash alg="SHA-512">387b7ae16b9cae45f830671541539bf544202faae5aac544a93b7b0a04f5f846fa2f4e81ef3f1677e13aed7496408a441f5657ab6d54423e56bf6f38da124aef</hash>
            </hashes>
            <licenses>
                <expression>EPL-2.0 OR GPL-2.0-with-classpath-exception</expression>
            </licenses>
            <copyright>Copyright Example Inc. All rights reserved.</copyright>
            <cpe>cpe:/a:example:myapplication:1.0.0</cpe>
            <purl>pkg:maven/com.example/myapplication@1.0.0?packaging=war</purl>
            <modified>false</modified>
            <externalReferences>
                <reference type="documentation">
                    <url>http://example.org/docs</url>
                    <comment>All component versions are documented here</comment>
                </reference>
                <reference type="advisories">
                    <url>http://example.org/security</url>
                </reference>
            </externalReferences>
        </component>
        <component type="framework">
            <author>Example Super Heros</author>
            <group>com.example</group>
            <name>myframework</name>
            <version>1.0.0</version>
            <description>Example Inc, enterprise framework</description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">cfcb0b64aacd2f81c1cd546543de965a</hash>
                <hash alg="SHA-1">7fbeef2346c45d565c3341f037bce4e088af8a52</hash>
                <hash alg="SHA-256">0384db3cec55d86a6898c489fdb75a8e75fe66b26639634983d2f3c3558493d1</hash>
                <hash alg="SHA-512">854909cdb9e3ca183056837144aab6d8069b377bd66445087cc7157bf0c3f620418705dd0b83bdc2f73a508c2bdb316ca1809d75ee6972d02023a3e7dd655c79</hash>
            </hashes>
            <licenses>
                <license>
                    <name>Some random license</name>
                </license>
            </licenses>
            <purl>pkg:maven/com.example/myframework@1.0.0?packaging=war</purl>
            <modified>false</modified>
            <externalReferences>
                <reference type="website">
                    <url>http://example.com/myframework</url>
                </reference>
                <reference type="advisories">
                    <url>http://example.com/security</url>
                </reference>
            </externalReferences>
        </component>
    </components>
</bom>
