{
  "bomFormat": "CycloneDX",
  "specVersion": "1.4",
  "serialNumber": "urn:uuid:11111111-1111-4111-8111-111111111111",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-01T09:00:00Z",
    "tools": [
      {
        "vendor": "Anchore",
        "name": "syft",
        "version": "1.18.1"
      }
    ],
    "component": {
      "type": "application",
      "name": "northwind-flightops",
      "version": "3.4.0",
      "description": "Northwind Avionics - FlightOps scheduling service (SYNTHETIC EVALUATION DATA)"
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-core@2.14.0",
      "group": "org.apache.logging.log4j",
      "name": "log4j-core",
      "version": "2.14.0",
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-core@2.14.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.logging.log4j/log4j-api@2.14.0",
      "group": "org.apache.logging.log4j",
      "name": "log4j-api",
      "version": "2.14.0",
      "purl": "pkg:maven/org.apache.logging.log4j/log4j-api@2.14.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-text@1.9.0",
      "group": "org.apache.commons",
      "name": "commons-text",
      "version": "1.9.0",
      "purl": "pkg:maven/org.apache.commons/commons-text@1.9.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.14.0",
      "group": "org.apache.commons",
      "name": "commons-lang3",
      "version": "3.14.0",
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.14.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/guava@33.0.0-jre",
      "group": "com.google.guava",
      "name": "guava",
      "version": "33.0.0-jre",
      "purl": "pkg:maven/com.google.guava/guava@33.0.0-jre",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@2.0.12",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "version": "2.0.12",
      "purl": "pkg:maven/org.slf4j/slf4j-api@2.0.12",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.postgresql/postgresql@42.7.2",
      "group": "org.postgresql",
      "name": "postgresql",
      "version": "42.7.2",
      "purl": "pkg:maven/org.postgresql/postgresql@42.7.2",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "version": "2.16.1",
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ]
    }
  ]
}