{
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-13T21:30:23.898Z",
    "tools": [
      {
        "vendor": "apk-scanner.com",
        "name": "apk-scanner",
        "version": "1.0"
      }
    ],
    "component": {
      "type": "application",
      "name": "com.autonavi.minimap",
      "version": "17.00.0.2009",
      "description": "AMap Global"
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.activity/activity@1.5.1",
      "group": "androidx.activity",
      "name": "activity",
      "version": "1.5.1",
      "purl": "pkg:maven/androidx.activity/activity@1.5.1"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.annotation/annotation-experimental@1.3.1",
      "group": "androidx.annotation",
      "name": "annotation-experimental",
      "version": "1.3.1",
      "purl": "pkg:maven/androidx.annotation/annotation-experimental@1.3.1"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.arch.core/core-runtime@2.1.0",
      "group": "androidx.arch.core",
      "name": "core-runtime",
      "version": "2.1.0",
      "purl": "pkg:maven/androidx.arch.core/core-runtime@2.1.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.cardview/cardview@1.0.0",
      "group": "androidx.cardview",
      "name": "cardview",
      "version": "1.0.0",
      "purl": "pkg:maven/androidx.cardview/cardview@1.0.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.core/core@1.8.0",
      "group": "androidx.core",
      "name": "core",
      "version": "1.8.0",
      "purl": "pkg:maven/androidx.core/core@1.8.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.core/core-ktx@1.7.0",
      "group": "androidx.core",
      "name": "core-ktx",
      "version": "1.7.0",
      "purl": "pkg:maven/androidx.core/core-ktx@1.7.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.credentials/credentials@1.3.0",
      "group": "androidx.credentials",
      "name": "credentials",
      "version": "1.3.0",
      "purl": "pkg:maven/androidx.credentials/credentials@1.3.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.credentials/credentials-play-services-auth@1.3.0",
      "group": "androidx.credentials",
      "name": "credentials-play-services-auth",
      "version": "1.3.0",
      "purl": "pkg:maven/androidx.credentials/credentials-play-services-auth@1.3.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.customview/customview@1.0.0",
      "group": "androidx.customview",
      "name": "customview",
      "version": "1.0.0",
      "purl": "pkg:maven/androidx.customview/customview@1.0.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.customview/customview-poolingcontainer@1.0.0",
      "group": "androidx.customview",
      "name": "customview-poolingcontainer",
      "version": "1.0.0",
      "purl": "pkg:maven/androidx.customview/customview-poolingcontainer@1.0.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.exifinterface/exifinterface@1.3.6",
      "group": "androidx.exifinterface",
      "name": "exifinterface",
      "version": "1.3.6",
      "purl": "pkg:maven/androidx.exifinterface/exifinterface@1.3.6"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.fragment/fragment@1.5.7",
      "group": "androidx.fragment",
      "name": "fragment",
      "version": "1.5.7",
      "purl": "pkg:maven/androidx.fragment/fragment@1.5.7"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.lifecycle/lifecycle-extensions@2.1.0",
      "group": "androidx.lifecycle",
      "name": "lifecycle-extensions",
      "version": "2.1.0",
      "purl": "pkg:maven/androidx.lifecycle/lifecycle-extensions@2.1.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.lifecycle/lifecycle-livedata@2.1.0",
      "group": "androidx.lifecycle",
      "name": "lifecycle-livedata",
      "version": "2.1.0",
      "purl": "pkg:maven/androidx.lifecycle/lifecycle-livedata@2.1.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.lifecycle/lifecycle-livedata-core@2.5.1",
      "group": "androidx.lifecycle",
      "name": "lifecycle-livedata-core",
      "version": "2.5.1",
      "purl": "pkg:maven/androidx.lifecycle/lifecycle-livedata-core@2.5.1"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.lifecycle/lifecycle-process@2.1.0",
      "group": "androidx.lifecycle",
      "name": "lifecycle-process",
      "version": "2.1.0",
      "purl": "pkg:maven/androidx.lifecycle/lifecycle-process@2.1.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.lifecycle/lifecycle-runtime@2.5.1",
      "group": "androidx.lifecycle",
      "name": "lifecycle-runtime",
      "version": "2.5.1",
      "purl": "pkg:maven/androidx.lifecycle/lifecycle-runtime@2.5.1"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.lifecycle/lifecycle-service@2.1.0",
      "group": "androidx.lifecycle",
      "name": "lifecycle-service",
      "version": "2.1.0",
      "purl": "pkg:maven/androidx.lifecycle/lifecycle-service@2.1.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.lifecycle/lifecycle-viewmodel@2.5.1",
      "group": "androidx.lifecycle",
      "name": "lifecycle-viewmodel",
      "version": "2.5.1",
      "purl": "pkg:maven/androidx.lifecycle/lifecycle-viewmodel@2.5.1"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.lifecycle/lifecycle-viewmodel-savedstate@2.5.1",
      "group": "androidx.lifecycle",
      "name": "lifecycle-viewmodel-savedstate",
      "version": "2.5.1",
      "purl": "pkg:maven/androidx.lifecycle/lifecycle-viewmodel-savedstate@2.5.1"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.loader/loader@1.1.0",
      "group": "androidx.loader",
      "name": "loader",
      "version": "1.1.0",
      "purl": "pkg:maven/androidx.loader/loader@1.1.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.recyclerview/recyclerview@1.3.0",
      "group": "androidx.recyclerview",
      "name": "recyclerview",
      "version": "1.3.0",
      "purl": "pkg:maven/androidx.recyclerview/recyclerview@1.3.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.room/room-runtime@2.2.5",
      "group": "androidx.room",
      "name": "room-runtime",
      "version": "2.2.5",
      "purl": "pkg:maven/androidx.room/room-runtime@2.2.5"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.savedstate/savedstate@1.2.0",
      "group": "androidx.savedstate",
      "name": "savedstate",
      "version": "1.2.0",
      "purl": "pkg:maven/androidx.savedstate/savedstate@1.2.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.sqlite/sqlite@2.1.0",
      "group": "androidx.sqlite",
      "name": "sqlite",
      "version": "2.1.0",
      "purl": "pkg:maven/androidx.sqlite/sqlite@2.1.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.sqlite/sqlite-framework@2.1.0",
      "group": "androidx.sqlite",
      "name": "sqlite-framework",
      "version": "2.1.0",
      "purl": "pkg:maven/androidx.sqlite/sqlite-framework@2.1.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.startup/startup-runtime@1.0.0",
      "group": "androidx.startup",
      "name": "startup-runtime",
      "version": "1.0.0",
      "purl": "pkg:maven/androidx.startup/startup-runtime@1.0.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.tracing/tracing@1.0.0",
      "group": "androidx.tracing",
      "name": "tracing",
      "version": "1.0.0",
      "purl": "pkg:maven/androidx.tracing/tracing@1.0.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.versionedparcelable/versionedparcelable@1.1.1",
      "group": "androidx.versionedparcelable",
      "name": "versionedparcelable",
      "version": "1.1.1",
      "purl": "pkg:maven/androidx.versionedparcelable/versionedparcelable@1.1.1"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.viewpager2/viewpager2@1.1.0-beta02",
      "group": "androidx.viewpager2",
      "name": "viewpager2",
      "version": "1.1.0-beta02",
      "purl": "pkg:maven/androidx.viewpager2/viewpager2@1.1.0-beta02"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.viewpager/viewpager@1.0.0",
      "group": "androidx.viewpager",
      "name": "viewpager",
      "version": "1.0.0",
      "purl": "pkg:maven/androidx.viewpager/viewpager@1.0.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/androidx.work/work-runtime@2.7.0",
      "group": "androidx.work",
      "name": "work-runtime",
      "version": "2.7.0",
      "purl": "pkg:maven/androidx.work/work-runtime@2.7.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okhttp3/okhttp@3.12.13",
      "group": "com.squareup.okhttp3",
      "name": "okhttp",
      "version": "3.12.13",
      "purl": "pkg:maven/com.squareup.okhttp3/okhttp@3.12.13"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/kotlinx/coroutines_android@1.7.3",
      "group": "kotlinx",
      "name": "coroutines_android",
      "version": "1.7.3",
      "purl": "pkg:maven/kotlinx/coroutines_android@1.7.3"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/kotlinx/coroutines_core@1.7.3",
      "group": "kotlinx",
      "name": "coroutines_core",
      "version": "1.7.3",
      "purl": "pkg:maven/kotlinx/coroutines_core@1.7.3"
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2021-0341",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-0341"
      },
      "ratings": [
        {
          "severity": "medium"
        }
      ],
      "description": "Improper hostname verification in certain configurations could allow certificate spoofing / pinning bypass.",
      "recommendation": "Upgrade to 4.9.0 or later.",
      "affects": [
        {
          "ref": "pkg:maven/com.squareup.okhttp3/okhttp@3.12.13"
        }
      ]
    }
  ]
}