{
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-13T23:30:04.608Z",
    "tools": [
      {
        "vendor": "apk-scanner.com",
        "name": "apk-scanner",
        "version": "1.0"
      }
    ],
    "component": {
      "type": "application",
      "name": "com.inspectortoolbelt.inspection",
      "version": "3.20.0.0",
      "description": "Inspector Toolbelt"
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.android.material/material@1.12.0",
      "group": "com.google.android.material",
      "name": "material",
      "version": "1.12.0",
      "purl": "pkg:maven/com.google.android.material/material@1.12.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okhttp3/okhttp@3.10.0",
      "group": "com.squareup.okhttp3",
      "name": "okhttp",
      "version": "3.10.0",
      "purl": "pkg:maven/com.squareup.okhttp3/okhttp@3.10.0"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/kotlinx/coroutines_android@1.7.3",
      "group": "kotlinx",
      "name": "coroutines_android",
      "version": "1.7.3",
      "purl": "pkg:maven/kotlinx/coroutines_android@1.7.3"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/kotlinx/coroutines_core@1.7.3",
      "group": "kotlinx",
      "name": "coroutines_core",
      "version": "1.7.3",
      "purl": "pkg:maven/kotlinx/coroutines_core@1.7.3"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/kotlinx/coroutines_play_services@1.7.3",
      "group": "kotlinx",
      "name": "coroutines_play_services",
      "version": "1.7.3",
      "purl": "pkg:maven/kotlinx/coroutines_play_services@1.7.3"
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2021-0341",
      "source": {
        "name": "NVD",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-0341"
      },
      "ratings": [
        {
          "severity": "medium"
        }
      ],
      "description": "Improper hostname verification in certain configurations could allow certificate spoofing / pinning bypass.",
      "recommendation": "Upgrade to 4.9.2 or later.",
      "affects": [
        {
          "ref": "pkg:maven/com.squareup.okhttp3/okhttp@3.10.0"
        }
      ]
    }
  ]
}