diff --git a/datatypes/pom.xml b/datatypes/pom.xml
index bb80b5be..63b4f4ae 100644
--- a/datatypes/pom.xml
+++ b/datatypes/pom.xml
@@ -40,12 +40,11 @@ JDK 8 data types.
         <!-- Inherited from oss-base. Generate PackageVersion.java.-->
         <groupId>com.google.code.maven-replacer-plugin</groupId>
         <artifactId>replacer</artifactId>
-        <executions>
-          <execution>
-            <id>process-packageVersion</id>
-            <phase>generate-sources</phase>
-          </execution>
-        </executions>
+      </plugin>
+      <!-- 29-Apr-2025, tatu: SBOM generation [JSTEP-14] -->
+      <plugin>
+        <groupId>org.cyclonedx</groupId>
+        <artifactId>cyclonedx-maven-plugin</artifactId>
       </plugin>
       <!--  28-Mar-2019, tatu: Add rudimentary JDK9+ module info. To build with JDK 8
              will have to use `moduleInfoFile` as anything else requires JDK 9+
diff --git a/datetime/pom.xml b/datetime/pom.xml
index be9b1e79..2d6e0ab8 100644
--- a/datetime/pom.xml
+++ b/datetime/pom.xml
@@ -98,17 +98,15 @@
         <!-- Inherited from oss-base. Generate PackageVersion.java.-->
         <groupId>com.google.code.maven-replacer-plugin</groupId>
         <artifactId>replacer</artifactId>
-        <executions>
-          <execution>
-            <id>process-packageVersion</id>
-            <phase>generate-sources</phase>
-          </execution>
-        </executions>
+      </plugin>
+      <!-- 29-Apr-2025, tatu: SBOM generation [JSTEP-14] -->
+      <plugin>
+        <groupId>org.cyclonedx</groupId>
+        <artifactId>cyclonedx-maven-plugin</artifactId>
       </plugin>
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-compiler-plugin</artifactId>
-        <version>3.0</version>
         <inherited>true</inherited>
         <configuration>
           <source>${javac.src.version}</source>
diff --git a/parameter-names/pom.xml b/parameter-names/pom.xml
index 96646efe..4cd3fc7d 100644
--- a/parameter-names/pom.xml
+++ b/parameter-names/pom.xml
@@ -84,17 +84,11 @@ introspection of method/constructor parameter names, without having to add expli
         <!-- Inherited from oss-base. Generate PackageVersion.java.-->
         <groupId>com.google.code.maven-replacer-plugin</groupId>
         <artifactId>replacer</artifactId>
-        <executions>
-          <execution>
-            <id>process-packageVersion</id>
-            <phase>generate-sources</phase>
-          </execution>
-        </executions>
       </plugin>
-     <plugin>
-        <groupId>org.apache.maven.plugins</groupId>
-        <artifactId>maven-surefire-plugin</artifactId>
-        <version>${version.plugin.surefire}</version>
+      <!-- 29-Apr-2025, tatu: SBOM generation [JSTEP-14] -->
+      <plugin>
+        <groupId>org.cyclonedx</groupId>
+        <artifactId>cyclonedx-maven-plugin</artifactId>
       </plugin>
       <!--  28-Mar-2019, tatu: Add rudimentary JDK9+ module info. To build with JDK 8
              will have to use `moduleInfoFile` as anything else requires JDK 9+
diff --git a/pom.xml b/pom.xml
index d95f4272..7cf2eb44 100644
--- a/pom.xml
+++ b/pom.xml
@@ -68,22 +68,21 @@
   <build>
     <pluginManagement>
       <plugins>
-	<plugin>
-	  <!-- Inherited from oss-base. Generate PackageVersion.java.-->
-          <groupId>com.google.code.maven-replacer-plugin</groupId>
-          <artifactId>replacer</artifactId>
-	  <executions>
+	  <plugin>
+	    <!-- Inherited from oss-base. Generate PackageVersion.java.-->
+         <groupId>com.google.code.maven-replacer-plugin</groupId>
+         <artifactId>replacer</artifactId>
+	    <executions>
             <execution>
               <id>process-packageVersion</id>
               <phase>generate-sources</phase>
             </execution>
-          </executions>
-	</plugin>
-
-	<plugin>
+         </executions>
+       </plugin>
+	  <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-surefire-plugin</artifactId>
-	</plugin>
+	  </plugin>
       </plugins>
     </pluginManagement>
   </build>