{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.9",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "8e595cdb67f17e4b41e046456970591d"
          },
          {
            "alg" : "SHA-1",
            "content" : "69e8ca804520d09ce4657e7235bae84d01cbffa6"
          },
          {
            "alg" : "SHA-256",
            "content" : "aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8"
          },
          {
            "alg" : "SHA-512",
            "content" : "1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b"
          },
          {
            "alg" : "SHA-384",
            "content" : "b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c"
          },
          {
            "alg" : "SHA3-384",
            "content" : "289f9520bd73a2031276248a6ef8f0891c691062c2d1ea86a2bc9ea8db2c52377d92a53be9957179e71aee3deda26a8c"
          },
          {
            "alg" : "SHA3-256",
            "content" : "32b50a7efe5d491a4039c0017eca3cf49d98b55fc66d06b3dd06209487323474"
          },
          {
            "alg" : "SHA3-512",
            "content" : "1daf813da53e5d5cda4d0302ff3a5e388aa45d96ebe6dcbe240f35d33f14b1e6390f6bbe7f21f3ed8cf96ebd9f5516a08b18487b7339715109c81cebfc1563df"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.security.enterprise",
      "name" : "jakarta.security.enterprise-api",
      "version" : "4.0.0",
      "description" : "Jakarta Security defines a standard for creating secure Jakarta EE applications in modern application paradigms. It defines an overarching (end-user targeted) Security API for Jakarta EE Applications.",
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.security.enterprise/jakarta.security.enterprise-api@4.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j/jakarta.security.enterprise-api"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/ee4j/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/security-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.security.enterprise/jakarta.security.enterprise-api@4.0.0?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeAggregateBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "maven.reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.servlet",
      "name" : "jakarta.servlet-api",
      "version" : "6.1.0",
      "description" : "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "60b5b51d0e4c07e098ed1917551b3d91"
        },
        {
          "alg" : "SHA-1",
          "content" : "5ef60cfcddaeaba2730dd5429c6677439bd991b0"
        },
        {
          "alg" : "SHA-256",
          "content" : "0032d773ede3e6b555a2a0f0e8bb5f7312e8777ad6a5b3ccbc6d250f3b08e26d"
        },
        {
          "alg" : "SHA-512",
          "content" : "4b71aeeb62ae7812d2e9ed317b67f9280219f6b71f0c92c6f7dfd5d97daea8135aa46bc869fe1416766ddebe97b1dc8538a461ed066e6cc66513f4139d2dc2aa"
        },
        {
          "alg" : "SHA-384",
          "content" : "a6c40aad886e338e4cd92a0c5b032a97e5ab35b9488c62e54ddd06ccf22113c484b3f6f8ff2b7f674632e5eb2f68eee0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4a47c215fecf0fee440b44841154c8b68cdbb6b2f250a1382aef0bf254857f7e7da9f9a8ddb830f76f2c9a0bbd10f393"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3bbf1599d3f19c7e86a0a1b25be5200f8becf20b6cec43fc0799e97ffbca3927"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ecaf3b7f9923164559c9135ba09a740056eceaa1a2227c1890cf3fe20cfdce3cdc18d8bb9b8299e87311bcd609efbf7999a9238b2b28f46185420b573fe01227"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.servlet"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/servlet-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/servlet-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/servlet-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar"
    },
    {
      "group" : "jakarta.interceptor",
      "name" : "jakarta.interceptor-api",
      "version" : "2.2.0",
      "description" : "Jakarta Interceptors defines a means of interposing on business method invocations and specific events—such as lifecycle events and timeout events—that occur on instances of Jakarta EE components and other managed classes.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ef5c0cb454edafbd9e5b3cb0f728f61f"
        },
        {
          "alg" : "SHA-1",
          "content" : "ed3605f9c5428d45549d4720235f3e943339f39a"
        },
        {
          "alg" : "SHA-256",
          "content" : "d240d72b4dd38a2e431c804079810010cb97903678fa5f987fb7434878b04398"
        },
        {
          "alg" : "SHA-512",
          "content" : "65bb8203b716886bdaef6e244609c62242414b6b52121730351e1aa8125d99ffff9914dbf4ec2b91b67b935190d0b8090cd01dc76d379bb0f21c3bd1130f2374"
        },
        {
          "alg" : "SHA-384",
          "content" : "f43a91e011b4b827883dcbdb821338dd285bc19f2908fe8d6e495eb0c2436e368a20856ace2bff346105c8a2b2ce3ca3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "73d34e495d749d8f1347a064434f8d28c0fcfd9a275c19ebf2cedeff465c037932dcfcf6cc767137bd235207ca3a5eca"
        },
        {
          "alg" : "SHA3-256",
          "content" : "358609dd821720006541fe8e8fda87280a979f6d3b3064fefbff8b1bd671069c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "50272716c6fa952a6b9652fe791571d3f80fa88e95970837534216c6e3713354eb68dc47ec5601ea56708987449eb47bf242697302592b30c13cdc0ce77d26f3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/jakartaee/interceptors"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jakartaee/interceptors"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.2.0?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.annotation",
      "name" : "jakarta.annotation-api",
      "version" : "3.0.0",
      "description" : "Jakarta Annotations API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7faffaab962918da4cf5ddfd76609dd2"
        },
        {
          "alg" : "SHA-1",
          "content" : "54f928fadec906a99d558536756d171917b9d936"
        },
        {
          "alg" : "SHA-256",
          "content" : "b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2"
        },
        {
          "alg" : "SHA-512",
          "content" : "2bd5a16684c4e8144897ba6dc467628d1b8a85326235240e4c20101b6df3681d23aeebc30ca99e395ec848f33cb5244085031b2a0fbce746c8ede7148a5e7c1d"
        },
        {
          "alg" : "SHA-384",
          "content" : "1a12cb78019d310eb08314f863c2a0e48aa2845bde844f8204e653ec50713bf135cc58cce882e14ef631327952b5ad99"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a0dd7dd32e8dc5ed679589f6066f16593b52334b9947a71381aeab44b3cbe295ec24dfef4fbfa5514ba24ea60fe042a9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6ae915a05b483f75c51f3a109cf368842d186b2996758b8a106377a7a9485c12"
        },
        {
          "alg" : "SHA3-512",
          "content" : "52f611aa0a98812e525be2b9d5a5712aef660598cff64282dbd9afc237560f442ab745fc95c919216f9cb4197c224ba6c7317282962c638fee956925bfa031c0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.ca"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jakartaee/common-annotations-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/ca-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jakartaee/common-annotations-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.el",
      "name" : "jakarta.el-api",
      "version" : "6.0.0",
      "description" : "Jakarta Expression Language defines an expression language for Java applications",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "248086411e850bb59dac502ee785c6b0"
        },
        {
          "alg" : "SHA-1",
          "content" : "c937953432d6811ce5a460b6ef90750beecb35c2"
        },
        {
          "alg" : "SHA-256",
          "content" : "f33d0becf2d5516730ba5cc99a7b5a2b1f62986bf0a3370249cdff9a2f171507"
        },
        {
          "alg" : "SHA-512",
          "content" : "10a413e5323a8f018a3e2e22505076481fec472a04e2adbd13671d83256749e5f925506c9575200d0f1d0df9558d5b9a46588eb03877a3a91d5b3d85e4de2175"
        },
        {
          "alg" : "SHA-384",
          "content" : "e075f581afddeae55b96d4f3ea04114248be100f43da131f244fa55cf293728fc456cf18a452960b6c96c68b4eb59a4d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a0cb4195df502d845f62c4fe47f052aeccad34b9a2d129092eb5ceb8b6b41e3132ee2d2984478f51fd9fe057761f46c1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "11783a16edc67c34f4b771aef911664e40b781346c0839606f1fa97f72c28bd2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9f7959c0ac41bdb970b24b72ae3cfacfa60e38dd276f5abc956c5c0fbc87bb1e0bd6dc576f422169bdc68a6bae7b1d3fb0209172136170e8004add9ec561f131"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url" : "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.el/jakarta.el-api@6.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.el"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/el-ri/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/el-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/el-ri"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.el/jakarta.el-api@6.0.0?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.enterprise",
      "name" : "jakarta.enterprise.cdi-api",
      "version" : "4.1.0",
      "description" : "APIs for CDI (Contexts and Dependency Injection for Java)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f72ee39b19274ffe26cac952acae6dc3"
        },
        {
          "alg" : "SHA-1",
          "content" : "fed9518709d33252bfe0817fe61ad4dfd1b2e848"
        },
        {
          "alg" : "SHA-256",
          "content" : "c42c808f17925129a0800f618febe050d966e181a4c7384c8a5e7a0283d68699"
        },
        {
          "alg" : "SHA-512",
          "content" : "6fa4bb391e04096f6d703a64fd1f25f1201016fce330877d41f6b5f13e33704789f21f3fc015ad903a3f0802ca392adb2d5b28a3daa9f4274e071fc484a33344"
        },
        {
          "alg" : "SHA-384",
          "content" : "5b6bf4c4deaf6b97702841785d7c172fc634ff4b00424d1d79849feecdf4f82ba5817b6c86e36a1e05b4223de5d67cd4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7732dda6a04a288f0fbab63ea90bb36a9761a64713e9bf46210033bc0cbe448ce729326071169d5cdc77f930be95de58"
        },
        {
          "alg" : "SHA3-256",
          "content" : "04b61fb30d2fb7c5c5bd09a963f7fc403ed6ff1932ed2db657ea640fe90751c6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "63cc1e4b85f5fc4e52ade472764b28fd6b39d765c29c994cc88944758ad1c3fdb89fd9f047aaf125b716df0a67f4b99554b13c8337f361815bb9280c1cb92ec0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://cdi-spec.org"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jakarta/cdi/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:cdi-spec/cdi.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.1.0?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.enterprise",
      "name" : "jakarta.enterprise.lang-model",
      "version" : "4.1.0",
      "description" : "Build Compatible (Reflection-Free) Java Language Model for CDI",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fd9efbe0808984a89690e04ea28cd368"
        },
        {
          "alg" : "SHA-1",
          "content" : "9270ae3df4239d4f337215403ebc9801fe659a2b"
        },
        {
          "alg" : "SHA-256",
          "content" : "bb56f571f60d2862b2387d5468fe8f5540f8094727283ed991f89082708095ee"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5c3e8f38814be3715cc063e717e03084a754642b453148bbcb450e923cc4bd58bee22c27f2fe7033859a2cc07c9b352ce022825b99e0ee7ad8ee219458c32bf"
        },
        {
          "alg" : "SHA-384",
          "content" : "c18eb1e055af26a82e5d6408f207da4263a0d283ccedb53bea79179fb7bbfc6acf0fc01ce526be985fde1ecddaab0a56"
        },
        {
          "alg" : "SHA3-384",
          "content" : "27eb70531c47123172b25339ff2da6e4a7bd86f3c5dd09b4ebdebd1c1e35a9d08a25fa77ef1cc6f5d52226d6b6bb72d1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "35114f5fb918be3fed31f0c46a14a59eca837a767c29b4c079300286b9295a63"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c19c02f80a737dbd74953021d4053d751d84ae1e3e3e92f9c95418f6d3cade727ddb166766581d800cca1dab0080ac9bc87e599525330e1a5d752dddedd03db5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.enterprise/jakarta.enterprise.lang-model@4.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j/jakarta.enterprise.cdi-parent/jakarta.enterprise.lang-model"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/ee4j/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/cdi/jakarta.enterprise.lang-model"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.enterprise/jakarta.enterprise.lang-model@4.1.0?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.inject",
      "name" : "jakarta.inject-api",
      "version" : "2.0.1",
      "description" : "Jakarta Dependency Injection",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "72003bf6efcc8455d414bbd7da86c11c"
        },
        {
          "alg" : "SHA-1",
          "content" : "4c28afe1991a941d7702fe1362c365f0a8641d1e"
        },
        {
          "alg" : "SHA-256",
          "content" : "f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c"
        },
        {
          "alg" : "SHA-512",
          "content" : "f186b2ada470abba1cc3b4f8c4373d940fb7c71a051b2c26f7c204ad4dfb69235fbf3f9c33da36d744cb90f52d921c51d76c0ff263bacb35eafb66cab83dc47d"
        },
        {
          "alg" : "SHA-384",
          "content" : "405bd297a73901f013d48a0da028d04d400f3e61f4997c0e7297eb08120670a0e242e0002db8f130c33ab16cb02feb2d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4db7e54434d0a208c876868f5595b808f2728c0455feaa752ab7b569a2186fc37cb891c9aa0076de3d08f6da6ff06eba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3a5aba9f1ff1a130b76af886123eb375fa578498490df3dc60bb7ce7d59e9404"
        },
        {
          "alg" : "SHA3-512",
          "content" : "00bba8efc2d6e7f0a509b321868d75f1aaf0681a750d089d913bde8424ab7bb88aadf49de6e291e352523e4f8c117b1b48033ff31d4d665dcc43c4c6ea000ba9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/injection-api"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/ee4j/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/injection-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"
    },
    {
      "group" : "jakarta.authentication",
      "name" : "jakarta.authentication-api",
      "version" : "3.1.0",
      "description" : "Jakarta Authentication defines a general low-level SPI for authentication mechanisms, which are controllers that interact with a caller and a container's environment to obtain the caller's credentials, validate these, and pass an authenticated identity (such as name and groups) to the container. Jakarta Authentication consists of several profiles, with each profile telling how a specific container (such as Jakarta Servlet) can integrate with- and adapt to this SPI.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "38948ed95369103e7ec3eafbbde0e627"
        },
        {
          "alg" : "SHA-1",
          "content" : "d06859cab1228a7524bf620a0daf120dc979ecae"
        },
        {
          "alg" : "SHA-256",
          "content" : "07307889ba23d7152b6735a30b660207cc1783807cb7b76ebf15e305a6572e7e"
        },
        {
          "alg" : "SHA-512",
          "content" : "570831b719a9267b4965b42ad6a9ed96a7775937c56d4e5ba016c03195de7f5ecca354e353af98a60fe4552484c2796e1bcdec171bc03306a7bfd17e01bef9af"
        },
        {
          "alg" : "SHA-384",
          "content" : "aa52f80cd8de0b3a7397137b551ac3f38021b1be9399d67b68136047f9d0153c246a8d35a5c2456e80a30ffa20d74c0d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4d7a18b50fd3ee52b143ef6e0af7a7230a3bcf9aae389ce9f0232999d706f1389900b6743339227b2dfdd379c4366820"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fbcec708347c3b4142107b9cfa2addc5d3cff1cd18ecc50a6f1ddc66f2be2efb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1d221d0a00ce40e3c6fd2f2f2714d1d2b9a156cbfeddfa6fe45e0262c8c9e4f0b58d8cc324bbd52066c1384a73d6a3a78c45a94c4690a91f51bf5829688d5498"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.authentication/jakarta.authentication-api@3.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/jakartaee/authentication"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jakartaee/authentication"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.authentication/jakarta.authentication-api@3.1.0?type=jar"
    },
    {
      "group" : "jakarta.authorization",
      "name" : "jakarta.authorization-api",
      "version" : "3.0.0",
      "description" : "Jakarta Authorization defines a low-level SPI for authorization modules, which are repositories of permissions facilitating subject based security by determining whether a given subject has a given permission, and algorithms to transform security constraints for specific containers (such as Jakarta Servlet or Jakarta Enterprise Beans) into these permissions.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cdccd724f58a1474c3d26eb451129d58"
        },
        {
          "alg" : "SHA-1",
          "content" : "3fc9ba2d538e9c7e9df35e5d117e5ee940234494"
        },
        {
          "alg" : "SHA-256",
          "content" : "8387c5b1c127062745e6e7c57a6a4949b37098f283ee7e3675d2b5741b260f7c"
        },
        {
          "alg" : "SHA-512",
          "content" : "b7ebb0ae17bb8acb4fd4a2681ca655c05a6397a09739180191ad578c9c7b6b1a9a80226a81f7be6470aa02e124f2453454c163adcbfdea4d13b4a2a7d822e253"
        },
        {
          "alg" : "SHA-384",
          "content" : "23ee609eb86832f70ca3d01c72837dd599b5f9b30ce615700f0c908f7d7dffd2c86c1c2ef7acaa3723a4b80ee4d4c44b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e3b4f99b4d832aa6d625eac8ee3d977015d2370eebb9a7bda600840bc7ae583f7140b4e05133a93b2a6780280bfdcdd8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d5aa29c4d21700300ce3492c30c057bc90e1276a0e72d05e49a0257a0d4ea13a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d6ae5815b34e4e6bfa100811310e14f50015a741dc81144ee5c3e6a53778428cacd90951aee23e2e42b4d7ae69166cef1b0e21c98c6835ccc2c4706a2971f0fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.authorization/jakarta.authorization-api@3.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/jakartaee/authorization"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jakartaee/authorization"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.authorization/jakarta.authorization-api@3.0.0?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.json",
      "name" : "jakarta.json-api",
      "version" : "2.1.3",
      "description" : "Jakarta JSON Processing defines a Java(R) based framework for parsing, generating, transforming, and querying JSON documents.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "596997520702889d4afef9cffbd4b71a"
        },
        {
          "alg" : "SHA-1",
          "content" : "4febd83e1d9d1561d078af460ecd19532383735c"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc934142805ea1d794f1440563965a3861a2a9fb7414ecd3fe44f26500734414"
        },
        {
          "alg" : "SHA-512",
          "content" : "5a6566f0ceaa8b0ca40ae643942c0d46acd118a3b4d85af5f3a977e738465e8c8d4bc977f0c3e4b51f4471e408c28f66dbc0b19adf61237f6f6f7fa1d0dacc31"
        },
        {
          "alg" : "SHA-384",
          "content" : "1a17b8a416692ba0e485d7290782b2b5c4de8cb65c2043f221381deee668953655c221dc3efa29d3c65c8b2c1fab173f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4c009f9fec6b1e14b2c675ee7addb49ebd047d71d7aaf31601ccea3ffe4af1d82838a3452b0e5d7c2814e27861cd3ffd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b839f4645dbac0d1bc76a91e168a52574c2bb6de0b7e92cd14aafd0ad6a28b0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fedcd8618f44ab0b771bef7d2fcb61d49021eb2e592d8d3058d3f57e7fe0ed1a9239cac859fe534dd0629aaf577fb8f77841412dbb3ae58b8d8cd0754da2ec48"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0",
            "url" : "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url" : "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jsonp"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/ee4j/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jsonp"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/jakarta.security.enterprise/jakarta.security.enterprise-api@4.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
        "pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.2.0?type=jar",
        "pkg:maven/jakarta.el/jakarta.el-api@6.0.0?type=jar",
        "pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.1.0?type=jar",
        "pkg:maven/jakarta.authentication/jakarta.authentication-api@3.1.0?type=jar",
        "pkg:maven/jakarta.authorization/jakarta.authorization-api@3.0.0?type=jar",
        "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.el/jakarta.el-api@6.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.enterprise/jakarta.enterprise.lang-model@4.1.0?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.el/jakarta.el-api@6.0.0?type=jar",
        "pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.2.0?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.enterprise/jakarta.enterprise.lang-model@4.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.authentication/jakarta.authentication-api@3.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.authorization/jakarta.authorization-api@3.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "dependsOn" : [ ]
    }
  ]
}