<?xml version="1.0" encoding="UTF-8"?>
<bom version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.9</version>
        <hashes>
          <hash alg="MD5">8e595cdb67f17e4b41e046456970591d</hash>
          <hash alg="SHA-1">69e8ca804520d09ce4657e7235bae84d01cbffa6</hash>
          <hash alg="SHA-256">aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8</hash>
          <hash alg="SHA-512">1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b</hash>
          <hash alg="SHA-384">b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c</hash>
          <hash alg="SHA3-384">289f9520bd73a2031276248a6ef8f0891c691062c2d1ea86a2bc9ea8db2c52377d92a53be9957179e71aee3deda26a8c</hash>
          <hash alg="SHA3-256">32b50a7efe5d491a4039c0017eca3cf49d98b55fc66d06b3dd06209487323474</hash>
          <hash alg="SHA3-512">1daf813da53e5d5cda4d0302ff3a5e388aa45d96ebe6dcbe240f35d33f14b1e6390f6bbe7f21f3ed8cf96ebd9f5516a08b18487b7339715109c81cebfc1563df</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/jakarta.security.enterprise/jakarta.security.enterprise-api@4.0.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.security.enterprise</group>
      <name>jakarta.security.enterprise-api</name>
      <version>4.0.0</version>
      <description>Jakarta Security defines a standard for creating secure Jakarta EE applications in modern application paradigms.
        It defines an overarching (end-user targeted) Security API for Jakarta EE Applications.</description>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.security.enterprise/jakarta.security.enterprise-api@4.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j/jakarta.security.enterprise-api</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/ee4j/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/security-api</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeAggregateBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="maven.reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.servlet</group>
      <name>jakarta.servlet-api</name>
      <version>6.1.0</version>
      <description>Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs,
        implementations of those APIs, and technology compatibility kits for Java runtimes
        that enable development, deployment, and management of server-side and cloud-native applications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">60b5b51d0e4c07e098ed1917551b3d91</hash>
        <hash alg="SHA-1">5ef60cfcddaeaba2730dd5429c6677439bd991b0</hash>
        <hash alg="SHA-256">0032d773ede3e6b555a2a0f0e8bb5f7312e8777ad6a5b3ccbc6d250f3b08e26d</hash>
        <hash alg="SHA-512">4b71aeeb62ae7812d2e9ed317b67f9280219f6b71f0c92c6f7dfd5d97daea8135aa46bc869fe1416766ddebe97b1dc8538a461ed066e6cc66513f4139d2dc2aa</hash>
        <hash alg="SHA-384">a6c40aad886e338e4cd92a0c5b032a97e5ab35b9488c62e54ddd06ccf22113c484b3f6f8ff2b7f674632e5eb2f68eee0</hash>
        <hash alg="SHA3-384">4a47c215fecf0fee440b44841154c8b68cdbb6b2f250a1382aef0bf254857f7e7da9f9a8ddb830f76f2c9a0bbd10f393</hash>
        <hash alg="SHA3-256">3bbf1599d3f19c7e86a0a1b25be5200f8becf20b6cec43fc0799e97ffbca3927</hash>
        <hash alg="SHA3-512">ecaf3b7f9923164559c9135ba09a740056eceaa1a2227c1890cf3fe20cfdce3cdc18d8bb9b8299e87311bcd609efbf7999a9238b2b28f46185420b573fe01227</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.servlet</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/servlet-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/servlet-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/servlet-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.2.0?type=jar">
      <group>jakarta.interceptor</group>
      <name>jakarta.interceptor-api</name>
      <version>2.2.0</version>
      <description>Jakarta Interceptors defines a means of interposing on business method invocations
        and specific events—such as lifecycle events and timeout events—that occur on instances
        of Jakarta EE components and other managed classes.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ef5c0cb454edafbd9e5b3cb0f728f61f</hash>
        <hash alg="SHA-1">ed3605f9c5428d45549d4720235f3e943339f39a</hash>
        <hash alg="SHA-256">d240d72b4dd38a2e431c804079810010cb97903678fa5f987fb7434878b04398</hash>
        <hash alg="SHA-512">65bb8203b716886bdaef6e244609c62242414b6b52121730351e1aa8125d99ffff9914dbf4ec2b91b67b935190d0b8090cd01dc76d379bb0f21c3bd1130f2374</hash>
        <hash alg="SHA-384">f43a91e011b4b827883dcbdb821338dd285bc19f2908fe8d6e495eb0c2436e368a20856ace2bff346105c8a2b2ce3ca3</hash>
        <hash alg="SHA3-384">73d34e495d749d8f1347a064434f8d28c0fcfd9a275c19ebf2cedeff465c037932dcfcf6cc767137bd235207ca3a5eca</hash>
        <hash alg="SHA3-256">358609dd821720006541fe8e8fda87280a979f6d3b3064fefbff8b1bd671069c</hash>
        <hash alg="SHA3-512">50272716c6fa952a6b9652fe791571d3f80fa88e95970837534216c6e3713354eb68dc47ec5601ea56708987449eb47bf242697302592b30c13cdc0ce77d26f3</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/jakartaee/interceptors</url></reference><reference type="vcs"><url>https://github.com/jakartaee/interceptors</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.annotation</group>
      <name>jakarta.annotation-api</name>
      <version>3.0.0</version>
      <description>Jakarta Annotations API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7faffaab962918da4cf5ddfd76609dd2</hash>
        <hash alg="SHA-1">54f928fadec906a99d558536756d171917b9d936</hash>
        <hash alg="SHA-256">b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2</hash>
        <hash alg="SHA-512">2bd5a16684c4e8144897ba6dc467628d1b8a85326235240e4c20101b6df3681d23aeebc30ca99e395ec848f33cb5244085031b2a0fbce746c8ede7148a5e7c1d</hash>
        <hash alg="SHA-384">1a12cb78019d310eb08314f863c2a0e48aa2845bde844f8204e653ec50713bf135cc58cce882e14ef631327952b5ad99</hash>
        <hash alg="SHA3-384">a0dd7dd32e8dc5ed679589f6066f16593b52334b9947a71381aeab44b3cbe295ec24dfef4fbfa5514ba24ea60fe042a9</hash>
        <hash alg="SHA3-256">6ae915a05b483f75c51f3a109cf368842d186b2996758b8a106377a7a9485c12</hash>
        <hash alg="SHA3-512">52f611aa0a98812e525be2b9d5a5712aef660598cff64282dbd9afc237560f442ab745fc95c919216f9cb4197c224ba6c7317282962c638fee956925bfa031c0</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.ca</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jakartaee/common-annotations-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/ca-dev</url></reference><reference type="vcs"><url>https://github.com/jakartaee/common-annotations-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.el/jakarta.el-api@6.0.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.el</group>
      <name>jakarta.el-api</name>
      <version>6.0.0</version>
      <description>Jakarta Expression Language defines an expression language for Java applications</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">248086411e850bb59dac502ee785c6b0</hash>
        <hash alg="SHA-1">c937953432d6811ce5a460b6ef90750beecb35c2</hash>
        <hash alg="SHA-256">f33d0becf2d5516730ba5cc99a7b5a2b1f62986bf0a3370249cdff9a2f171507</hash>
        <hash alg="SHA-512">10a413e5323a8f018a3e2e22505076481fec472a04e2adbd13671d83256749e5f925506c9575200d0f1d0df9558d5b9a46588eb03877a3a91d5b3d85e4de2175</hash>
        <hash alg="SHA-384">e075f581afddeae55b96d4f3ea04114248be100f43da131f244fa55cf293728fc456cf18a452960b6c96c68b4eb59a4d</hash>
        <hash alg="SHA3-384">a0cb4195df502d845f62c4fe47f052aeccad34b9a2d129092eb5ceb8b6b41e3132ee2d2984478f51fd9fe057761f46c1</hash>
        <hash alg="SHA3-256">11783a16edc67c34f4b771aef911664e40b781346c0839606f1fa97f72c28bd2</hash>
        <hash alg="SHA3-512">9f7959c0ac41bdb970b24b72ae3cfacfa60e38dd276f5abc956c5c0fbc87bb1e0bd6dc576f422169bdc68a6bae7b1d3fb0209172136170e8004add9ec561f131</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <name>GNU General Public License, version 2 with the GNU Classpath Exception</name>
          <url>https://www.gnu.org/software/classpath/license.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.el/jakarta.el-api@6.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.el</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/el-ri/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/el-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/el-ri</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.1.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.enterprise</group>
      <name>jakarta.enterprise.cdi-api</name>
      <version>4.1.0</version>
      <description>APIs for CDI (Contexts and Dependency Injection for Java)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f72ee39b19274ffe26cac952acae6dc3</hash>
        <hash alg="SHA-1">fed9518709d33252bfe0817fe61ad4dfd1b2e848</hash>
        <hash alg="SHA-256">c42c808f17925129a0800f618febe050d966e181a4c7384c8a5e7a0283d68699</hash>
        <hash alg="SHA-512">6fa4bb391e04096f6d703a64fd1f25f1201016fce330877d41f6b5f13e33704789f21f3fc015ad903a3f0802ca392adb2d5b28a3daa9f4274e071fc484a33344</hash>
        <hash alg="SHA-384">5b6bf4c4deaf6b97702841785d7c172fc634ff4b00424d1d79849feecdf4f82ba5817b6c86e36a1e05b4223de5d67cd4</hash>
        <hash alg="SHA3-384">7732dda6a04a288f0fbab63ea90bb36a9761a64713e9bf46210033bc0cbe448ce729326071169d5cdc77f930be95de58</hash>
        <hash alg="SHA3-256">04b61fb30d2fb7c5c5bd09a963f7fc403ed6ff1932ed2db657ea640fe90751c6</hash>
        <hash alg="SHA3-512">63cc1e4b85f5fc4e52ade472764b28fd6b39d765c29c994cc88944758ad1c3fdb89fd9f047aaf125b716df0a67f4b99554b13c8337f361815bb9280c1cb92ec0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://cdi-spec.org</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jakarta/cdi/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>scm:git:git@github.com:cdi-spec/cdi.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.enterprise/jakarta.enterprise.lang-model@4.1.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.enterprise</group>
      <name>jakarta.enterprise.lang-model</name>
      <version>4.1.0</version>
      <description>Build Compatible (Reflection-Free) Java Language Model for CDI</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fd9efbe0808984a89690e04ea28cd368</hash>
        <hash alg="SHA-1">9270ae3df4239d4f337215403ebc9801fe659a2b</hash>
        <hash alg="SHA-256">bb56f571f60d2862b2387d5468fe8f5540f8094727283ed991f89082708095ee</hash>
        <hash alg="SHA-512">e5c3e8f38814be3715cc063e717e03084a754642b453148bbcb450e923cc4bd58bee22c27f2fe7033859a2cc07c9b352ce022825b99e0ee7ad8ee219458c32bf</hash>
        <hash alg="SHA-384">c18eb1e055af26a82e5d6408f207da4263a0d283ccedb53bea79179fb7bbfc6acf0fc01ce526be985fde1ecddaab0a56</hash>
        <hash alg="SHA3-384">27eb70531c47123172b25339ff2da6e4a7bd86f3c5dd09b4ebdebd1c1e35a9d08a25fa77ef1cc6f5d52226d6b6bb72d1</hash>
        <hash alg="SHA3-256">35114f5fb918be3fed31f0c46a14a59eca837a767c29b4c079300286b9295a63</hash>
        <hash alg="SHA3-512">c19c02f80a737dbd74953021d4053d751d84ae1e3e3e92f9c95418f6d3cade727ddb166766581d800cca1dab0080ac9bc87e599525330e1a5d752dddedd03db5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.enterprise/jakarta.enterprise.lang-model@4.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j/jakarta.enterprise.cdi-parent/jakarta.enterprise.lang-model</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/ee4j/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/cdi/jakarta.enterprise.lang-model</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.inject</group>
      <name>jakarta.inject-api</name>
      <version>2.0.1</version>
      <description>Jakarta Dependency Injection</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">72003bf6efcc8455d414bbd7da86c11c</hash>
        <hash alg="SHA-1">4c28afe1991a941d7702fe1362c365f0a8641d1e</hash>
        <hash alg="SHA-256">f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c</hash>
        <hash alg="SHA-512">f186b2ada470abba1cc3b4f8c4373d940fb7c71a051b2c26f7c204ad4dfb69235fbf3f9c33da36d744cb90f52d921c51d76c0ff263bacb35eafb66cab83dc47d</hash>
        <hash alg="SHA-384">405bd297a73901f013d48a0da028d04d400f3e61f4997c0e7297eb08120670a0e242e0002db8f130c33ab16cb02feb2d</hash>
        <hash alg="SHA3-384">4db7e54434d0a208c876868f5595b808f2728c0455feaa752ab7b569a2186fc37cb891c9aa0076de3d08f6da6ff06eba</hash>
        <hash alg="SHA3-256">3a5aba9f1ff1a130b76af886123eb375fa578498490df3dc60bb7ce7d59e9404</hash>
        <hash alg="SHA3-512">00bba8efc2d6e7f0a509b321868d75f1aaf0681a750d089d913bde8424ab7bb88aadf49de6e291e352523e4f8c117b1b48033ff31d4d665dcc43c4c6ea000ba9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/injection-api</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/ee4j/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/injection-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.authentication/jakarta.authentication-api@3.1.0?type=jar">
      <group>jakarta.authentication</group>
      <name>jakarta.authentication-api</name>
      <version>3.1.0</version>
      <description>Jakarta Authentication defines a general low-level SPI for authentication mechanisms, which are controllers
        that interact with a caller and a container's environment to obtain the caller's credentials, validate these,
        and pass an authenticated identity (such as name and groups) to the container. 
        
        Jakarta Authentication consists of several profiles, with each profile telling how a specific container
        (such as Jakarta Servlet) can integrate with- and adapt to this SPI.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">38948ed95369103e7ec3eafbbde0e627</hash>
        <hash alg="SHA-1">d06859cab1228a7524bf620a0daf120dc979ecae</hash>
        <hash alg="SHA-256">07307889ba23d7152b6735a30b660207cc1783807cb7b76ebf15e305a6572e7e</hash>
        <hash alg="SHA-512">570831b719a9267b4965b42ad6a9ed96a7775937c56d4e5ba016c03195de7f5ecca354e353af98a60fe4552484c2796e1bcdec171bc03306a7bfd17e01bef9af</hash>
        <hash alg="SHA-384">aa52f80cd8de0b3a7397137b551ac3f38021b1be9399d67b68136047f9d0153c246a8d35a5c2456e80a30ffa20d74c0d</hash>
        <hash alg="SHA3-384">4d7a18b50fd3ee52b143ef6e0af7a7230a3bcf9aae389ce9f0232999d706f1389900b6743339227b2dfdd379c4366820</hash>
        <hash alg="SHA3-256">fbcec708347c3b4142107b9cfa2addc5d3cff1cd18ecc50a6f1ddc66f2be2efb</hash>
        <hash alg="SHA3-512">1d221d0a00ce40e3c6fd2f2f2714d1d2b9a156cbfeddfa6fe45e0262c8c9e4f0b58d8cc324bbd52066c1384a73d6a3a78c45a94c4690a91f51bf5829688d5498</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.authentication/jakarta.authentication-api@3.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/jakartaee/authentication</url></reference><reference type="vcs"><url>https://github.com/jakartaee/authentication</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.authorization/jakarta.authorization-api@3.0.0?type=jar">
      <group>jakarta.authorization</group>
      <name>jakarta.authorization-api</name>
      <version>3.0.0</version>
      <description>Jakarta Authorization defines a low-level SPI for authorization modules, which are repositories of permissions 
        facilitating subject based security by determining whether a given subject has a given permission, and algorithms
        to transform security constraints for specific containers (such as Jakarta Servlet or Jakarta Enterprise Beans) into 
        these permissions.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cdccd724f58a1474c3d26eb451129d58</hash>
        <hash alg="SHA-1">3fc9ba2d538e9c7e9df35e5d117e5ee940234494</hash>
        <hash alg="SHA-256">8387c5b1c127062745e6e7c57a6a4949b37098f283ee7e3675d2b5741b260f7c</hash>
        <hash alg="SHA-512">b7ebb0ae17bb8acb4fd4a2681ca655c05a6397a09739180191ad578c9c7b6b1a9a80226a81f7be6470aa02e124f2453454c163adcbfdea4d13b4a2a7d822e253</hash>
        <hash alg="SHA-384">23ee609eb86832f70ca3d01c72837dd599b5f9b30ce615700f0c908f7d7dffd2c86c1c2ef7acaa3723a4b80ee4d4c44b</hash>
        <hash alg="SHA3-384">e3b4f99b4d832aa6d625eac8ee3d977015d2370eebb9a7bda600840bc7ae583f7140b4e05133a93b2a6780280bfdcdd8</hash>
        <hash alg="SHA3-256">d5aa29c4d21700300ce3492c30c057bc90e1276a0e72d05e49a0257a0d4ea13a</hash>
        <hash alg="SHA3-512">d6ae5815b34e4e6bfa100811310e14f50015a741dc81144ee5c3e6a53778428cacd90951aee23e2e42b4d7ae69166cef1b0e21c98c6835ccc2c4706a2971f0fb</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.authorization/jakarta.authorization-api@3.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/jakartaee/authorization</url></reference><reference type="vcs"><url>https://github.com/jakartaee/authorization</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.json</group>
      <name>jakarta.json-api</name>
      <version>2.1.3</version>
      <description>Jakarta JSON Processing defines a Java(R) based framework for parsing, generating, transforming, and querying JSON documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">596997520702889d4afef9cffbd4b71a</hash>
        <hash alg="SHA-1">4febd83e1d9d1561d078af460ecd19532383735c</hash>
        <hash alg="SHA-256">bc934142805ea1d794f1440563965a3861a2a9fb7414ecd3fe44f26500734414</hash>
        <hash alg="SHA-512">5a6566f0ceaa8b0ca40ae643942c0d46acd118a3b4d85af5f3a977e738465e8c8d4bc977f0c3e4b51f4471e408c28f66dbc0b19adf61237f6f6f7fa1d0dacc31</hash>
        <hash alg="SHA-384">1a17b8a416692ba0e485d7290782b2b5c4de8cb65c2043f221381deee668953655c221dc3efa29d3c65c8b2c1fab173f</hash>
        <hash alg="SHA3-384">4c009f9fec6b1e14b2c675ee7addb49ebd047d71d7aaf31601ccea3ffe4af1d82838a3452b0e5d7c2814e27861cd3ffd</hash>
        <hash alg="SHA3-256">5b839f4645dbac0d1bc76a91e168a52574c2bb6de0b7e92cd14aafd0ad6a28b0</hash>
        <hash alg="SHA3-512">fedcd8618f44ab0b771bef7d2fcb61d49021eb2e592d8d3058d3f57e7fe0ed1a9239cac859fe534dd0629aaf577fb8f77841412dbb3ae58b8d8cd0754da2ec48</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
        <license>
          <name>GNU General Public License, version 2 with the GNU Classpath Exception</name>
          <url>https://projects.eclipse.org/license/secondary-gpl-2.0-cp</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/jsonp</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/ee4j/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jsonp</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/jakarta.security.enterprise/jakarta.security.enterprise-api@4.0.0?type=jar">
      <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.2.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.el/jakarta.el-api@6.0.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.1.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.authentication/jakarta.authentication-api@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.authorization/jakarta.authorization-api@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar"/>
    <dependency ref="pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.2.0?type=jar">
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar"/>
    <dependency ref="pkg:maven/jakarta.el/jakarta.el-api@6.0.0?type=jar"/>
    <dependency ref="pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.1.0?type=jar">
      <dependency ref="pkg:maven/jakarta.enterprise/jakarta.enterprise.lang-model@4.1.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.el/jakarta.el-api@6.0.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.2.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.enterprise/jakarta.enterprise.lang-model@4.1.0?type=jar"/>
    <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"/>
    <dependency ref="pkg:maven/jakarta.authentication/jakarta.authentication-api@3.1.0?type=jar"/>
    <dependency ref="pkg:maven/jakarta.authorization/jakarta.authorization-api@3.0.0?type=jar">
      <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar"/>
  </dependencies>
</bom>
