<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:bc48b619-2385-417f-b226-322f0434dedb" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2023-06-18T08:20:58Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin makeBom compile+provided+runtime+system</name>
        <version>2.7.6</version>
        <hashes>
          <hash alg="MD5">639c35c7f79c5514f3abe11247999b70</hash>
          <hash alg="SHA-1">649239e622d8d454bb9ab6fafd6746c85cd11b7d</hash>
          <hash alg="SHA-256">1e3bc10146c370fe8b8f0a2edcb64329907d61dbc2f445db6ac1034cd3221ce3</hash>
          <hash alg="SHA-512">894a4b5762d32c88cc58ae1a35a3cc3d45a3c494accadb31b55b5832af65f60c0f8164623521a81de73e3ed6a4c994cca0f1951c8368b9d07fb41c82eaa84bbd</hash>
          <hash alg="SHA-384">3c385acc773a41056fb58ea27096c8ec86d46d8bd74a2eee9cf0913051981611afc68cf13a88d31af16590a489a97c0e</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-auth@3.3.6?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-auth</name>
      <version>3.3.6</version>
      <description>Apache Hadoop Auth - Java HTTP SPNEGO</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-auth@3.3.6?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-annotations@3.3.6?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-annotations</name>
      <version>3.3.6</version>
      <description>Apache Hadoop Annotations</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">31c1546b326ed15691f138f0a618939f</hash>
        <hash alg="SHA-1">451bc97f7519017cfa96c8f11d79e1e8027968b2</hash>
        <hash alg="SHA-256">02444e5dec3ef67251b61816001d3a0b1374b0334ed847b1d77f0750234c12d9</hash>
        <hash alg="SHA-512">7e73c23ff4c9527909f084d6cf77efc1111c6be42aad2093c68dd5324fb1a94c76411c8df12c69cea5ac1cde84b8e6ce3f86afe394e018bba94c54afb3923e5d</hash>
        <hash alg="SHA-384">f0cd996922c1e5c8a4b268cae97833067cc7b7317562ea82bc5736c766d095fbc6c55e22e0c5b85b0c5ad806e41600ff</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-annotations@3.3.6?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jdk.tools/jdk.tools@1.8?type=jar">
      <group>jdk.tools</group>
      <name>jdk.tools</name>
      <version>1.8</version>
      <hashes>
        <hash alg="MD5">8b1336f6cdc740b586c329c364bbef4f</hash>
        <hash alg="SHA-1">413825bb4e45fab05e74ec3aceef12f39c0bb2dd</hash>
        <hash alg="SHA-256">40bfff8a5def3b893e48f9db1540089140c432cc85cc864a013a5b1aaa8e3e62</hash>
        <hash alg="SHA-512">8a832218b6e5250783838fcb790d502790e961c086d9f18c0cb0c04293fefce407cc01b8eb5990c839e3e61faee442a87fd1c6628278a56152ac70c1f699cd7f</hash>
        <hash alg="SHA-384">7cb1e4fa82eaff5046f4881fda9dba22fe84d512978f999b3b022604ab475051068229f29338b9783c5b2cd5c4f63c30</hash>
      </hashes>
      <purl>pkg:maven/jdk.tools/jdk.tools@1.8?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar">
      <publisher>GlassFish Community</publisher>
      <group>javax.servlet</group>
      <name>javax.servlet-api</name>
      <version>3.1.0</version>
      <description>Java.net - The Source for Java Technology Collaboration</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">79de69e9f5ed8c7fcb8342585732bbf7</hash>
        <hash alg="SHA-1">3cd63d075497751784b2fa84be59432f4905bf7c</hash>
        <hash alg="SHA-256">af456b2dd41c4e82cf54f3e743bc678973d9fe35bd4d3071fa05c7e5333b8482</hash>
        <hash alg="SHA-512">32f7e3565c6cdf3d9a562f8fd597fe5059af0cf6b05b772a144a74bbc95927ac275eb38374538ec1c72adcce4c8e1e2c9f774a7b545db56b8085af0065e4a1e5</hash>
        <hash alg="SHA-384">8bf960fd053ef6ad1c3535824311f676b9ad537678b85f855dd5d6d726e391f8a7be9c9c76a8ae3ce8bfe671c1e2c942</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://servlet-spec.java.net</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/SERVLET_SPEC</url></reference><reference type="mailing-list"><url>users@servlet-spec.java.net</url></reference><reference type="vcs"><url>http://java.net/projects/glassfish/sources/svn/show/tags/javax.servlet-api-3.1.0</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.15</version>
      <description>The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">303baf002ce6d382198090aedd9d79a2</hash>
        <hash alg="SHA-1">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>
        <hash alg="SHA-256">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>
        <hash alg="SHA-512">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>
        <hash alg="SHA-384">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-codec/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CODEC</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://github.com/apache/commons-codec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/ch.qos.reload4j/reload4j@1.2.22?type=jar">
      <publisher>QOS.CH Sarl (Switzerland)</publisher>
      <group>ch.qos.reload4j</group>
      <name>reload4j</name>
      <version>1.2.22</version>
      <description>Reload4j revives EOLed log4j 1.x</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">53e3301fc57f593f1683da8195364a14</hash>
        <hash alg="SHA-1">f9d9e55d1072d7a697d2bf06e1847e93635a7cf9</hash>
        <hash alg="SHA-256">222f90d3e69541218ef6e70547749d693bd4c1846817e5bd7949b3e28950f99f</hash>
        <hash alg="SHA-512">fa09c72fb0e6973b10d8129bd379c30e0eadd530c725ba965743ab272046500ffea975a0f824e9059038e4178fb9ad8b9c85db60c6cf39a771e458a195600276</hash>
        <hash alg="SHA-384">a612c151cf7957b3d2f8a327cf9439f401a396be183c00ef882f689a59a4b69687ec0eaddf6cf396a94b5e255906a2a8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/ch.qos.reload4j/reload4j@1.2.22?type=jar</purl>
      <externalReferences><reference type="website"><url>https://reload4j.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/reload4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-reload4j@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-reload4j</name>
      <version>1.7.36</version>
      <description>SLF4J Reload4j Binding</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">ebfedc67cca7891e9c535e5899930f07</hash>
        <hash alg="SHA-1">db708f7d959dee1857ac524636e85ecf2e1781c1</hash>
        <hash alg="SHA-256">ae6fdd5c9547896114d5ec7fa7503733b7d2890573d3886fb548b3119c4d3f67</hash>
        <hash alg="SHA-512">595a00905b67886376adb45d6964b6d35a7e7fe90cfe0e26ed3b852c755ac4de96894974aac5fc590df689d3a28fa7198d899b544f30e83c320a2befe88fcb24</hash>
        <hash alg="SHA-384">700e92389464261381690cee669d9446bf912b58fd94be50837e1456c8f42a4586960036c097b7e08c2b32eab190adc1</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-reload4j@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://reload4j.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-reload4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.8.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.8.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <hashes>
        <hash alg="MD5">21ba575792e2694c39af13918a80550b</hash>
        <hash alg="SHA-1">92999e26e6534606b5678014e66948286298a35c</hash>
        <hash alg="SHA-256">02f291e5d1243dc143496e3cbbb40a1ced47aa58f2d633d3e38780cd068d5074</hash>
        <hash alg="SHA-512">72040ed293a083f979c3f23b00c359195cf0e4c227a9cb962d99804cbe07d86e24d2864aa8c533bb79e4ad1f83d3d17f290c8c24630410eb80734d6d1266e7ec</hash>
        <hash alg="SHA-384">13cb963b3b8bd821f3d3c0e7bea787f9b0e78b35073a4132e6d865c289e3293978096a4fe51a5deb04e297ba4db644a5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.8.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpclient</name>
      <version>4.5.13</version>
      <description>Apache HttpComponents Client</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">40d6b9075fbd28fa10292a45a0db9457</hash>
        <hash alg="SHA-1">e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada</hash>
        <hash alg="SHA-256">6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743</hash>
        <hash alg="SHA-512">3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089</hash>
        <hash alg="SHA-384">093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar</purl>
      <externalReferences><reference type="website"><url>http://hc.apache.org/httpcomponents-client</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCLIENT</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url></reference><reference type="vcs"><url>https://github.com/apache/httpcomponents-client/tree/4.5.13/httpclient</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpcore</name>
      <version>4.4.13</version>
      <description>Apache HttpComponents Core (blocking I/O)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e07a248f61c52776a2366c075dcd4963</hash>
        <hash alg="SHA-1">853b96d3afbb7bf8cc303fe27ee96836a10c1834</hash>
        <hash alg="SHA-256">e06e89d40943245fcfa39ec537cdbfce3762aecde8f9c597780d2b00c2b43424</hash>
        <hash alg="SHA-512">23430cde8b9bed33c91474ba49f1143284135df1b25fdcbc37bc3bb7e9549e77b3918eb40250093db652ae200367e87316129b23b4f6987e94939d60f467498d</hash>
        <hash alg="SHA-384">b776d57492478c162d428bdd3139be0fa6c3cf4503355c3a04710ca7bc3ee74d66627f49eb42814fd8f8364dbd17aa91</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar</purl>
      <externalReferences><reference type="website"><url>http://hc.apache.org/httpcomponents-core-ga</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCORE</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url></reference><reference type="vcs"><url>https://github.com/apache/httpcomponents-core/tree/4.4.13/httpcore</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.1.3</version>
      <description>Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <hashes>
        <hash alg="MD5">92eb5aabc1b47287de53d45c086a435c</hash>
        <hash alg="SHA-1">f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f</hash>
        <hash alg="SHA-256">70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784</hash>
        <hash alg="SHA-512">e5d1fc8ec4544e1fa0f7c4aae8dbcca466c4987bc92fbbc430b054b10d646b745add4a754b1be9d50edd64330c798c53173a97289db57a966312e16f934e9d1f</hash>
        <hash alg="SHA-384">00dc41783f4081585e20adcfe83fd4dbb6b5a27236ee633d7e53dedcbca83ba5e5f0ca68d31f95e9c724b365e4c67499</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-logging/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LOGGING</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/commons/proper/logging/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.nimbusds/nimbus-jose-jwt@9.8.1?type=jar">
      <publisher>Connect2id Ltd.</publisher>
      <group>com.nimbusds</group>
      <name>nimbus-jose-jwt</name>
      <version>9.8.1</version>
      <description>Java library for Javascript Object Signing and Encryption (JOSE) and
        JSON Web Tokens (JWT)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">54750510f65678d369e914d0a305754c</hash>
        <hash alg="SHA-1">2af7f734313320e4b156522d22ce32b775633909</hash>
        <hash alg="SHA-256">7664cf8c6f2adadf600287812b32878277beda54912eab9d4c2932cd50cb704a</hash>
        <hash alg="SHA-512">aa2b7f99fbc3884b5c881a2b3435925682e0c03266c0063ee315c7a2ba8eb3a02400cbf04ba61c90bfe5bdd0e223093d670012434a5f801bfb40166ef7d589b7</hash>
        <hash alg="SHA-384">432204fc1cef46c867263b316a4c22d88f5ab81fed902a69fe49ddf316cf6fe22c96d7cd0a7e703dc7cbff8f8c205fdf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.nimbusds/nimbus-jose-jwt@9.8.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://bitbucket.org/connect2id/nimbus-jose-jwt</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://bitbucket.org/connect2id/nimbus-jose-jwt</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar">
      <group>com.github.stephenc.jcip</group>
      <name>jcip-annotations</name>
      <version>1.0-1</version>
      <description>A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.</description>
      <hashes>
        <hash alg="MD5">d62dbfa8789378457ada685e2f614846</hash>
        <hash alg="SHA-1">ef31541dd28ae2cefdd17c7ebf352d93e9058c63</hash>
        <hash alg="SHA-256">4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323</hash>
        <hash alg="SHA-512">02fcd16a30d0e68b3e9e4899731181c6abb7117baa15c096ca940e01dde08bb86101cbeae552c497f8a90d923b5fa2f2b6f3850baf8dc94dbd399887924a9069</hash>
        <hash alg="SHA-384">88b0ecfde391a3d8468349c70e1539569768dfac3233dfe0b4660904df04e6c6bf26ed9c0784b9b22c122c3448e2a6b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://stephenc.github.com/jcip-annotations</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/stephenc/jcip-annotations/issues</url></reference><reference type="vcs"><url>http://github.com/stephenc/jcip-annotations/tree/master/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.zookeeper</group>
      <name>zookeeper</name>
      <version>3.6.3</version>
      <description>ZooKeeper server</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a87ec9c2634be7babf2328e1a0a03202</hash>
        <hash alg="SHA-1">a6e74f826db85ff8c51c15ef0fa2ea0b462aef25</hash>
        <hash alg="SHA-256">ac44de96d37a80d463c1e01aaa2ea86b19490fa17a37438d14491456c0e4a911</hash>
        <hash alg="SHA-512">086683a17870535c0f66a6ca531e92c325a2a46b37d56fa15d6d7c8b00d01ac299ef2023a3a082879adf693a3dbbe3515009dd33a724f81d1ea71bda0f78ee04</hash>
        <hash alg="SHA-384">cf7739ec3208302c68c15bc7221ce12158a79dadac990b309cc0405bf5321ad7b7b9183326f9d066774bc6fdba1cb41c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://zookeeper.apache.org/zookeeper</url></reference><reference type="build-system"><url>https://ci-hadoop.apache.org/view/ZooKeeper/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/ZOOKEEPER</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/zookeeper-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.zookeeper/zookeeper-jute@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.zookeeper</group>
      <name>zookeeper-jute</name>
      <version>3.6.3</version>
      <description>ZooKeeper jute</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7c44c4104a0da46b666562400a4a2c82</hash>
        <hash alg="SHA-1">8990d19ec3db01f45f82d4011a11b085db66de05</hash>
        <hash alg="SHA-256">6f463ade2b777f81e6c3e145b3fc03d4b39131b73dcf8c7f4b89ac4b1bacc9c5</hash>
        <hash alg="SHA-512">775ac90d270d3ddfb902a83abc5192fafb0b6837914112124f768419a2a92249c9f49d5a08cdcc530da10442ee0419051353b04dc22c2c26d55ddb7df528b215</hash>
        <hash alg="SHA-384">85cf71ac9cb3479ab819c9ddb42b904377a67a177e5e92664898138021bf5f0622332ba2e247ac0f87c8b7812e3c9b1a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.zookeeper/zookeeper-jute@3.6.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://zookeeper.apache.org/zookeeper-jute</url></reference><reference type="build-system"><url>https://ci-hadoop.apache.org/view/ZooKeeper/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/ZOOKEEPER</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/zookeeper-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper-jute</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.yetus/audience-annotations@0.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.yetus</group>
      <name>audience-annotations</name>
      <version>0.5.0</version>
      <description>Annotations for defining API boundaries and tools for managing javadocs</description>
      <hashes>
        <hash alg="MD5">032788f0841d26b027957fe91f2cd696</hash>
        <hash alg="SHA-1">55762d3191a8d6610ef46d11e8cb70c7667342a3</hash>
        <hash alg="SHA-256">c82631f06c75d46bf6524d95f0d6c2e3aef1b3eb4a7b584ca296624ef0d474be</hash>
        <hash alg="SHA-512">7c05f699ba6d63053d513dfc1bdd893f5a76f9973d2bf366c31a5eb99f9954521cb58db0f7d1274fddf2dd39dacbcde6907d5ffc8afc728c91817d2e99ee2a96</hash>
        <hash alg="SHA-384">3e2b37e3c3e11a760663b9e4c08c5227d08c3d0924f581284d20afb9361bfb58e4052c255cb5f647b1ae1a2bffc3d10c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.yetus/audience-annotations@0.5.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://yetus.apache.org/audience-annotations</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/YETUS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/yetus-dev/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=yetus.git/audience-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.2.4?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-core</name>
      <version>3.2.4</version>
      <description>Metrics is a Java library which gives you unparalleled insight into what your code does in
        production. Metrics provides a powerful toolkit of ways to measure the behavior of critical
        components in your production environment.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">e19fc7c888ec78263be178648712a467</hash>
        <hash alg="SHA-1">36af4975e38bb39686a63ba5139dce8d3f410669</hash>
        <hash alg="SHA-256">a083e3f3bdf4173d7065cdd4521964394a840d586bf8653676203d18354a6d2c</hash>
        <hash alg="SHA-512">6b5985084f34a89218db6a1bbff1ac7e74df724a77679a2d4c2a45204c033c931ada3ddb01a970632fe9de929ed3596e0bb122b184b371c9928279579f2ae8ec</hash>
        <hash alg="SHA-384">f4909fb73def54b5af498934b9b60ad0f289aaa04be99268966b56bfd1be62585072721a01e836aab91d225cbf2f906f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-core@3.2.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://metrics.dropwizard.io/metrics-core/</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/dropwizard/metrics/issues#issue/</url></reference><reference type="vcs"><url>http://github.com/dropwizard/metrics/metrics-core/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.8.2?type=jar">
      <publisher>xerial.org</publisher>
      <group>org.xerial.snappy</group>
      <name>snappy-java</name>
      <version>1.1.8.2</version>
      <description>snappy-java: A fast compression/decompression library</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">942d60b1e87f37b5d616611fda015605</hash>
        <hash alg="SHA-1">4205e3cf9c44264731ad002fcd2520eb1b2bb801</hash>
        <hash alg="SHA-256">b2961229ff4ef452681ff99a9a964a86e304290fd2f507d16fcd970970478bac</hash>
        <hash alg="SHA-512">6251d826a117bcb6986db1e3c99529faf4a4a76eec32edc4c6dfac4d46a143d170e8e924a93b37a41939741269c7744e596bb77054e43aac0768015e5c379071</hash>
        <hash alg="SHA-384">fea0abc4dd303d1ed27141a9b733be6659b395b210794c070fd94632c7f7d240e8cac05f151a7b5164bfbb5429a8e7d0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.xerial.snappy/snappy-java@1.1.8.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/xerial/snappy-java</url></reference><reference type="vcs"><url>https://github.com/xerial/snappy-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.curator/curator-framework@5.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.curator</group>
      <name>curator-framework</name>
      <version>5.2.0</version>
      <description>High-level API that greatly simplifies using ZooKeeper.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f8c775103235dd8d050bfa29e1417a98</hash>
        <hash alg="SHA-1">dffcfb521d99b9b7515f7b6041badac62910075e</hash>
        <hash alg="SHA-256">9a6b6ec713bd4145fa6912f2197a1f642806c10d4ba87561dfec551f6eaec4f1</hash>
        <hash alg="SHA-512">898df91f7907da4b6ff333f20c3c384e8b0d422dd552ebe506c5241978271a96e1b22a307bc95e5a93fc3024ad1b3dcc98f5a24de148057cff5c4ce596c9e5b7</hash>
        <hash alg="SHA-384">57f36b4b6335bb9af9132ff629de71097807c70fabfc16f70461cb285d4d7e07490b3343859f5cda0c5caabc2a6614bc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.curator/curator-framework@5.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://curator.apache.org/curator-framework</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Curator/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CURATOR</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/curator-user/</url></reference><reference type="vcs"><url>https://github.com/apache/curator.git/curator-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.curator/curator-client@5.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.curator</group>
      <name>curator-client</name>
      <version>5.2.0</version>
      <description>Low-level API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e511e26039ab3afc9c8574c2a4a96112</hash>
        <hash alg="SHA-1">221dde476d45c328da9a08e0671edc4ee654ccb4</hash>
        <hash alg="SHA-256">345ec409bc026e114e8fd471a9273f631a3a494f0e091b092c1ac94499ddee4f</hash>
        <hash alg="SHA-512">6932678be80cccebd4816cf09254f24d05326094852f698577308aa62b38a21f18ee6e360c8c420bfeddb572c6d0b4e6211cb8dff80ccb4b9a7f2bff55c925ae</hash>
        <hash alg="SHA-384">ea0ed9c45c4e642a4d00a4c047a6a3224fa70fa087a3cb35d8684fe860cc650a3df5fc1dad4d4a511c940c8d4e421f90</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.curator/curator-client@5.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://curator.apache.org/curator-client</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Curator/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CURATOR</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/curator-user/</url></reference><reference type="vcs"><url>https://github.com/apache/curator.git/curator-client</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-simplekdc@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-simplekdc</name>
      <version>1.0.1</version>
      <description>Kerb Simple Kdc</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">16517ceeb9c76a7499d8ae5b98607c8a</hash>
        <hash alg="SHA-1">1e39adf7c3f5e87695789994b694d24c1dda5752</hash>
        <hash alg="SHA-256">9c9976a603833c001a8a4a4e5b2ea0a6775a84e5656b0eca1fe4eb4d068ceda7</hash>
        <hash alg="SHA-512">46a284944d9740718a068b8e30b1c37c56ea656c7a8af8dba553e193e070c8ca4dd58339d5f5b172185edb3e5581fcdfc3ee7402cfd1ccdd5a671fac0274ef42</hash>
        <hash alg="SHA-384">5815e709f59a329b8a9fc24c9e6e3630a7cdc84c4778a1d52e08512121d190915e5dfc329180ded1c29701a8c9f2ccef</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-simplekdc@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-simplekdc</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-simplekdc</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-client@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-client</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Client</description>
      <hashes>
        <hash alg="MD5">bf15f4b482bd784fa8b58a3f509a4d44</hash>
        <hash alg="SHA-1">a82d2503e718d17628fc9b4db411b001573f61b7</hash>
        <hash alg="SHA-256">020fa95a809b96358ab95d43666471838372659af1cbc3f24ef73c29374e9af0</hash>
        <hash alg="SHA-512">6286939bdf4e79f2602c4e466fb58e7faf36a16ec16e7abfa035155f67532371fd6743f0e2200cc37fd44efa32830cd36246ace912aa3960cd7832d367131a53</hash>
        <hash alg="SHA-384">dca413577181fa513f534ef6dc232010a3f7430262981e27ad03369d88cba55fa01a58db072598aae2ae704be911ca3b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-client@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-client</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-client</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-config</name>
      <version>1.0.1</version>
      <description>Kerby config library</description>
      <hashes>
        <hash alg="MD5">f70f90ed440cee40f4f59f9c75cd6b96</hash>
        <hash alg="SHA-1">a4c3885fa656a92508315aca9b4632197a454b18</hash>
        <hash alg="SHA-256">244520e9bd61e8cd40a475fe615fbea45ca042fc9d50780df30bc7146f77b8c9</hash>
        <hash alg="SHA-512">27bbf17b8fc1bf5b56e8463f1a2a23846296074a6fb963ef029eac1b6d632ad48065e583bb925b4ae744c86ba11dc83f433224c7e785fcb56d324da12d8ab0bd</hash>
        <hash alg="SHA-384">67cc4e0494f7f580adcc7a8d8e247ec0d6c2c678fdad9f9bdd64955a12517af05146f05310fddad7a77d5a06453a2482</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-common/kerby-config</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-common/kerby-config</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-core</name>
      <version>1.0.1</version>
      <description>Kerby-kerb core facilities</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">545c60f29fc4d57a1e50e3be72c88fe0</hash>
        <hash alg="SHA-1">82357e97a5c1b505beb0f6c227d9f39b2d7fdde0</hash>
        <hash alg="SHA-256">4db26bc4a106603044d8883f7280abc803b055b36f5c510a3fffc41e5de4c651</hash>
        <hash alg="SHA-512">76d63f27c1446c7e3394b7778f8839f19d86755b6aff2941526276bfa06b89c32c3dca1698b964cdc24a8b217a4ac4125a32f6aa051fce1183c37a3ac323fcd3</hash>
        <hash alg="SHA-384">85c6dc3fe4c582e5fdd3e084be158c67f31e93836ed7167205069f369884b1427fafef519182d0565bf92544aeabe626</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-core</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-pkix</name>
      <version>1.0.1</version>
      <description>Kerby PKIX Project</description>
      <hashes>
        <hash alg="MD5">4f99a872b054dead71460c3ed3bca6ac</hash>
        <hash alg="SHA-1">4c1fd1f78ba7c16cf6fcd663ddad7eed34b4d911</hash>
        <hash alg="SHA-256">0410bc1950b57f4792ea6b86df59a2ee87e4ad69b33a17ded438e6686894346a</hash>
        <hash alg="SHA-512">b54347dc0e3f56cf9a9068dc39c8838368067920291520ba4df59184faf3eee43898d6d0d50cbcfce3111bf2c3bd1a5cb31ef1bc2ac47f1bb1e216ae39444d2f</hash>
        <hash alg="SHA-384">9e66f1d910deb0eaa3dba289811423b23fdf2d362287b3dd3cad8a63737303ded842a2a7d67255900413b15ad82e2937</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-pkix</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-pkix</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-asn1</name>
      <version>1.0.1</version>
      <description>Kerby ASN1 Project</description>
      <hashes>
        <hash alg="MD5">95c31186c0ec12b85bde99e286fe2f8c</hash>
        <hash alg="SHA-1">d54a9712c29c4e6d9d9ba483fad3d450be135fff</hash>
        <hash alg="SHA-256">010a3c33e5b652f11cb29a6e66826a24331e526cf58662dccb4d6695fc6ca59d</hash>
        <hash alg="SHA-512">db962f4aa3a8eb21c36badf1f268d1d68c2e95179f64f7d14fdaaa9b912af0edc989a58a79924c44a56f544b0b68df6de6d6e3bb4f8aa53aa37afc2767cb0684</hash>
        <hash alg="SHA-384">31997848a8dbae5fa350bcf6804603e4c24d3377d0d7ea2f8b07b250fc0cce9d8f7c7f5b7e08831b947e7e4a387c3d7a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-common/kerby-asn1</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-common/kerby-asn1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-util</name>
      <version>1.0.1</version>
      <description>Kerby common util, without any 3rd party dependency</description>
      <hashes>
        <hash alg="MD5">21974b90e4e4d096b526268712dfd4cb</hash>
        <hash alg="SHA-1">389b730dc4e454f70d72ec19ddac2528047f157e</hash>
        <hash alg="SHA-256">db7e2f329e160aaac305268ccb7287c16cf5542cffdd786a8592212df7c315aa</hash>
        <hash alg="SHA-512">30de762e56e57f3b3d54c71ce80046fbbeb67795b8d5cdc493ad239271f2cddc1a9c485d6b49d1b8b970af37bd45fc424adc85684540127a1b4d7da08f8a82b8</hash>
        <hash alg="SHA-384">95c1891ff1e817767106ac887357d20f37de0e905a4fd3aee8e726d38b842f95ed30988ab905dfcf194d727621c10eec</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-common/kerby-util</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-common/kerby-util</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-common@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-common</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Common facilities for both client and server</description>
      <hashes>
        <hash alg="MD5">678e68224b54168f3106b5644ef6f45f</hash>
        <hash alg="SHA-1">e358016010b6355630e398db20d83925462fa4cd</hash>
        <hash alg="SHA-256">f62bb275781f8092bb6252e4ed201c9f5e4ab7a3d49b650ab58c87862b0bb2de</hash>
        <hash alg="SHA-512">e1a91d486633bb24c2f7021c21277cb5656aeb7b961fbbec733fe9e6d6c85aa915798b0d987f9efb2e633a0ff9d7bb772502b7918ef6c8304f0c20ef84873b5b</hash>
        <hash alg="SHA-384">6729901924d609d9b650a264aaee7ce6605719b01406fdc8943e13f9918c65881ce7bc7379a6b571903ccee9e6899f45</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-common@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-common</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-crypto</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Crypto facility</description>
      <hashes>
        <hash alg="MD5">4a201fca38ffe52565f5816d7c708ccd</hash>
        <hash alg="SHA-1">66eab4bbf91fa01ed4f72ce771db28c59d35a843</hash>
        <hash alg="SHA-256">af94527564908b5a8ccfdfa8e67dd61c09e062459a0110d85115c42fc8f82b41</hash>
        <hash alg="SHA-512">e5d9dff3547fa2634b1704dcb2e294ef0a71f0b8f79f2e5e4e1c2a78f2f06d8e8c0aac2897c0751b972bc3c8c588512ed44fe145b7410e492f8ea2511bec9b31</hash>
        <hash alg="SHA-384">87e015986ad0c3ef473dfb9ab1e2ed2f21538741edcfe0459cfac22885610819fed9d34d9f4167cb96332d093f945635</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-crypto</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-crypto</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-util</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Utilities</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">424542890d4dc9f61b1754a12a1c7758</hash>
        <hash alg="SHA-1">93d37f677addd2450b199e8da8fcac243ceb8a88</hash>
        <hash alg="SHA-256">9cb1a2715a35cbabc9e8f1be3287bb086100763847e2f17577b72a025f8adaab</hash>
        <hash alg="SHA-512">dab63ef1be0a122b3bd8a1986741a64ebf7361dc01a1a3ef23764dfc89fce85a15c2cfe43e3502f37093d0e866011980378c09d5efb45d9754c4cd4e5b686ac3</hash>
        <hash alg="SHA-384">dbfe62c73760d41565ec429e3de8a87cb71a35df2bbd28d1007489cef60106942d8893c8c05bf20435e2b09f11bcdb75</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-util</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-util</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/token-provider@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>token-provider</name>
      <version>1.0.1</version>
      <description>Token provider project</description>
      <hashes>
        <hash alg="MD5">c9ebfeba17a28a69f33acbb5b6e831c5</hash>
        <hash alg="SHA-1">e6feb6b7c06600924e8b6bda3263c870cfb0a447</hash>
        <hash alg="SHA-256">022c92d7438b60789bc212f53f1f33ced2656ba8bf073a1f587df51e083e368a</hash>
        <hash alg="SHA-512">90c882d018cbaa389c6cd971c7dfa052c584337151501465366ae61f10107bd3d4c7471b1168177b9458c78c33791757398e6e25d3c93bbc352377958bcd4511</hash>
        <hash alg="SHA-384">37662a93ecd4ca9b6ade6842a6533f2cf3386eb1c67e22f7080f9fb6f486649eedb11ca084172c19bc2fbd5e062014a5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/token-provider@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-provider/token-provider</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-provider/token-provider</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-admin@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-admin</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Admin facilities</description>
      <hashes>
        <hash alg="MD5">a673628234b00564b9d3254990348a85</hash>
        <hash alg="SHA-1">7868b29620b92aa1040fe20d21ba09f2506207aa</hash>
        <hash alg="SHA-256">27b012f556b02bdf4ecd0742a7ecdd725a562e95a194e3413662fe2e781ff889</hash>
        <hash alg="SHA-512">899bad1f5478c2687844190626ae71c8526d9918d2daf66d32594107219f1aac18d883fb95797180c770d4245be02e1e52c1dbf0052dd5bfb534a23b37c68333</hash>
        <hash alg="SHA-384">acfa9138d33cd22f60f662df93f27d4a6816db814e3d1325ab61da6fbfce175bec3241a246a5f89290d5231253962134</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-admin@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-admin</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-admin</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-server@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-server</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Server</description>
      <hashes>
        <hash alg="MD5">0c067e61bd55c894a2ed67d25c75b323</hash>
        <hash alg="SHA-1">c56ffb4a6541864daf9868895b79c0c33427fd8c</hash>
        <hash alg="SHA-256">dff4eebc6cadaa8bdc1084fc1d4c20fda954aed74913845e79c89572768e463f</hash>
        <hash alg="SHA-512">a3c1feb689f1ca216afee0f79ce4173f3d8d4d1dd7a4c591788d1f7228d582affff3e9340fa8d163d8fbcb8551f8d8768142d3e8ec1bf27475b5ae0aed390130</hash>
        <hash alg="SHA-384">0e38a7b58679f4027faab0b5b32d7b2b993986c4344472eb1de70158793727d108ad289ac8faeaa199107476e8076499</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-server@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-server</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-server</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-identity@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-identity</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Identity</description>
      <hashes>
        <hash alg="MD5">b25172596ffaa92105bae3d5f54639ff</hash>
        <hash alg="SHA-1">eb91bc9b9ff26bfcca077cf1a888fb09e8ce72be</hash>
        <hash alg="SHA-256">35fd995cc7a0c71f86adaf716dee34f6e4d1e473eff452a74f4430bd196e6424</hash>
        <hash alg="SHA-512">a6d15629c637e7e66772bd5d1430ffe8a435261e50eb534c7a133a063292455ff4d237f09570defbddee6bca04a446e7ce30774ca8f32d540e6a2a19af2b92d3</hash>
        <hash alg="SHA-384">27beb9db175a5f8b114aff2a2bc4112bce7725a81522f8e1ed603d589e513cebc8fbdd932c29282607b5948e4eb6965c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-identity@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-kerb/kerb-identity</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-identity</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-xdr@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-xdr</name>
      <version>1.0.1</version>
      <description>Kerby XDR Project</description>
      <hashes>
        <hash alg="MD5">052ad9372894a4f0ef0f7792dd7daa9a</hash>
        <hash alg="SHA-1">7d1b5b69a5ea87fb2f62498710d9d788d17beb2b</hash>
        <hash alg="SHA-256">c24e2d9fbaef40a0a61ee36c19e41db5141bfbe7a2669be0227dee86ccca6d6f</hash>
        <hash alg="SHA-512">39cd6ac81c96839c28502ddd46efe32a0a74891ac497a61a7889a4bfef67c70806010402585b557a6617c522bf176cdb6021dc6bec80ad82fbeca3237f7c302d</hash>
        <hash alg="SHA-384">18ea9b65062387f526d7fd3af30c865f8686c2d8978147e6e3dcd11ae3eb609c3838d0e231ef3847062f6e804011616e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-xdr@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/kerby/kerby-common/kerby-xdr</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/directory-kerby/kerby-common/kerby-xdr</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-guava@1.1.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop.thirdparty</group>
      <name>hadoop-shaded-guava</name>
      <version>1.1.1</version>
      <description>Packaging of relocated (renamed, shaded) third-party libraries used by Hadoop.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">50e10b8500468cc0360cd406fd600bbc</hash>
        <hash alg="SHA-1">02419d851c01139edf9e19b81056382163d9bfab</hash>
        <hash alg="SHA-256">66711253edbb9a172efbf12e8b4511cd413627d069e0f5a62ea475b4e14093f8</hash>
        <hash alg="SHA-512">84c17f77f4d49c473996c6c447f170cc470d363c705f73dc75dee7f7be5d5b68dfbba5aa5df5d27d6137eb37d53c95536b020d2f8eb3fca8a4fe3553ba5b34e0</hash>
        <hash alg="SHA-384">cf32597b1537704ebcb10463f2c9186a6dff6ca246fa7c51c13399f7e31de366879958e3eb877236444820037afc810d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-guava@1.1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/hadoop-thirdparty/hadoop-shaded-guava/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/maven-apache-parent/tree/apache-21/hadoop-thirdparty/hadoop-shaded-guava</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-auth@3.3.6?type=jar">
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@3.3.6?type=jar"/>
      <dependency ref="pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/ch.qos.reload4j/reload4j@1.2.22?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-reload4j@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"/>
      <dependency ref="pkg:maven/com.nimbusds/nimbus-jose-jwt@9.8.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.2.4?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.8.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.curator/curator-framework@5.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-simplekdc@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-guava@1.1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@3.3.6?type=jar">
      <dependency ref="pkg:maven/jdk.tools/jdk.tools@1.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jdk.tools/jdk.tools@1.8?type=jar"/>
    <dependency ref="pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
    <dependency ref="pkg:maven/ch.qos.reload4j/reload4j@1.2.22?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-reload4j@1.7.36?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/ch.qos.reload4j/reload4j@1.2.22?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar"/>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    <dependency ref="pkg:maven/com.nimbusds/nimbus-jose-jwt@9.8.1?type=jar">
      <dependency ref="pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper-jute@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.5.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper-jute@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.5.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.5.0?type=jar"/>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.2.4?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.8.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.curator/curator-framework@5.2.0?type=jar">
      <dependency ref="pkg:maven/org.apache.curator/curator-client@5.2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.curator/curator-client@5.2.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-simplekdc@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerb-client@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-admin@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-client@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-common@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/token-provider@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-common@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.8.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.8.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/token-provider@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.nimbusds/nimbus-jose-jwt@9.8.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-admin@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerb-server@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerby-xdr@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-server@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerb-common@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-identity@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-identity@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-xdr@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-guava@1.1.1?type=jar"/>
  </dependencies>
</bom>
