{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.5",
  "serialNumber" : "urn:uuid:67db0adf-17b7-3793-a12e-2fbb26cb1ba3",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.8.0",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "76ffec6a7ddd46b2b24517411874eb99"
          },
          {
            "alg" : "SHA-1",
            "content" : "5b0d5b41975b53be4799b9621b4af0cfc41d44b6"
          },
          {
            "alg" : "SHA-256",
            "content" : "6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81"
          },
          {
            "alg" : "SHA-512",
            "content" : "417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d"
          },
          {
            "alg" : "SHA-384",
            "content" : "5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-archiver",
      "version" : "3.6.3",
      "description" : "Provides utility methods for creating JARs and other archive files from a Maven project.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-archiver@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-archiver/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-archiver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%3DMSHARED+AND+component%3Dmaven-archiver"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-archiver/tree/maven-archiver-3.6.3"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-archiver@3.6.3?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeAggregateBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-core",
      "version" : "3.2.5",
      "description" : "Maven Core classes.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0988ce2795bb72277a0199179154d398"
        },
        {
          "alg" : "SHA-1",
          "content" : "fbec7cf0df4fbc2896a6768ae59053877c05c241"
        },
        {
          "alg" : "SHA-256",
          "content" : "4f1a0af8997e1daf778b91c5ae9e973f92df699439d909fdec7fc6055c09de12"
        },
        {
          "alg" : "SHA-512",
          "content" : "0173f2ad5720466164832da561b8558a1e75786457548ce3d51c5b15c9a08b5c797b1964e1b4398dc31c747917da604fb50a24a747ad1bab16de714002de60a9"
        },
        {
          "alg" : "SHA-384",
          "content" : "a680dfb67da5b1e63f0acfe9bcf3fa123e8b164c92735a4537d74c802bc4ce27a6b95865b536f375f054be6b1f7da0ac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-core"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model",
      "version" : "3.2.5",
      "description" : "Model for Maven POM (Project Object Model)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "16ceccebac412654c427dcd66df4f6f9"
        },
        {
          "alg" : "SHA-1",
          "content" : "ced305476a43e8a042a59e94ef38b3291d9ce1e7"
        },
        {
          "alg" : "SHA-256",
          "content" : "8d439cc1661349dab1c69eed0f831336d187e162cc6d68aa4deefcff57ee0624"
        },
        {
          "alg" : "SHA-512",
          "content" : "5f67231329c4d1fceec84684f69b3e2a840c4acac8a3af927036e6cc05fe35562fc6a17b104ddc52d8d863fdf70160aeda99259cbc3b08d63b217f52cb8a7658"
        },
        {
          "alg" : "SHA-384",
          "content" : "b341f59c5756a7ad161dda15c114ee027d111b2fc5982ed1e9af1882cad87acb6628b08a971f04a5c5716c094416fda2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-model"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-model"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings",
      "version" : "3.2.5",
      "description" : "Maven Settings model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9f78e75d76e2f92c08cbbc859bf6e272"
        },
        {
          "alg" : "SHA-1",
          "content" : "52179da78893ed7afea98d980c55e658fb04d9b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "1874d4ee660b935675a60bdb2ef63e0ff5a81769f4fc04a035fa9d4c4e238224"
        },
        {
          "alg" : "SHA-512",
          "content" : "8e2e132534781f316060fe02eecde47dac20c50fbdc30a9e98efc74a1df58e22601319d779fb6d1fa121fab3860ffa61842ab34c04b4e733bf3a6daab5cd1b36"
        },
        {
          "alg" : "SHA-384",
          "content" : "f38f547bf3eaedf9f224fd7635ac2b227a381846e80e802a7b664f0652a28487e87710236f016ea3dc4888df9cdb05b3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-settings"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-settings"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings-builder",
      "version" : "3.2.5",
      "description" : "The effective settings builder, with inheritance and password decryption.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c48b8a83cd03a5672f07b559ca1a5307"
        },
        {
          "alg" : "SHA-1",
          "content" : "7fd98de76398a3ff5c1d9a7b85f26cb65a862578"
        },
        {
          "alg" : "SHA-256",
          "content" : "9c5a014ceb8abb55e997dcc41d17bbe0ae145db574be6b7186e75950c241269f"
        },
        {
          "alg" : "SHA-512",
          "content" : "f2015ad44aaa0b217e5e0d1e22c366136cd44588961cdca2104c4d9bf7d5067e4952880c537a86a669f1ca0169344012a4ca896a3ea3fed2fd7615ff3a12a208"
        },
        {
          "alg" : "SHA-384",
          "content" : "28eb1569383d19df9a7c0568193b733c60ce22ff2bed3eff79bd1773178d65fe237045ffe1423b5bf31fd8fd7395619d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-settings-builder"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-settings-builder"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-repository-metadata",
      "version" : "3.2.5",
      "description" : "Per-directory local and remote repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bda12e2d6070d417a6118c6ba769fd4f"
        },
        {
          "alg" : "SHA-1",
          "content" : "17049c63ce63654c112eeb82797edee49f8a4601"
        },
        {
          "alg" : "SHA-256",
          "content" : "62b517b77f24edebdee0e382ecddb44bb6632b7c08c528d625aed7d2980df12b"
        },
        {
          "alg" : "SHA-512",
          "content" : "487f49f1a2da4c39d92d2460864c7cff8efb2fdbe05ac89346a675b5964c4dc4c4551c43a28a423c55e7184f5fe0e517258c5427b2611f171e601794e8e00c55"
        },
        {
          "alg" : "SHA-384",
          "content" : "b49837b04166dac3e7667a0a006c889c7c39b8efb41ff6e1ddd9fbeb0c14ca426f8be4bd62813a92c93020ebdd61bc48"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-repository-metadata"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-repository-metadata"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-artifact",
      "version" : "3.2.5",
      "description" : "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6ca73ba6de24218f238a45d8a06e519b"
        },
        {
          "alg" : "SHA-1",
          "content" : "bf5ce89d5f7ff57f2a33e78067ba97e62bae007d"
        },
        {
          "alg" : "SHA-256",
          "content" : "270385907ecfbcb256fe5afb883869fd57a5c021b5242693743ef787605c6335"
        },
        {
          "alg" : "SHA-512",
          "content" : "7be445c021ac2438a9f37d37db159ba5875b32d74ee901a07462f266f1847c97e69cffd3f51058e468539bfa322c270f6bb50852cbb38e39806011386fb08ed8"
        },
        {
          "alg" : "SHA-384",
          "content" : "c918bb72c186b84a6990db3749fdf0dbf819f815fde27242276cac59d9da826f00433794f53987ebc844ff6df3768616"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-artifact"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-artifact"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-plugin-api",
      "version" : "3.2.5",
      "description" : "The API for plugins - Mojos - development.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "11a402fb287811b6a249a553e9af5383"
        },
        {
          "alg" : "SHA-1",
          "content" : "5c6893f4ac5425d07c4053f3c4e27b2a3b37c516"
        },
        {
          "alg" : "SHA-256",
          "content" : "194a6f0ce889ed3b0d8a9bc4d3c79541e878098b7e303e4ac76c1031850772c3"
        },
        {
          "alg" : "SHA-512",
          "content" : "ace85ef74fb6a582afe6edb8282d4f09e2e4d5899e7471a0169cb8ccae9bc93d664b9c3e7f7be753434e1b30290447d87a3226969045cfb4e3e15b3ca2a596fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "0e796a4fe15828a8b8fc7f642c8cf7932c7b15de868b72eb222f95b91d55fd5281fd679f8a1cfaebfc3d1eeaca794edd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-plugin-api"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-plugin-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model-builder",
      "version" : "3.2.5",
      "description" : "The effective model builder, with inheritance, profile activation, interpolation, ...",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a216c67dae851a4cedb4b431a674eba2"
        },
        {
          "alg" : "SHA-1",
          "content" : "7a32f3966fab463df9cdae95fd6df8c2e561e3ae"
        },
        {
          "alg" : "SHA-256",
          "content" : "cc5321269d080ad6694458f53186be5391a21c488ab3a7d6dd73123c7681879d"
        },
        {
          "alg" : "SHA-512",
          "content" : "a25a612d607e301e3041a0c6edd708a096d23ec6e2e1fc1bc092e1f6b9a6974ba9f5b256007ca2b9a9d23a45b84b2d7b49f38e31ebe42844ad438ad4da92b922"
        },
        {
          "alg" : "SHA-384",
          "content" : "36a95790b1b09f903ad1f245318d1874ca2f6a5f8d592f5b9a1c1a182f8f5ed0923f7d1c672ec117b503c33f10107f4e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-model-builder"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-model-builder"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-aether-provider",
      "version" : "3.2.5",
      "description" : "Extensions to Aether for utilizing Maven POM and repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b6cc79c8c8abc3c92ae7d57c4cbb078"
        },
        {
          "alg" : "SHA-1",
          "content" : "dfddf469d20b877b184dda5d6e60f0c75f558a72"
        },
        {
          "alg" : "SHA-256",
          "content" : "703944b922d5351aad53b842f7dd38439b7213425f13c6c7f034b8b699b7d578"
        },
        {
          "alg" : "SHA-512",
          "content" : "8ce9984b76364e162f8f31c99222c9b996813f2e12e6a8406d6a438d857855f8255e2f0403af281b081e6bc6e95374cb9faa9cff3f35214de1005c477f408299"
        },
        {
          "alg" : "SHA-384",
          "content" : "619bcb4fcf830a43b75b5bb3545173aa302102ead74ac3addee28f278d906841292130c4f515a15319893a3617fdd5ea"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-aether-provider"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-aether-provider"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.aether",
      "name" : "aether-spi",
      "version" : "1.0.0.v20140518",
      "description" : "The service provider interface for repository system implementations and repository connectors.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "51c5870c01f48af3231ce6499464827a"
        },
        {
          "alg" : "SHA-1",
          "content" : "985a9a12b904fb3bafd4dc6b49f6a084845703a1"
        },
        {
          "alg" : "SHA-256",
          "content" : "a3266d127a4e9f4aa9c4fa0986e31eec784e866f79112e1840d1667e17c10fb2"
        },
        {
          "alg" : "SHA-512",
          "content" : "8074048d24d05c20da7adda6b8de93249e9e22b7fb62612b74c9f5623b093a7f23ba2cc2e77808542ee5dca6352b0e40e4f755dbd2a63f83a16d24b180bc19fc"
        },
        {
          "alg" : "SHA-384",
          "content" : "fa6d14091ab9b0ff63337e31cd0270640e1a84675733963c2d186ad1a6d2f8f64360431b81124e9c5f3d700ef8269374"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/aether/aether-spi/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/aether/job/aether-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/aether/aether-core.git/tree/aether-spi/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.aether",
      "name" : "aether-impl",
      "version" : "1.0.0.v20140518",
      "description" : "An implementation of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "819d1c095629b2bd9ed0980395c91b7d"
        },
        {
          "alg" : "SHA-1",
          "content" : "a5ee67be2c99dfb95ad61235d749c92ae09c926e"
        },
        {
          "alg" : "SHA-256",
          "content" : "9a9b60e685385225f08e662cb9f60d96610b0987f0f47bbf3f0c92df8a897d00"
        },
        {
          "alg" : "SHA-512",
          "content" : "594b84397a652e481e1ed14a7b53b554bf3e851410b99189f78d9aa4dfa872f02e9e536255357799d934d1171607a36d38e7e9ff6409d04f4e88aded914f215b"
        },
        {
          "alg" : "SHA-384",
          "content" : "5b38a890f624b378fc5e4e067aee2273f24b6f1dd3ef72ae0dd450bdfdfa873e7f814beab8150b9e0c6957275d81b29e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/aether/aether-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/aether/job/aether-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/aether/aether-core.git/tree/aether-impl/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.aether",
      "name" : "aether-api",
      "version" : "1.0.0.v20140518",
      "description" : "The application programming interface for the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b05ef5410dad83a4e9ba50e08e0dbbf4"
        },
        {
          "alg" : "SHA-1",
          "content" : "be68e917f454dcd841865ad7cf9b7615b26a51f7"
        },
        {
          "alg" : "SHA-256",
          "content" : "84b98521684ab22f9528470fa6d8ab68a230e1b211623c989ba7016c306eb773"
        },
        {
          "alg" : "SHA-512",
          "content" : "41addf7be0094decb6b4d6c11811b7a7edcc280d60f8a5cb3346d963422cacea84b6dcba7a00fa4a93c69a44b7dc5afd0960b8f56e60ae36f6c8e97ab52ffb5e"
        },
        {
          "alg" : "SHA-384",
          "content" : "44e821c90b238407402910a378e17ff3d845f26252bc74ad4b62c4f04bec6aa0a68ecc068eb8ed98ecd11d1b3b628d1f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/aether/aether-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/aether/job/aether-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/aether/aether-core.git/tree/aether-api/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.aether",
      "name" : "aether-util",
      "version" : "1.0.0.v20140518",
      "description" : "A collection of utility classes to ease usage of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "08495ee7ecf90f0b528e7d65471532af"
        },
        {
          "alg" : "SHA-1",
          "content" : "7df5ba98ce8b78985d75fdd8c2981fe69234ef85"
        },
        {
          "alg" : "SHA-256",
          "content" : "aff0951639837c4e3a4699a421fa79f410032f603f5c6a5bba435e98531f3984"
        },
        {
          "alg" : "SHA-512",
          "content" : "ec43fd01a81d7f8e027603c4627d50eff58eb53e970b6888b0fe07d2963876075d05fc9a5e39f957904b4bc9bd6d729b9d17a15852064939b7a59f322830747e"
        },
        {
          "alg" : "SHA-384",
          "content" : "f6cb988a67a2d93ddcae222408b43d92fe6ede0bbc3646115a246a9a088a418ec50be729efd9eed4cada828eaa171946"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/aether/aether-util/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/aether/job/aether-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/aether/aether-core.git/tree/aether-util/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.plexus",
      "version" : "0.9.0.M3",
      "description" : "Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "964e7bc9837b270566f18b87af65f5d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "b493c7abcc6e04fa0a6a20d489a3db0395c76f70"
        },
        {
          "alg" : "SHA-256",
          "content" : "c99674d3773e26154885661711f0b6d63aa5008f5cc99227a236756d4ad9de5e"
        },
        {
          "alg" : "SHA-512",
          "content" : "68c5df01ad522917d954b62cb3b11376b3446920e8d5cb35737de508e6acd91a36b34144933f427bbe1d29dca9097ba9dd2431c713fe18069f271a80b519f051"
        },
        {
          "alg" : "SHA-384",
          "content" : "bd39a6cc9c18c62e64393da231b61efbf5bdeb8c0306e455bbc6e33f4b614e14023ccfbec83c943994da6684ab453092"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/sisu/job/sisu.inject/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/sisu.inject/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/sisu.inject/org.eclipse.sisu.plexus"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.inject",
      "version" : "0.9.0.M3",
      "description" : "JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "643a13084e0ac59cdda06319e1b348ea"
        },
        {
          "alg" : "SHA-1",
          "content" : "3665002ba4d16dfa779ef658a63d0608c4bd898b"
        },
        {
          "alg" : "SHA-256",
          "content" : "15335c4dcf082f599fb8eddcfb58d6a7e9a9c97de2883c257089a479b9b24522"
        },
        {
          "alg" : "SHA-512",
          "content" : "76267078f3dd887fd7c4a0931d0ae057d5f51478f712ce4bb5530cfa5c2aa18a8dbe935b32c1afb01a4e2cde44d30579baf5868b8b63ee066ea0714fd9d8a81c"
        },
        {
          "alg" : "SHA-384",
          "content" : "d24164f8aaae165de8533530b90168228e7d107a5eeb63997bf6e2d41f1adfaabf29aa9ab4f08e3445c69aa57f6c09b8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.inject/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/sisu/job/sisu.inject/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/sisu.inject/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/sisu.inject/org.eclipse.sisu.inject"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-xml",
      "version" : "3.0.1",
      "description" : "A collection of various utility classes to ease working with XML in Maven 3.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cd868918ebc742350840124ea4422ab0"
        },
        {
          "alg" : "SHA-1",
          "content" : "b0e73c21402f03c2765674b8dede21673b3288cf"
        },
        {
          "alg" : "SHA-256",
          "content" : "c1a510a87a62bd2d74ac1472dd31c3f9e9b0b8b8568f37d77c0f135415bebd05"
        },
        {
          "alg" : "SHA-512",
          "content" : "422f2ccdda00dd8c90c2f5b5f4ad6f0410fb6f2bcb3429d196f7f39c96a44a6709c70539648214d5b7686a70240a6c16c7b985b943f8002d318f90896230a259"
        },
        {
          "alg" : "SHA-384",
          "content" : "da397eb08963f4366d2119af1d993efa00fee25e50b09454422805ce83e662507e2afc7f6b4171a9c5da111d7ada3365"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-xml/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-xml/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-xml/tree/plexus-xml-3.0.1/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "org.sonatype.sisu",
      "name" : "sisu-guice",
      "version" : "3.2.3",
      "description" : "Patched build of Guice: a lightweight dependency injection framework for Java 6 and above",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "733be430711a32f2b9ba72da565cab2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "6b8262f32ff7b60881aed3e7aa9d81fdb48330e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "004af7012b6d11ab585ae841130ff091dcad6531d7bf13db4d7deac91589eef4"
        },
        {
          "alg" : "SHA-512",
          "content" : "6cbd0095a564aa76423a835c08ee3c12f61eecae241f1c19fb4909f6b5355143e901766e9c7ae97953f70adbec79b8561cbc1e02af51c23552599ed5cb2b5ce2"
        },
        {
          "alg" : "SHA-384",
          "content" : "1af7c634c87fc8ec7245c0ada7031f43c54df00072fc637604d3043f43e319368e65e234457b53313364ecfb0c03b6fc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guice/sisu-guice"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guice"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/sonatype/sisu-guice/sisu-guice"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&type=jar"
    },
    {
      "group" : "aopalliance",
      "name" : "aopalliance",
      "version" : "1.0",
      "description" : "AOP Alliance",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04177054e180d09e3998808efa0401c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aopalliance.sourceforge.net"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "16.0.1",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a68693df58191585d9af914cfbe6067a"
        },
        {
          "alg" : "SHA-1",
          "content" : "5fa98cd1a63c99a44dd8d3b77e4762b066a5d0c5"
        },
        {
          "alg" : "SHA-256",
          "content" : "a896857d07845d38c7dc5bbc0457b6d9b0f62ecffda010e5e9ec12d561f676d3"
        },
        {
          "alg" : "SHA-512",
          "content" : "a9df202229a7955b70f35f33c9662bb0e7fec9e972c1fbac95fcf77ebacf18fea7e834dd60dcec1c8b6894393c75c480e08067e661cc234dea4829b952b7a2c4"
        },
        {
          "alg" : "SHA-384",
          "content" : "acc4ff89db23b3e6711f2be79f7c0d430f59327a3f1c9b3dd542e5618c6fec0d74357cf18c4c98c5915c587d4bcd9cbf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@16.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/guava-libraries/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/guava-libraries/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/guava-libraries/source/browse/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@16.0.1?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-utils",
      "version" : "4.0.1",
      "description" : "A collection of various utility classes to ease working with strings, files, command lines and more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0fa4c6aabfa676c4a1a1bf0c7473f684"
        },
        {
          "alg" : "SHA-1",
          "content" : "2162c639aa9b081ef2a0be9d41643513e284bf99"
        },
        {
          "alg" : "SHA-256",
          "content" : "96b9cc44439191d2d0635974e2d44e768736b4fb2abcb65f94cd95e41912fa8b"
        },
        {
          "alg" : "SHA-512",
          "content" : "ecf609d495c9e7728476ca35d4290c94d862c393afc6a98090571f4047d4184d1c5231fd6af4bc68fe7d832eca26171f86af5ec590d6f2f70740b720a6f636b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "713234f501e1911062a1e4272e10ab355c7dfb8f67ee1068dd35e71f6c1bd97becf4cf41a242877f8272db4028408e3c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-utils/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-utils/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-utils/tree/plexus-utils-4.0.1/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
    },
    {
      "publisher" : "Codehaus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-classworlds",
      "version" : "2.5.2",
      "description" : "A class loader framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53b54feee8cef6b843bd6748bda4bfa7"
        },
        {
          "alg" : "SHA-1",
          "content" : "4abb111bfdace5b8167db4c0ef74644f3f88f142"
        },
        {
          "alg" : "SHA-256",
          "content" : "b2931d41740490a8d931cbe0cfe9ac20deb66cca606e679f52522f7f534c9fd7"
        },
        {
          "alg" : "SHA-512",
          "content" : "5bbbce8880a8513ba1314c202005de96fe263b48f45d5cd6a3a3577fdfe7ccd88c2b908093eec237e6624f5dbba664dfb8aa82939cc540bb6652c0f4eea7b333"
        },
        {
          "alg" : "SHA-384",
          "content" : "27df83d9e2eb2730f1b0480aead44e0ed8c5243c0e3d96642e564917ee621f3c8b3217a4f3ae4f640fe9f8a0b67a43da"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://plexus.codehaus.org/plexus-classworlds/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/PLX"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/sonatype/plexus-classworlds"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar"
    },
    {
      "publisher" : "Codehaus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-component-annotations",
      "version" : "1.5.5",
      "description" : "Plexus Component \"Java 5\" Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ef37dcdb84030422db428b63c4354e5b"
        },
        {
          "alg" : "SHA-1",
          "content" : "c72f2660d0cbed24246ddb55d7fdc4f7374d2078"
        },
        {
          "alg" : "SHA-256",
          "content" : "4df7a6a7be64b35bbccf60b5c115697f9ea3421d22674ae67135dde375fcca1f"
        },
        {
          "alg" : "SHA-512",
          "content" : "2ea4afb8888f157483c6a8e99852fa8a80e90a3cf0756b3b22c73a8bc59a4aa3d7b50b975a1d810f28a090023b268dab49af14e8f8e33c7553fa61315afe06b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "94193ec354f65fa8427b4b5115d1f47cb3bd70b0589c612cb5c604d8a2ddf0cce1d8683bf70c5576c27fc3dad33f0ac0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://plexus.codehaus.org/plexus-containers/plexus-component-annotations/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/PLX"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.codehaus.org/browse/plexus/plexus-containers/tags/plexus-containers-1.5.5/plexus-component-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"
    },
    {
      "group" : "org.sonatype.plexus",
      "name" : "plexus-sec-dispatcher",
      "version" : "1.3",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53160199f5667de3fca69b723173639b"
        },
        {
          "alg" : "SHA-1",
          "content" : "dedc02034fb8fcd7615d66593228cb71709134b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "3b0559bb8432f28937efe6ca193ef54a8506d0075d73fd7406b9b116c6a11063"
        },
        {
          "alg" : "SHA-512",
          "content" : "8b609608e4ce1346fdd3a0793d66dbdb893d6af046594ccc456eaceabca3f7a251cc8a6f1cad22fc17688911d0842cc84fa2303027fdf241c77f4078905aaacd"
        },
        {
          "alg" : "SHA-384",
          "content" : "539392b84ed3dfeeaa97c42a4befa559a05d18baabcadda2537b18fe8f340e11823ce0646e8931b92a4cfb24cd39d981"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://spice.sonatype.org/plexus-sec-dispatcher"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/view/Spice/"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://repository.sonatype.org/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.sonatype.org/browse/SPICE"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/plexus-sec-dispatcher-1.3"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar"
    },
    {
      "group" : "org.sonatype.plexus",
      "name" : "plexus-cipher",
      "version" : "1.4",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b2d6fcf0d5800d5b1ce09d98d98dcaf"
        },
        {
          "alg" : "SHA-1",
          "content" : "50ade46f23bb38cd984b4ec560c46223432aac38"
        },
        {
          "alg" : "SHA-256",
          "content" : "5a15fdba22669e0fdd06e10dcce6320879e1f7398fbc910cd0677b50672a78c4"
        },
        {
          "alg" : "SHA-512",
          "content" : "deb948be3a9f6a2fa74adca17e54b1074948267b3a35dd4000d92c559d0387650770ccee096ad8f01dd51c36caf63878dc0bcf57dfb1f2e3e1a9d51204096617"
        },
        {
          "alg" : "SHA-384",
          "content" : "29d6722d6d4c412a98ed95f1fd6620047b22ce8d7e3160bcc49ca616a016b57be0c4d35daa8896ef93a80bcff77725ec"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://spice.sonatype.org/plexus-cipher"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/view/Spice/"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://repository.sonatype.org/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.sonatype.org/browse/SPICE"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/plexus-cipher-1.4"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-archiver",
      "version" : "4.10.0",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "46a7cede88b793dbc9cbe9fd82d68368"
        },
        {
          "alg" : "SHA-1",
          "content" : "d63e385ae6ded05eef954102f0cd1137b2baab81"
        },
        {
          "alg" : "SHA-256",
          "content" : "4c07814ff4a39199999ae82bba1e38aa4f25637467fcac6a66ed63a76535799a"
        },
        {
          "alg" : "SHA-512",
          "content" : "55e3c7d84f18f7f044410f8731efc01362280bc6fd6a0f737ad944d1504263a90e7781d84a7fb1beaea44d7cc7fa5c25cd3ad85d2390db23a123aafcb57e410c"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dd88173dc9acd5f3e2e34f91bdcc1c1c657e1b8dbd0d4c0ce49759117864fe6a3b6895e7c692e3ad20b73fef9301dac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-archiver@4.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-archiver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-archiver/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-archiver/tree/plexus-archiver-4.10.0/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-archiver@4.10.0?type=jar"
    },
    {
      "group" : "javax.inject",
      "name" : "javax.inject",
      "version" : "1",
      "description" : "The javax.inject API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/atinject/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/atinject/source/checkout"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-io",
      "version" : "3.5.0",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4a1f4133ac1df46f296bddba6c9f0d64"
        },
        {
          "alg" : "SHA-1",
          "content" : "dff8fd2ddb661a4b6b0f9587589ea00dc97605e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "965ed28912cf1ae4c628112c4009e0c19819bc44ed5db8af54ee5eda21036a3e"
        },
        {
          "alg" : "SHA-512",
          "content" : "3be39b9961af7b2423ff027583f5b35c61c37f56a0d76dd8c3a6eadcb7bf3898ec5b1b94c80814e6c7484a82499e1ef2304781902fd42171b22d4188754dad0e"
        },
        {
          "alg" : "SHA-384",
          "content" : "59d9350ef4c2fcecad9e7d253636cc19735f1ab416a2ef20f883fa4f00eb0ddfdffb593896b8bc7a207a0085581aebd0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-io@3.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-pom/plexus-io/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-io/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-io"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-io@3.5.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.16.1",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ed8191a5a217940140001b0acfed18d9"
        },
        {
          "alg" : "SHA-1",
          "content" : "377d592e740dc77124e0901291dbfaa6810a200e"
        },
        {
          "alg" : "SHA-256",
          "content" : "f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f"
        },
        {
          "alg" : "SHA-512",
          "content" : "97eab31b073c5c57c8bcfaa2fec7b481a15a9a1f9ed864dfdc63b57f062b230557caa734c3133aca1165facb588c58db0185c07832241d70159e87a4bcf48008"
        },
        {
          "alg" : "SHA-384",
          "content" : "bd78e2eb3d005046d1329557d3a77529e98384d4d87940374eef432d73d5a06ef20fb7b0c44389de64496fe134dcf199"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.16.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.16.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.26.2",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d2c5abbd0a822c0b79cf4f03ead483ee"
        },
        {
          "alg" : "SHA-1",
          "content" : "eb1f823447af685208e684fce84783b43517960c"
        },
        {
          "alg" : "SHA-256",
          "content" : "9168a03141d8fc7eda21a2360d83cc0412bcbb1d6204d992bd48c2573cb3c6b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "7106a722d26da945f6d6eea6f0c61b420bff45749bf60c572d992c545b10ccd926dc4b9a9f366ff29d5940c99f26dfeca98f6c1c4b630632a65f04c2d7b94b26"
        },
        {
          "alg" : "SHA-384",
          "content" : "8422ef0d5e9ca419a8b3a33a4c330348f4495b9edded4fde38636d11e99fc3f725df11769d310edc233beed2401daf53"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.26.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.17.0",
      "description" : "The Apache Commons Codec component contains encoder and decoders for various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca1f080782f7e77cb3aec451e7a7f02d"
        },
        {
          "alg" : "SHA-1",
          "content" : "0dbe8eef6e14460e73da07f7b11bf994d6626355"
        },
        {
          "alg" : "SHA-256",
          "content" : "f700de80ac270d0344fdea7468201d8b9c805e5c648331c3619f2ee067ccfc59"
        },
        {
          "alg" : "SHA-512",
          "content" : "cb9c3b2055d0b31d106293f0bc3696f90a11a30953e5b05a1a3c453e98a563475c93d7c6d1707e75f59d0806fba5fd8e4486b8bd72e58bb6ae995bdbbeeb7e17"
        },
        {
          "alg" : "SHA-384",
          "content" : "a0fd174b2f8a21b43828371a7ee03c915b79e69d7b0e16cfe6367f794e2f8e6bbebc261e8a4ba35a79779b2338a774a4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.17.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.14.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4e5c3f5e6b0b965ef241d7d72ac8971f"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ed471194b02f2c6cb734a0cd6f6f107c673afae"
        },
        {
          "alg" : "SHA-256",
          "content" : "7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c"
        },
        {
          "alg" : "SHA-512",
          "content" : "0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8"
        },
        {
          "alg" : "SHA-384",
          "content" : "908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "group" : "io.airlift",
      "name" : "aircompressor",
      "version" : "0.27",
      "description" : "Compression algorithms",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2c1137bd68ec7a65655fc1adca94742b"
        },
        {
          "alg" : "SHA-1",
          "content" : "5b3b5e7932a1d088ad1f13d109ffd688ab59ef9d"
        },
        {
          "alg" : "SHA-256",
          "content" : "fdbef3137a28f63bb0cb93487803080ede746a4ec3d421e36c6f0c305c35e5e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "d6ef205c5e56b9ebc0c871fc8b523cde226d05d3531bc8932cb850e4607c8bf4ab554def0206994f55e2ae9245518af7a379e2282247cd8dce97b3612b84e13e"
        },
        {
          "alg" : "SHA-384",
          "content" : "d74e216442328fc9225e0d82622285bea8885bf7c14b7869b142305e2f727e8f4b4d4edac6ac18651580da0b58ca6dc8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.airlift/aircompressor@0.27?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/airlift/aircompressor"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/airlift/aircompressor/tree/master"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.airlift/aircompressor@0.27?type=jar"
    },
    {
      "group" : "org.tukaani",
      "name" : "xz",
      "version" : "1.9",
      "description" : "XZ data compression",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "57c2fbfeb55e307ccae52e5322082e02"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ea4bec1a921180164852c65006d928617bd2caf"
        },
        {
          "alg" : "SHA-256",
          "content" : "211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac"
        },
        {
          "alg" : "SHA-384",
          "content" : "aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://tukaani.org/xz/java.html"
        },
        {
          "type" : "vcs",
          "url" : "https://git.tukaani.org/?p=xz-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar"
    },
    {
      "publisher" : "com.github.luben",
      "group" : "com.github.luben",
      "name" : "zstd-jni",
      "version" : "1.5.6-3",
      "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "67b722d1bc7f256235ddf32a320c1d0c"
        },
        {
          "alg" : "SHA-1",
          "content" : "823b794106e4bcb80110f49408d1641231f25927"
        },
        {
          "alg" : "SHA-256",
          "content" : "f72ede1b39258faf81277dc58de30c71cbae4253732558d2ce10b53d8b5763d5"
        },
        {
          "alg" : "SHA-512",
          "content" : "bf237e2eb5bf0318a082e8dd480d89887a7c3fa068264b99313f84460a30203649505a293500949f588148a9074a54a4a4a324e9d8aa80475536c4260091ce61"
        },
        {
          "alg" : "SHA-384",
          "content" : "3885377295270021f4a46667ec6a3c36bfac2290caac17e42a9e557a3f9675357abc78576e61b721e1a91cec765322e4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/luben/zstd-jni"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-3?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-interpolation",
      "version" : "1.27",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c2edbe0dbc934692794aaeac6006055a"
        },
        {
          "alg" : "SHA-1",
          "content" : "8dc73f4ff5eafcbb7ec035ba54736e828b272533"
        },
        {
          "alg" : "SHA-256",
          "content" : "3fb4fb6143fdf964024c3cb738551524b9ea84e5c211cd660c559ad0703e5230"
        },
        {
          "alg" : "SHA-512",
          "content" : "34ae1399e75560d6aec6743ce37e10d2236342ec58145c3fdd7b03340f4ed3ef500f824c845d452dbb8c3f14d118c855707de4a080074fa572daf7ccfef4dddf"
        },
        {
          "alg" : "SHA-384",
          "content" : "cf31f04d414db3c864a403628707df8b36c379a984d75804e5cbfeeea5fea54d2510620de045c0b01a7745063b3135fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-pom/plexus-interpolation/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-interpolation/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-interpolation/tree/plexus-interpolation-1.27/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.maven/maven-archiver@3.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-archiver@4.10.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar",
        "pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar",
        "pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
        "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar",
        "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar",
        "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
        "pkg:maven/com.google.guava/guava@16.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@16.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-archiver@4.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-io@3.5.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.16.1?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/io.airlift/aircompressor@0.27?type=jar",
        "pkg:maven/org.tukaani/xz@1.9?type=jar",
        "pkg:maven/com.github.luben/zstd-jni@1.5.6-3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-io@3.5.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/commons-io/commons-io@2.16.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.16.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.2?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.17.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.16.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.airlift/aircompressor@0.27?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.6-3?type=jar",
      "dependsOn" : [ ]
    }
  ]
}