{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:db9d07a1-c973-330e-a2eb-7c1aeedde7ff",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-archiver@3.6.5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-archiver",
      "version" : "3.6.5",
      "description" : "Provides utility methods for creating JARs and other archive files from a Maven project.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-archiver@3.6.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-archiver/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-archiver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven-archiver/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-archiver/tree/maven-archiver-3.6.5"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeAggregateBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-core",
      "version" : "3.2.5",
      "description" : "Maven Core classes.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0988ce2795bb72277a0199179154d398"
        },
        {
          "alg" : "SHA-1",
          "content" : "fbec7cf0df4fbc2896a6768ae59053877c05c241"
        },
        {
          "alg" : "SHA-256",
          "content" : "4f1a0af8997e1daf778b91c5ae9e973f92df699439d909fdec7fc6055c09de12"
        },
        {
          "alg" : "SHA-512",
          "content" : "0173f2ad5720466164832da561b8558a1e75786457548ce3d51c5b15c9a08b5c797b1964e1b4398dc31c747917da604fb50a24a747ad1bab16de714002de60a9"
        },
        {
          "alg" : "SHA-384",
          "content" : "a680dfb67da5b1e63f0acfe9bcf3fa123e8b164c92735a4537d74c802bc4ce27a6b95865b536f375f054be6b1f7da0ac"
        },
        {
          "alg" : "SHA3-384",
          "content" : "292348c2a3f87955e69756bf50bb771ef617d116004dc0562d75ba3fc7155fe3656e9cf8fca96b1882332cb395cb146e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c99bd5901c26db07e360ce8341b6141ed91ebfeaa8f753c8bbb9fc896cfe8573"
        },
        {
          "alg" : "SHA3-512",
          "content" : "16f6c6e120fae8fc0eee3792fffe9d0b74b2188f8fe809d54cdc7287b483c550c121e5f188687d96a3a7b19baf66c728047c121362bddeedd7c7ab63afee7017"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-core"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model",
      "version" : "3.2.5",
      "description" : "Model for Maven POM (Project Object Model)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "16ceccebac412654c427dcd66df4f6f9"
        },
        {
          "alg" : "SHA-1",
          "content" : "ced305476a43e8a042a59e94ef38b3291d9ce1e7"
        },
        {
          "alg" : "SHA-256",
          "content" : "8d439cc1661349dab1c69eed0f831336d187e162cc6d68aa4deefcff57ee0624"
        },
        {
          "alg" : "SHA-512",
          "content" : "5f67231329c4d1fceec84684f69b3e2a840c4acac8a3af927036e6cc05fe35562fc6a17b104ddc52d8d863fdf70160aeda99259cbc3b08d63b217f52cb8a7658"
        },
        {
          "alg" : "SHA-384",
          "content" : "b341f59c5756a7ad161dda15c114ee027d111b2fc5982ed1e9af1882cad87acb6628b08a971f04a5c5716c094416fda2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1257f33ca5d743223771ee8eb7b99044382d882a08f9d5a22b9fa4b496a47685fd172172602e5ddd824c2fd1c9ebcfef"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b605e9ef6debcdb6d4764279fe245db460dce5a0dda70ba35efee6b6c3c97ed4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "480cec8773bb9f4d1d3dc72b2d49a1bfadda0e7b485d23b0bfc493e815b0cb86e98cd08b516f27086d908035960549e381dde07d32220d14b3dde891b2a84da0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-model"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-model"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings",
      "version" : "3.2.5",
      "description" : "Maven Settings model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9f78e75d76e2f92c08cbbc859bf6e272"
        },
        {
          "alg" : "SHA-1",
          "content" : "52179da78893ed7afea98d980c55e658fb04d9b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "1874d4ee660b935675a60bdb2ef63e0ff5a81769f4fc04a035fa9d4c4e238224"
        },
        {
          "alg" : "SHA-512",
          "content" : "8e2e132534781f316060fe02eecde47dac20c50fbdc30a9e98efc74a1df58e22601319d779fb6d1fa121fab3860ffa61842ab34c04b4e733bf3a6daab5cd1b36"
        },
        {
          "alg" : "SHA-384",
          "content" : "f38f547bf3eaedf9f224fd7635ac2b227a381846e80e802a7b664f0652a28487e87710236f016ea3dc4888df9cdb05b3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7fdda9bea5f4b7b380ea763568685780804b4a32d09298bd9959c3aff228e271888dbfb4b1401c5fc6f588f3d7ad637d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d8a3e3fcd8ef17ee6543de61d7294b05acb2d1cd248ad44b86a5ce7e27aca51e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ae62e75c8acbeffbc571a3205d8969e89b470448be178eea2a24d2f42436cdb530fb619c7e935d961aee0fdaba27546f92d3f65e9e22ed5ebbde409b8a547ca6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-settings"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-settings"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings-builder",
      "version" : "3.2.5",
      "description" : "The effective settings builder, with inheritance and password decryption.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c48b8a83cd03a5672f07b559ca1a5307"
        },
        {
          "alg" : "SHA-1",
          "content" : "7fd98de76398a3ff5c1d9a7b85f26cb65a862578"
        },
        {
          "alg" : "SHA-256",
          "content" : "9c5a014ceb8abb55e997dcc41d17bbe0ae145db574be6b7186e75950c241269f"
        },
        {
          "alg" : "SHA-512",
          "content" : "f2015ad44aaa0b217e5e0d1e22c366136cd44588961cdca2104c4d9bf7d5067e4952880c537a86a669f1ca0169344012a4ca896a3ea3fed2fd7615ff3a12a208"
        },
        {
          "alg" : "SHA-384",
          "content" : "28eb1569383d19df9a7c0568193b733c60ce22ff2bed3eff79bd1773178d65fe237045ffe1423b5bf31fd8fd7395619d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bdca020f5b246ba30a38fd9a21e90e44cf323cfcff5616dfab2e69bf4ecb942ecb4f20e728eb14fe094a534c4737eaa8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "397da0ae4301b4328dcaa5cdbda657e5d16100aec9beb56b8ef79c9cc00c433f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "03db8e98beb008195127f4e68ecb5f02e921450c5f24ea6e77552be9258ff65c8377d888c15e95c5aeb3a83783c370289914b79ff702917a9f4d467bc7bedbfd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-settings-builder"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-settings-builder"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-repository-metadata",
      "version" : "3.2.5",
      "description" : "Per-directory local and remote repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bda12e2d6070d417a6118c6ba769fd4f"
        },
        {
          "alg" : "SHA-1",
          "content" : "17049c63ce63654c112eeb82797edee49f8a4601"
        },
        {
          "alg" : "SHA-256",
          "content" : "62b517b77f24edebdee0e382ecddb44bb6632b7c08c528d625aed7d2980df12b"
        },
        {
          "alg" : "SHA-512",
          "content" : "487f49f1a2da4c39d92d2460864c7cff8efb2fdbe05ac89346a675b5964c4dc4c4551c43a28a423c55e7184f5fe0e517258c5427b2611f171e601794e8e00c55"
        },
        {
          "alg" : "SHA-384",
          "content" : "b49837b04166dac3e7667a0a006c889c7c39b8efb41ff6e1ddd9fbeb0c14ca426f8be4bd62813a92c93020ebdd61bc48"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3da3119e454ee311d0a7cbafb30bf36637594986431a926164915571ff3b93847da94af5db6599bf7ad27ed9fb43e32e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e86def0032615109e1e61718e8edf7389d03d4934c59b520e2627a9093f78c8b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9c20fdaaadff92d2937bc36b92b5dcdf84f659afd1b617dd3284914845ce417c796b625aba608b59e602ac41c98f6757efe9a3b8fef695ba4f28c18ded0ffbc4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-repository-metadata"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-repository-metadata"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-artifact",
      "version" : "3.2.5",
      "description" : "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6ca73ba6de24218f238a45d8a06e519b"
        },
        {
          "alg" : "SHA-1",
          "content" : "bf5ce89d5f7ff57f2a33e78067ba97e62bae007d"
        },
        {
          "alg" : "SHA-256",
          "content" : "270385907ecfbcb256fe5afb883869fd57a5c021b5242693743ef787605c6335"
        },
        {
          "alg" : "SHA-512",
          "content" : "7be445c021ac2438a9f37d37db159ba5875b32d74ee901a07462f266f1847c97e69cffd3f51058e468539bfa322c270f6bb50852cbb38e39806011386fb08ed8"
        },
        {
          "alg" : "SHA-384",
          "content" : "c918bb72c186b84a6990db3749fdf0dbf819f815fde27242276cac59d9da826f00433794f53987ebc844ff6df3768616"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8474a49852cbb6c371540445a4b7d1844d1c94f440052762988483657511d383decc574a09446e25ec11178ab2da35e7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c9c137b9a7a9e7de7a7d6be505ed6feef5f4558c8a5a4f03f3ab7b0127953d69"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9a8b08a6435c8874897c0de5b919784135621656c7a7254bc5d00c9487a5186ef03faea91a988a955a08c87c56367c8a61fe9b11ff080c8d5fa40b1a75433a07"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-artifact"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-artifact"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-plugin-api",
      "version" : "3.2.5",
      "description" : "The API for plugins - Mojos - development.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "11a402fb287811b6a249a553e9af5383"
        },
        {
          "alg" : "SHA-1",
          "content" : "5c6893f4ac5425d07c4053f3c4e27b2a3b37c516"
        },
        {
          "alg" : "SHA-256",
          "content" : "194a6f0ce889ed3b0d8a9bc4d3c79541e878098b7e303e4ac76c1031850772c3"
        },
        {
          "alg" : "SHA-512",
          "content" : "ace85ef74fb6a582afe6edb8282d4f09e2e4d5899e7471a0169cb8ccae9bc93d664b9c3e7f7be753434e1b30290447d87a3226969045cfb4e3e15b3ca2a596fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "0e796a4fe15828a8b8fc7f642c8cf7932c7b15de868b72eb222f95b91d55fd5281fd679f8a1cfaebfc3d1eeaca794edd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "70e29b854f16306beb41c1bc287002e7b214daa65bca7823b60a440a8e766721f4a00fe238453bb55ef0ee0068413c50"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4d13e0b021bbe138eaa6a9a753ffc1bd557a70c38b5314fdb540dd052dbcc592"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f53db7d4858d810175e662f7b4f12fdf0df1b1d637b2532871d90b4427199795f7ea919dabf7d4e29ac0d166c0e096b7ac20126216c9c9252877bb65bfbdbb9e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-plugin-api"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-plugin-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model-builder",
      "version" : "3.2.5",
      "description" : "The effective model builder, with inheritance, profile activation, interpolation, ...",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a216c67dae851a4cedb4b431a674eba2"
        },
        {
          "alg" : "SHA-1",
          "content" : "7a32f3966fab463df9cdae95fd6df8c2e561e3ae"
        },
        {
          "alg" : "SHA-256",
          "content" : "cc5321269d080ad6694458f53186be5391a21c488ab3a7d6dd73123c7681879d"
        },
        {
          "alg" : "SHA-512",
          "content" : "a25a612d607e301e3041a0c6edd708a096d23ec6e2e1fc1bc092e1f6b9a6974ba9f5b256007ca2b9a9d23a45b84b2d7b49f38e31ebe42844ad438ad4da92b922"
        },
        {
          "alg" : "SHA-384",
          "content" : "36a95790b1b09f903ad1f245318d1874ca2f6a5f8d592f5b9a1c1a182f8f5ed0923f7d1c672ec117b503c33f10107f4e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0eb54a8b97a5d03a4d74dc7c4e6438823b602da24d3c4434ea88e1068668e69f9f17c45687404dbdf84508660d4ead62"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3cc2d6070a9c4db3ca2589b1e47097cbb8fd62742d271ee5e8241abc9dc3d1fa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e092aee17c316f4c7649b43b930432a85640ca2b32d00eb4d6a0a5ce0c820a1bffa3a7a6800293b685617f08fb431366aeb499af84550acf5aa86febcb337e10"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-model-builder"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-model-builder"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-aether-provider",
      "version" : "3.2.5",
      "description" : "Extensions to Aether for utilizing Maven POM and repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b6cc79c8c8abc3c92ae7d57c4cbb078"
        },
        {
          "alg" : "SHA-1",
          "content" : "dfddf469d20b877b184dda5d6e60f0c75f558a72"
        },
        {
          "alg" : "SHA-256",
          "content" : "703944b922d5351aad53b842f7dd38439b7213425f13c6c7f034b8b699b7d578"
        },
        {
          "alg" : "SHA-512",
          "content" : "8ce9984b76364e162f8f31c99222c9b996813f2e12e6a8406d6a438d857855f8255e2f0403af281b081e6bc6e95374cb9faa9cff3f35214de1005c477f408299"
        },
        {
          "alg" : "SHA-384",
          "content" : "619bcb4fcf830a43b75b5bb3545173aa302102ead74ac3addee28f278d906841292130c4f515a15319893a3617fdd5ea"
        },
        {
          "alg" : "SHA3-384",
          "content" : "502aed022268a41bf0583c2a2d6413ac524d8c57b49c9530e4906556e3f773c346c25d3c915085b70b1d4eb56388a1e9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "420420738f280be8d8167376df04b1a1baec6b353365cb226fcf487ac087ee2e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c10c2512042c8e52f72483b9063c510e6c109a07e745a847c460fab956c5a5bbc7b8dd13532628a686a8acbb2312ec13bc6740433f5e9cf750d9c04b90b1ba1c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.2.5/maven-aether-provider"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.2.5/maven-aether-provider"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar",
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.aether",
      "name" : "aether-spi",
      "version" : "1.0.0.v20140518",
      "description" : "The service provider interface for repository system implementations and repository connectors.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "51c5870c01f48af3231ce6499464827a"
        },
        {
          "alg" : "SHA-1",
          "content" : "985a9a12b904fb3bafd4dc6b49f6a084845703a1"
        },
        {
          "alg" : "SHA-256",
          "content" : "a3266d127a4e9f4aa9c4fa0986e31eec784e866f79112e1840d1667e17c10fb2"
        },
        {
          "alg" : "SHA-512",
          "content" : "8074048d24d05c20da7adda6b8de93249e9e22b7fb62612b74c9f5623b093a7f23ba2cc2e77808542ee5dca6352b0e40e4f755dbd2a63f83a16d24b180bc19fc"
        },
        {
          "alg" : "SHA-384",
          "content" : "fa6d14091ab9b0ff63337e31cd0270640e1a84675733963c2d186ad1a6d2f8f64360431b81124e9c5f3d700ef8269374"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5f12b67abc816c2b349cd9e7f0cf7320c0a780d6e4a81970fb84b671ae7b39839c7fba37e5ab75a3044ed93687bc737d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "539f920cee955ac715fc4ea32fcb8f42adb81a0a923711683a47231cfc99deb7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a0c69f8c37301220994cc3c53ff810e66f4d3975eee386ed1d875a9e709d6f2a131474c9c7247ce6b7019551d909ef4d478ea2160db817c6a69741e70d025435"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/aether/aether-spi/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/aether/job/aether-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/aether/aether-core.git/tree/aether-spi/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar",
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.aether",
      "name" : "aether-impl",
      "version" : "1.0.0.v20140518",
      "description" : "An implementation of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "819d1c095629b2bd9ed0980395c91b7d"
        },
        {
          "alg" : "SHA-1",
          "content" : "a5ee67be2c99dfb95ad61235d749c92ae09c926e"
        },
        {
          "alg" : "SHA-256",
          "content" : "9a9b60e685385225f08e662cb9f60d96610b0987f0f47bbf3f0c92df8a897d00"
        },
        {
          "alg" : "SHA-512",
          "content" : "594b84397a652e481e1ed14a7b53b554bf3e851410b99189f78d9aa4dfa872f02e9e536255357799d934d1171607a36d38e7e9ff6409d04f4e88aded914f215b"
        },
        {
          "alg" : "SHA-384",
          "content" : "5b38a890f624b378fc5e4e067aee2273f24b6f1dd3ef72ae0dd450bdfdfa873e7f814beab8150b9e0c6957275d81b29e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "874dfeaf12482b845a1204927e7ab0848511c46b323864c0d01ce501e41c530f4106c73b410a00f0b5524fd702af0f08"
        },
        {
          "alg" : "SHA3-256",
          "content" : "38cbb58e4ddabaa86483d16bfbb5065d2e742820484a15d96e4aad3fea49273a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a2363558799963e4ffb1a1eec2fb0410c1a2a769177f55ac535c50e3b676e626e8dfa0b54e0db9d734641c829d416e6196faeccd3092e6b66168da17b8c7242e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/aether/aether-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/aether/job/aether-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/aether/aether-core.git/tree/aether-impl/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar",
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.aether",
      "name" : "aether-api",
      "version" : "1.0.0.v20140518",
      "description" : "The application programming interface for the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b05ef5410dad83a4e9ba50e08e0dbbf4"
        },
        {
          "alg" : "SHA-1",
          "content" : "be68e917f454dcd841865ad7cf9b7615b26a51f7"
        },
        {
          "alg" : "SHA-256",
          "content" : "84b98521684ab22f9528470fa6d8ab68a230e1b211623c989ba7016c306eb773"
        },
        {
          "alg" : "SHA-512",
          "content" : "41addf7be0094decb6b4d6c11811b7a7edcc280d60f8a5cb3346d963422cacea84b6dcba7a00fa4a93c69a44b7dc5afd0960b8f56e60ae36f6c8e97ab52ffb5e"
        },
        {
          "alg" : "SHA-384",
          "content" : "44e821c90b238407402910a378e17ff3d845f26252bc74ad4b62c4f04bec6aa0a68ecc068eb8ed98ecd11d1b3b628d1f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "284850d6126cbf7ecd63c54970fa1e359c17d7c720a2a56ac37d45a091a46506fb9e5c95bcfd4104534e0efd7d3bd802"
        },
        {
          "alg" : "SHA3-256",
          "content" : "46af39fc94d4514f2f3705bf8980a98c8a6dbb5d254919eb694518411f0e561b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "37fabd5b33c819b890186116a31d127e5737282a1422eb2f42a330b59fab518f6a9f31f1e744521ae1d2a6addf61817eae36c1f8e1db06437484da6e23728d1b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/aether/aether-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/aether/job/aether-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/aether/aether-core.git/tree/aether-api/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar",
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.aether",
      "name" : "aether-util",
      "version" : "1.0.0.v20140518",
      "description" : "A collection of utility classes to ease usage of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "08495ee7ecf90f0b528e7d65471532af"
        },
        {
          "alg" : "SHA-1",
          "content" : "7df5ba98ce8b78985d75fdd8c2981fe69234ef85"
        },
        {
          "alg" : "SHA-256",
          "content" : "aff0951639837c4e3a4699a421fa79f410032f603f5c6a5bba435e98531f3984"
        },
        {
          "alg" : "SHA-512",
          "content" : "ec43fd01a81d7f8e027603c4627d50eff58eb53e970b6888b0fe07d2963876075d05fc9a5e39f957904b4bc9bd6d729b9d17a15852064939b7a59f322830747e"
        },
        {
          "alg" : "SHA-384",
          "content" : "f6cb988a67a2d93ddcae222408b43d92fe6ede0bbc3646115a246a9a088a418ec50be729efd9eed4cada828eaa171946"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a7f597f411b6993c91db48a33e0588f83b25a8d065a15a59d71510771a0c55473b9d63719bcadbae09a4ea6dfc20a50b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c381aa336fff73f9c0cee17ebdce8605ac0c6fe1a548768b58b1f854e8db473b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1d7b47331f01856f80ee1adfd0293350747e6e8640c725ce928c4415c64df57f71ef783bbfcdcdc505c53b7f02f4a48a4258be30eb2b7b32afcd547216e8a587"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/aether/aether-util/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/aether/job/aether-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/aether/aether-core.git/tree/aether-util/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar",
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.plexus",
      "version" : "0.9.0.M4",
      "description" : "Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "51eea54bbc85323fc68f6a79f9b8f179"
        },
        {
          "alg" : "SHA-1",
          "content" : "478f7935e88cd9da7ef01f509e4853e80ede9034"
        },
        {
          "alg" : "SHA-256",
          "content" : "b90579bc652eac7331436e0a25533fce14130b9c6e015f2dd3a3d4bb07e942b7"
        },
        {
          "alg" : "SHA-512",
          "content" : "a62c9d4485d4a30ec740e70b42aa310463dec0f53cd8ab7100be65ab984a8f946639b0f24650d0fb978aef6a73659a9e6e0b521b241de1dec2a58b342e0dbd2a"
        },
        {
          "alg" : "SHA-384",
          "content" : "7d8f5540885cb195ae3227bdb4854372586a90c6694a88da1711a16dd80a780ecfa2511edce7d0601f91a5875640bbae"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9b394b0cce809763de8ac26ca97a2810a4116798ef36e3fdca13109069f31daa41dd90326542e77f45d72d5cbeb62598"
        },
        {
          "alg" : "SHA3-256",
          "content" : "90367dc33a3cbb1db9081014adaf0424c112d94c523651d9297e3132dde03c97"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d977a67598f47ea5e1276693382b895ba79f4f1f623b0aff5eaa7ddcbfa7722932524b7992f850441f28062719b1b7f83206f2dbe5634f9e5f61f060ee881438"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/sisu/org.eclipse.sisu.plexus/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/eclipse-sisu/sisu-project/actions/workflows/build.yml?query=branch%3Amain"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repo.maven.apache.org/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-sisu/sisu-project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/sisu-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-sisu/sisu-project/tree/main/org.eclipse.sisu.plexus"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar",
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.inject",
      "version" : "0.9.0.M4",
      "description" : "JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ee95c1a11ba4ca38368d71ef05676cfc"
        },
        {
          "alg" : "SHA-1",
          "content" : "a062d8e12dc62e698c9f943a3fce94e366b4e220"
        },
        {
          "alg" : "SHA-256",
          "content" : "1cbd7a965a5e2a9ea823bab311962a4e5aa5c240705bdbad5a52b40ffdfa1004"
        },
        {
          "alg" : "SHA-512",
          "content" : "e0ff555c09ec22c637320e1d4ed654d8eae39bf051ce544987253eeb608f9913e332c9a8bf56d189845424a30301ce92cf1c363d8b6b5ccfc7eedaf8ab0474bd"
        },
        {
          "alg" : "SHA-384",
          "content" : "695c7c852c924334c1d857ddfb28277fb5108a54effaa30702fad0c6afe9070387b038f3bac941d7837fd6f48958d265"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b70ad32b2530a88af5d051cd46657e91550999243d40baa60a388c583dea08bc05f5d52506b2fac917b37ca714084ac5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "45098e8e22b3d76bc0d7c4ddc4f49553023cc472be9285be29455863d0ddd23f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3da31b3f27553350cf3acf3c55b95a94f9c1b9d88ef99004435caf5f21f1848496411f7b32713f7b9afd26eee9c8e551032e35c98b84d0274095ae4820208029"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/sisu/org.eclipse.sisu.inject/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/eclipse-sisu/sisu-project/actions/workflows/build.yml?query=branch%3Amain"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repo.maven.apache.org/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-sisu/sisu-project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/sisu-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-sisu/sisu-project/tree/main/org.eclipse.sisu.inject"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.8?type=jar",
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm",
      "version" : "9.8",
      "description" : "ASM, a very small and fast Java bytecode manipulation framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f5adf3bfc54fb3d2cd8e3a1f275084bc"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc19ecb3f7889b7860697215cae99c0f9b6f6b4b"
        },
        {
          "alg" : "SHA-256",
          "content" : "876eab6a83daecad5ca67eb9fcabb063c97b5aeb8cf1fca7a989ecde17522051"
        },
        {
          "alg" : "SHA-512",
          "content" : "cbd250b9c698a48a835e655f5f5262952cc6dd1a434ec0bc3429a9de41f2ce08fcd3c4f569daa7d50321ca6ad1d32e131e4199aa4fe54bce9e9691b37e45060e"
        },
        {
          "alg" : "SHA-384",
          "content" : "b4ad6e6c1afe432ce8a60367c743107cfc9d1d2f1f1c6b7be4b6ba625cca862cc7ffff404566086bce4b6650556df953"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f51a3b7cee5543672cc2a4d71dda7aa992fb900cb68b79908efbd1efcc3e731f4ab8e2c1099e7b905f4aea6350489e08"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3c66be179e6b4881b1901a6a8c6fc980d773d1faa6edb54ed878e5985615a831"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ccbf812616e5997ba7cf59704cf78e360650d773ac53581243da6c47fe884560db5ec48f8f4b71ccd4b8c2b332619c19aea053458d14abe443fcdd4fa313d5dc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm@9.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.ow2.io/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&type=jar",
      "publisher" : "Google, Inc.",
      "group" : "org.sonatype.sisu",
      "name" : "sisu-guice",
      "version" : "3.2.3",
      "description" : "Patched build of Guice: a lightweight dependency injection framework for Java 6 and above",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "733be430711a32f2b9ba72da565cab2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "6b8262f32ff7b60881aed3e7aa9d81fdb48330e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "004af7012b6d11ab585ae841130ff091dcad6531d7bf13db4d7deac91589eef4"
        },
        {
          "alg" : "SHA-512",
          "content" : "6cbd0095a564aa76423a835c08ee3c12f61eecae241f1c19fb4909f6b5355143e901766e9c7ae97953f70adbec79b8561cbc1e02af51c23552599ed5cb2b5ce2"
        },
        {
          "alg" : "SHA-384",
          "content" : "1af7c634c87fc8ec7245c0ada7031f43c54df00072fc637604d3043f43e319368e65e234457b53313364ecfb0c03b6fc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6f95906cf706a0cac5a023d4236bf38a44c5a1abf350e87c8317c2c1aa2a4b34924479ebfa3705f146062f6c2bb29839"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d7f517ba0884569b13bd46d218472ab948567bb311307c63cbb0a00b611cc4ab"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ef046f737e580bc9682d724665c9b1485475c2d10122776dda545891a7913773af6439b9e22e136a27cefddf9dfa4649a1e32107c7bcb9edb2cb9f5aac05160a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guice/sisu-guice"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guice"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/sonatype/sisu-guice/sisu-guice"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "group" : "aopalliance",
      "name" : "aopalliance",
      "version" : "1.0",
      "description" : "AOP Alliance",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04177054e180d09e3998808efa0401c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aopalliance.sourceforge.net"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@16.0.1?type=jar",
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "16.0.1",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a68693df58191585d9af914cfbe6067a"
        },
        {
          "alg" : "SHA-1",
          "content" : "5fa98cd1a63c99a44dd8d3b77e4762b066a5d0c5"
        },
        {
          "alg" : "SHA-256",
          "content" : "a896857d07845d38c7dc5bbc0457b6d9b0f62ecffda010e5e9ec12d561f676d3"
        },
        {
          "alg" : "SHA-512",
          "content" : "a9df202229a7955b70f35f33c9662bb0e7fec9e972c1fbac95fcf77ebacf18fea7e834dd60dcec1c8b6894393c75c480e08067e661cc234dea4829b952b7a2c4"
        },
        {
          "alg" : "SHA-384",
          "content" : "acc4ff89db23b3e6711f2be79f7c0d430f59327a3f1c9b3dd542e5618c6fec0d74357cf18c4c98c5915c587d4bcd9cbf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2408da9af0df3c949d93b1b6c642f8afd96210a641521ada29b80f19611ddc9505273de86cfa57440531e4f0234a985b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a7042d5a5d683bf80eafdac37adc3d10075ade64edb82daae574bb49cf2fe9cd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e57cd5702d6e2bd8ac39b31eb638b77ff33d15e2498efff2c6ffee9cbf556c466dd98a7ad8d49b085302a32a6f15e1c7a0593e2cc4db90559a38daceba43221f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@16.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/guava-libraries/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/guava-libraries/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/guava-libraries/source/browse/guava"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-utils",
      "version" : "4.0.2",
      "description" : "A collection of various utility classes to ease working with strings, files, command lines and more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4cfdd73e436702d319d551a44fcea500"
        },
        {
          "alg" : "SHA-1",
          "content" : "9526a9548b302572f23337fcc217fb4cc713b9c3"
        },
        {
          "alg" : "SHA-256",
          "content" : "8957274e75fe2c278b1428dd16a0daeee1dd38152cb6eff816177ac28fccb697"
        },
        {
          "alg" : "SHA-512",
          "content" : "a99751d7990df50fd1adc10634c4e14f5deddff8fc1b7c6d26a5c7fc517d3f0e3a8d39435c512c507a0737fc9c3ee67a8f121f9e2aa8b9bfe14d9f01a99a3aa6"
        },
        {
          "alg" : "SHA-384",
          "content" : "52a12d800c5aa70fa149d4628fd6a485e3324dbfbbd6a2f24e120176ee8c48e13a4d321f76d64ff86684c2523409a62a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "beaf7889c9facf6649bcce19dcc4356db98de628f5d597cb101793ca454ab81d5a436f9652a957c9d1573e9149a0fe49"
        },
        {
          "alg" : "SHA3-256",
          "content" : "26369ecaf957f19dc5992708c56ed3816129c40531505eb4bc702755a2fd4b49"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f51af4b8d2e097716129f84b69e95947b08cf3c8617b0c6997f55ea3d02f0481284943e474d2935d590ec57975b1edce2774d5006734acc1ca1af567372bdf25"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-utils/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-utils/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-utils/tree/plexus-utils-4.0.2/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar",
      "publisher" : "Codehaus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-classworlds",
      "version" : "2.5.2",
      "description" : "A class loader framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53b54feee8cef6b843bd6748bda4bfa7"
        },
        {
          "alg" : "SHA-1",
          "content" : "4abb111bfdace5b8167db4c0ef74644f3f88f142"
        },
        {
          "alg" : "SHA-256",
          "content" : "b2931d41740490a8d931cbe0cfe9ac20deb66cca606e679f52522f7f534c9fd7"
        },
        {
          "alg" : "SHA-512",
          "content" : "5bbbce8880a8513ba1314c202005de96fe263b48f45d5cd6a3a3577fdfe7ccd88c2b908093eec237e6624f5dbba664dfb8aa82939cc540bb6652c0f4eea7b333"
        },
        {
          "alg" : "SHA-384",
          "content" : "27df83d9e2eb2730f1b0480aead44e0ed8c5243c0e3d96642e564917ee621f3c8b3217a4f3ae4f640fe9f8a0b67a43da"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0ed9e4f4bcb3baecda4730667de8d8c93edbfcb1c97d7cf203eac5de3c783c6bc2881b196505b4c0bb10eecc58cb2212"
        },
        {
          "alg" : "SHA3-256",
          "content" : "96476ac810a44f0026e4d32bf571b4597735f0bf06a722128104147484b851f7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0da78c61970ad7c2f351727d89361270458559a7448083c5f369547a19cc7a9afc4f3b939e829e87bef06406cd0d4cb57a5b6749d4692d71da37dd4bd090fe41"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://plexus.codehaus.org/plexus-classworlds/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/PLX"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/sonatype/plexus-classworlds"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
      "publisher" : "Codehaus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-component-annotations",
      "version" : "1.5.5",
      "description" : "Plexus Component \"Java 5\" Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ef37dcdb84030422db428b63c4354e5b"
        },
        {
          "alg" : "SHA-1",
          "content" : "c72f2660d0cbed24246ddb55d7fdc4f7374d2078"
        },
        {
          "alg" : "SHA-256",
          "content" : "4df7a6a7be64b35bbccf60b5c115697f9ea3421d22674ae67135dde375fcca1f"
        },
        {
          "alg" : "SHA-512",
          "content" : "2ea4afb8888f157483c6a8e99852fa8a80e90a3cf0756b3b22c73a8bc59a4aa3d7b50b975a1d810f28a090023b268dab49af14e8f8e33c7553fa61315afe06b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "94193ec354f65fa8427b4b5115d1f47cb3bd70b0589c612cb5c604d8a2ddf0cce1d8683bf70c5576c27fc3dad33f0ac0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "eccd004db31d02566b743eb55bcfbc7161aca472a4ab3e86fbb437f0bc19bdb666830a6168646b6d569a09f2af4c4fbc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b739989c677fee5136fea5f48524f385bd6a161eb8d606772b05afc10d94c827"
        },
        {
          "alg" : "SHA3-512",
          "content" : "58bf57dfa292eeeee95108a732ec5fd9e75cc08e23c94b2335e137c05159b565224529db6348448f973d057c37c84007c417d47de52875d09209a6873a43e218"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://plexus.codehaus.org/plexus-containers/plexus-component-annotations/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/PLX"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.codehaus.org/browse/plexus/plexus-containers/tags/plexus-containers-1.5.5/plexus-component-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar",
      "group" : "org.sonatype.plexus",
      "name" : "plexus-sec-dispatcher",
      "version" : "1.3",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53160199f5667de3fca69b723173639b"
        },
        {
          "alg" : "SHA-1",
          "content" : "dedc02034fb8fcd7615d66593228cb71709134b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "3b0559bb8432f28937efe6ca193ef54a8506d0075d73fd7406b9b116c6a11063"
        },
        {
          "alg" : "SHA-512",
          "content" : "8b609608e4ce1346fdd3a0793d66dbdb893d6af046594ccc456eaceabca3f7a251cc8a6f1cad22fc17688911d0842cc84fa2303027fdf241c77f4078905aaacd"
        },
        {
          "alg" : "SHA-384",
          "content" : "539392b84ed3dfeeaa97c42a4befa559a05d18baabcadda2537b18fe8f340e11823ce0646e8931b92a4cfb24cd39d981"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9355f99fc6e1c5f4eaa73417b730adfed5d5d20528171aea4b487b8a75028a900d67abd923df025dffd20f32edff69ab"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b6185018455b1ffd854f9d5ef2ba2dc5750ad4c68789854e4c2440bd91ada76c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "323c863614c94d12508265454a5c598358a0b5b2fb18400d1ab457cf3a161c7e31079ada7ab8ed5d1b28d1e4dee9ab8f82cfb84ad40b42d69e330562d1a69da7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://spice.sonatype.org/plexus-sec-dispatcher"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/view/Spice/"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://repository.sonatype.org/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.sonatype.org/browse/SPICE"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/plexus-sec-dispatcher-1.3"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar",
      "group" : "org.sonatype.plexus",
      "name" : "plexus-cipher",
      "version" : "1.4",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b2d6fcf0d5800d5b1ce09d98d98dcaf"
        },
        {
          "alg" : "SHA-1",
          "content" : "50ade46f23bb38cd984b4ec560c46223432aac38"
        },
        {
          "alg" : "SHA-256",
          "content" : "5a15fdba22669e0fdd06e10dcce6320879e1f7398fbc910cd0677b50672a78c4"
        },
        {
          "alg" : "SHA-512",
          "content" : "deb948be3a9f6a2fa74adca17e54b1074948267b3a35dd4000d92c559d0387650770ccee096ad8f01dd51c36caf63878dc0bcf57dfb1f2e3e1a9d51204096617"
        },
        {
          "alg" : "SHA-384",
          "content" : "29d6722d6d4c412a98ed95f1fd6620047b22ce8d7e3160bcc49ca616a016b57be0c4d35daa8896ef93a80bcff77725ec"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2f27b64dcb2dcc7b16eb24487c67363a2977d4d695b97ebea829b7301c444e07cbf8a8b0471332c81b3d3ee393388834"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ef83ecf09c7bda0c412b6acdf558171f4f5f1065a68359916ecffcbea8e3475d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1a8b406ab9d63cb3af63e56a09bbde88e404041a1b70c68487c1c0009c24d042cea9ee2325ad99c0aee845ec61ff17a69ae14843f08de2f5af90cd5bb617e34c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://spice.sonatype.org/plexus-cipher"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/view/Spice/"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://repository.sonatype.org/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.sonatype.org/browse/SPICE"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/plexus-cipher-1.4"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-archiver@4.10.2?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-archiver",
      "version" : "4.10.2",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "29c172c6934ef30a975af7e89da162a5"
        },
        {
          "alg" : "SHA-1",
          "content" : "9692af3bd6ad2c3dd2aac25b8a539ee2ba319924"
        },
        {
          "alg" : "SHA-256",
          "content" : "a4f3f36a96505d833c2fb3a1e7cc2ddbeb28a85dbefe7b94955d41c2c0c4d889"
        },
        {
          "alg" : "SHA-512",
          "content" : "1337f455a9e78f9ff4a5490178806f6d383f13d213cf73906fe4ecdf5bb8a60511605f535c012cab5ac8f7729cbce0b4adcf9418742c6686be4fa42cf023c3a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "87bd3fc92b3fe77919163c66dae3c7f40fe7656d9e7816d23cb36196adc2e9245f38b3eb9dad729c786087a8564e4ba6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "15d996c66807fe3e04b7fc7543e7ae29fb263616e30d934a073a4efff68d2c3ac205382ccc0a7fd1f90d6b1e938f66ed"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3f0d2fd5b83df49baba31ea412d50bf94b59bc4b7de2c35d6c3bfdd88bdf0537"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3401c49bc1c29a2ebe73995bfebf1e6d41d800dc1f7e3389cf97959950bb865d70a381b19e3c99ae5f6382c9ec585d764578eeb6f6110f97958c9ff049911890"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-archiver@4.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-archiver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repo.maven.apache.org/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-archiver/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-archiver/tree/plexus-archiver-4.10.2/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "group" : "javax.inject",
      "name" : "javax.inject",
      "version" : "1",
      "description" : "The javax.inject API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/atinject/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/atinject/source/checkout"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-io@3.5.1?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-io",
      "version" : "3.5.1",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0bfbfd812f1b4c54f34ab35eba287491"
        },
        {
          "alg" : "SHA-1",
          "content" : "4a1cf4de1aae5a6906795e30f437f94dd4176f68"
        },
        {
          "alg" : "SHA-256",
          "content" : "30c29c1fe7552d606728d3724c2aafcc577d738fe71cd17194a8b957adb34856"
        },
        {
          "alg" : "SHA-512",
          "content" : "e8eb8a870ba87fff3d116fb5ed579764db5359028759c81cbdf7120a14e423d7fe12505261d50a64ede38a3195cad85e8a4f98f65e65d8ad9441d9fa0dc3df51"
        },
        {
          "alg" : "SHA-384",
          "content" : "2549b6ce64bf96d415d087fa0e6ed7f4f561c0f166cb669c3f76acc1b217cdba9a02dfac500042ae88dbde4a5b92c37f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6ca0594c8a760ad16430a8946ed2f75b5c2b99dfb94f48d0a5f36dce2db20d7e983b1d04304021145950a7195f76a0ae"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cc65c968c377f0799f371af12285035846d00a4bf26480a6dbd72f91e16d6a30"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d6153790583b547c90cb7a1d7da3b289e7632b22b0326c908007306c2af52b10f5f19f1d3a323fe22bb708e93bfd6c7eab0a0f96acde491c75bd7ee5edf3cbeb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-io@3.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-pom/plexus-io/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-io/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-io"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.20.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "94e7e6b9b5fe82388687b584d3571081"
        },
        {
          "alg" : "SHA-1",
          "content" : "36f3474daec2849c149e877614e7f979b2082cd2"
        },
        {
          "alg" : "SHA-256",
          "content" : "df90bba0fe3cb586b7f164e78fe8f8f4da3f2dd5c27fa645f888100ccc25dd72"
        },
        {
          "alg" : "SHA-512",
          "content" : "fea08e150473673b0608eaee3ae1cb4e73834039db80d3b758710d6baf3a5840a0878a4eb64739ae9bb21ccc7148c8520fe873616a3f6d5cdb4305deabdd015c"
        },
        {
          "alg" : "SHA-384",
          "content" : "22db5e18e3512ed44474e75a124a052d5a1a6f35ce458f6a201a5ccc9510c57c10c117dba80ac6ce91745cf2b51e63f2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a70700d24df3c276ff387c359e0e940b834e413b72a49917de9a82615836eca8cca1bee1ed71790606c795da795e9151"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a8d044d3a4a069d0f20d24112b6427a3a6f02a925b31b932721d1f545ff32cec"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3417bf811d7e5fc1e71b8540f3379751434ea8540c421ff2c8bb5f5ce34401cd0ad8a829b65aa55e055c57141181762c4827099352c2bba453e48ad2df67526a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-io/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.28.0",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f33efe616d561f8281ef7bf9f2576ad0"
        },
        {
          "alg" : "SHA-1",
          "content" : "e482f2c7a88dac3c497e96aa420b6a769f59c8d7"
        },
        {
          "alg" : "SHA-256",
          "content" : "e1522945218456f3649a39bc4afd70ce4bd466221519dba7d378f2141a4642ca"
        },
        {
          "alg" : "SHA-512",
          "content" : "f1f140f4f40ab3cf3265919db9dbb95a631a29aa784e305f291de4e68876bb711d9217d62d7937cddddd393982decdf71a608b4b3ab7f4e6375cf28af2893d7f"
        },
        {
          "alg" : "SHA-384",
          "content" : "afe6a8fc8e7486c4ecce95276bb1467763d7ff7d941c7bcff8661bbbd4bff442fd0899ff7a11bc540cda86818ee4a8f0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6afb636ad0805e522913cfd91c8293c485b7f4eff5e45dd3a17a716c3f4b8ab8969e9c00927559a5fb762cba1fdb3d3f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4420e0b462b5dcc45077e95e012a82a5ae17659e5abe8a685fa086dab6995298"
        },
        {
          "alg" : "SHA3-512",
          "content" : "23e37d13c8ee6c7369e407c29d1f9ee1bb44eca9f09a6f9742f6b4cf3d38dd7a0509fe0142536cd8087b68a76e71d819105af2c23f2aeed08acc58eb93cf7e61"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-compress/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.19.0",
      "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e46fa78c69544eb6239c4e8447e72544"
        },
        {
          "alg" : "SHA-1",
          "content" : "8c0dbe3ae883fceda9b50a6c76e745e548073388"
        },
        {
          "alg" : "SHA-256",
          "content" : "5c3881e4f556855e9c532927ee0c9dfde94cc66760d5805c031a59887070af5f"
        },
        {
          "alg" : "SHA-512",
          "content" : "d98a7a1cfcc08aa9cce4f7778e3f37ecb99da7b1da01944e5fa8faf06fbf9f969f2efb0b416832f419d53085250f711c071f1dac9fa0968483c37034198367fb"
        },
        {
          "alg" : "SHA-384",
          "content" : "f0edec3cd84b2320e6930380d3fe13335d33f041470d27fb93789db0c696ec01dda21b471f0015bf70bffffcbfdb67c0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ce771ef9f0df326a34ab37e70f710801bb18d545aca0ee492db62770db323ab8a0b5082123ca4826f3d3182748537cfc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8296db95bb2fac86a0eb68e61e9730084f4272ad6a4a4327a5259c631840e98e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "05da2f8674a257c5d8a1137cadbda71d2635f22237450bf2cbc980380a56905247bea38049c8cd80e60077be2be73b1eae6b466c228e4277763a54979cf856fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-cli/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.18.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "48b9886957920a4cdb602780ca345087"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb14946f0e39748a6571de0635acbe44e7885491"
        },
        {
          "alg" : "SHA-256",
          "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720"
        },
        {
          "alg" : "SHA-512",
          "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832"
        },
        {
          "alg" : "SHA-384",
          "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395"
        },
        {
          "alg" : "SHA3-256",
          "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-lang/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.airlift/aircompressor@0.27?type=jar",
      "group" : "io.airlift",
      "name" : "aircompressor",
      "version" : "0.27",
      "description" : "Compression algorithms",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2c1137bd68ec7a65655fc1adca94742b"
        },
        {
          "alg" : "SHA-1",
          "content" : "5b3b5e7932a1d088ad1f13d109ffd688ab59ef9d"
        },
        {
          "alg" : "SHA-256",
          "content" : "fdbef3137a28f63bb0cb93487803080ede746a4ec3d421e36c6f0c305c35e5e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "d6ef205c5e56b9ebc0c871fc8b523cde226d05d3531bc8932cb850e4607c8bf4ab554def0206994f55e2ae9245518af7a379e2282247cd8dce97b3612b84e13e"
        },
        {
          "alg" : "SHA-384",
          "content" : "d74e216442328fc9225e0d82622285bea8885bf7c14b7869b142305e2f727e8f4b4d4edac6ac18651580da0b58ca6dc8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ad5226ae1b1e2a1098ecf8560e3d1e1b9dd8e73c02bcca9dacc006d10d8d350920b25cd4f0b0e9a54913b2656fe76a9b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "79de84ac231accb01352f6c408fe822fa3811774649ec7d3eec42e7539ddc126"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b74e5e9d44921214ef8d8bd4bc9d747624bd677b9aa59073310d50f2d32a10440b4894787fe44349801a216a16a512c8fa1c9c81c0638e3ebb73e5022d2be165"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.airlift/aircompressor@0.27?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/airlift/aircompressor"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/airlift/aircompressor/tree/master"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.tukaani/xz@1.10?type=jar",
      "group" : "org.tukaani",
      "name" : "xz",
      "version" : "1.10",
      "description" : "XZ data compression",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "56e3fd256e5423a74393bd5eaa5302bb"
        },
        {
          "alg" : "SHA-1",
          "content" : "1be8166f89e035a56c6bfc67dbc423996fe577e2"
        },
        {
          "alg" : "SHA-256",
          "content" : "95c63c1a55b22dd6453890a419cc1a640f790bbf7d8ae82db1e30aefefb08888"
        },
        {
          "alg" : "SHA-512",
          "content" : "af234bb2a5d42b355ea020c5b687268f0336e393eae69a05251677151d1e85b1e34999d5a6be6451e0b047e3cf13341dc227a5483553766252b0ea66025a44f9"
        },
        {
          "alg" : "SHA-384",
          "content" : "b078b623faac3600d11bf905fd3e800439b101bf11096834305c04e015aae0096765bbd20e61bacae83eadd7e3a9e2af"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c51f9a76a9d9972526c8acf1d0e3eebe77557ea00aba2296bf4eee2cd47e11c98fcec5343c2507c83dc2e2ff6c73a40f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e211a91b89c5198152dd602caf00f3433462004859e885d5dfb4f00ca6b2633e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "baa9fff0a0c0e1409bc2b5cf1b024397aef8a189a11b648bc0d4eea0b4827a30a78865b2db7ad99b0143e370de2a854efc3b95ca61fa770ab46c12e68aff2754"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "0BSD",
            "url" : "http://landley.net/toybox/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.tukaani/xz@1.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://tukaani.org/xz/java.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/tukaani-project/xz-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.7-4?type=jar",
      "publisher" : "com.github.luben",
      "group" : "com.github.luben",
      "name" : "zstd-jni",
      "version" : "1.5.7-4",
      "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9caf4abd5609ef8814f184a3c40dc218"
        },
        {
          "alg" : "SHA-1",
          "content" : "62289c6759a134f76a230e104aa0d2aad2386c91"
        },
        {
          "alg" : "SHA-256",
          "content" : "e7f064bf1eab83fa785cf587f657f09649e3b0af6f27caa5382416953b5a35f8"
        },
        {
          "alg" : "SHA-512",
          "content" : "5b981710dd3291482aca0ad05888d1cf9efec2a3dcb5c636ee270957016be0f5cd1532a742b179b2458367927cd03561b457ab539eed3202b3dc0c32f893538a"
        },
        {
          "alg" : "SHA-384",
          "content" : "3771fb1593511576a73d239a30e593367f931a1e969f9b577ff009d1794847f01b5672c06744258ac78f78232ef56407"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9abbb0f0e489b7e9e8f6973ec223367894bd87ef70ee0038f2ec1b76492def246dd351016f5042ea8958f3b277312e64"
        },
        {
          "alg" : "SHA3-256",
          "content" : "59cae44cd0f374250a50760cf163639b41f7a2f5e5c125691600ab91ad42bb2b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1f964533a280066ca41ad47a8c23e934ec85feed758959a245de908c5e0414af82886b4d3858eb055154364b69ca7bb7b7bd21f324c2dc4a9c1fac2e52887b15"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.7-4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/luben/zstd-jni"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-interpolation",
      "version" : "1.28",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "68fd3527539ddb2a42e2e776ad8240b7"
        },
        {
          "alg" : "SHA-1",
          "content" : "90d3608cd99f21717a581f036a1c69ff762f5ed6"
        },
        {
          "alg" : "SHA-256",
          "content" : "ab2a8715570438a2e4164d85ad3e8d489eabc38ea5093c2eb8ab7f58403535b5"
        },
        {
          "alg" : "SHA-512",
          "content" : "3684e8d20c9bd83082b053a69129e6b7192d78a14f17a02942236fcb254425b36b0eb6b31f78c86f06d6f83f50b77bc1767cc3c46ced172db801ecb9750b6502"
        },
        {
          "alg" : "SHA-384",
          "content" : "e35cdc38959f787d38c65de38702c9f58ffd23dc29aaf713114a28ffce595a31ea2c28abeb233c59f7b55705b6b90b88"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9bc157f46aab17f546dcc575c179de0914037f935afc73ec4eb20272db355623cd6738c0fc5e70664b6cb3ffddd204a8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "886e82c9884b4d08a163e0f75d2a91355f6ee825e972cc811857373124bcc4e0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3b35d7c1af3bca14c827048d81ab71ff8a1a2e4a40dc4f901b650a5996f5324d8e68ce497bb7a14d69ed23e3d5ced4e2526afd6180a55b9b949297fb0db8a53d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-pom/plexus-interpolation/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-interpolation/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-interpolation/tree/plexus-interpolation-1.28/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.2?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-xml",
      "version" : "3.0.2",
      "description" : "A collection of various utility classes to ease working with XML in Maven 3.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e2feab7a114ac4a144632670734db7e4"
        },
        {
          "alg" : "SHA-1",
          "content" : "70c207ae478a5011a14dcefe56f4bbda16e3bc87"
        },
        {
          "alg" : "SHA-256",
          "content" : "6a49fe0c49a06b5bcd6073ff16580fcb0dd87c50295e97a9fa9f95619b69921c"
        },
        {
          "alg" : "SHA-512",
          "content" : "d1d8e446e56922d32286bb7748080fb24931fc837945e6ad81864badb5898c5c49a69b7c7fcb983bd1021405cd1f59954be7518781a4227e267c7bf469b0180a"
        },
        {
          "alg" : "SHA-384",
          "content" : "6250c249dc1b1ec370a01616483922bb1c33a29489a520509025033935372d67df300eb659f9ad1f66e1a769e26fd1cf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7449fa8e3b741a506f39a67a13c7b095e8e2af12001739b0c9e657462c8013dc1e4db2f74ca07736f35125dab3f54105"
        },
        {
          "alg" : "SHA3-256",
          "content" : "40fb6e486b59e6d6a81f2ec5170f46400c6b2132149c4ba4630cad522e1d76aa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1fa178450ee76bf0865633b2726a37c0dd0c1236f835fe3275f39d33e46778a65052f7b7ec00281fb4fa57daefee17b7a05832f69e5fa8463ed178e9bcd25851"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-xml/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-xml/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-xml/tree/plexus-xml-3.0.2/"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.maven/maven-archiver@3.6.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-archiver@4.10.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar",
        "pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar",
        "pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
        "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar",
        "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ow2.asm/asm@9.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm@9.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar",
        "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar",
        "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
        "pkg:maven/com.google.guava/guava@16.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@16.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-archiver@4.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-io@3.5.1?type=jar",
        "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/io.airlift/aircompressor@0.27?type=jar",
        "pkg:maven/org.tukaani/xz@1.10?type=jar",
        "pkg:maven/com.github.luben/zstd-jni@1.5.7-4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-io@3.5.1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/commons-io/commons-io@2.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.airlift/aircompressor@0.27?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.tukaani/xz@1.10?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.7-4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.2?type=jar",
      "dependsOn" : [ ]
    }
  ]
}