{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.5",
  "serialNumber" : "urn:uuid:e21ec175-8e30-347f-8823-7a313fc5f41f",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.8.0",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "76ffec6a7ddd46b2b24517411874eb99"
          },
          {
            "alg" : "SHA-1",
            "content" : "5b0d5b41975b53be4799b9621b4af0cfc41d44b6"
          },
          {
            "alg" : "SHA-256",
            "content" : "6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81"
          },
          {
            "alg" : "SHA-512",
            "content" : "417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d"
          },
          {
            "alg" : "SHA-384",
            "content" : "5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d"
          },
          {
            "alg" : "SHA3-384",
            "content" : "0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8"
          },
          {
            "alg" : "SHA3-256",
            "content" : "3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487"
          },
          {
            "alg" : "SHA3-512",
            "content" : "59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.plugins",
      "name" : "maven-changelog-plugin",
      "version" : "3.0.0-M1",
      "description" : "Produce SCM changelog reports.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.plugins/maven-changelog-plugin@3.0.0-M1?type=maven-plugin",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/plugins/maven-changelog-plugin/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-changelog-plugin/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MCHANGELOG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-changelog-plugin/tree/maven-changelog-plugin-3.0.0-M1"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.plugins/maven-changelog-plugin@3.0.0-M1?type=maven-plugin"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeAggregateBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-plugin-api",
      "version" : "3.9.9",
      "description" : "The API for plugins - Mojos - development.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0bf1ae393ffac0c034ce8f3a4b7fc406"
        },
        {
          "alg" : "SHA-1",
          "content" : "7e06aef37b14f8452928e5efaa88bcf2ee8aed02"
        },
        {
          "alg" : "SHA-256",
          "content" : "2b491d38db45b0e8eef522e8f7889a3366e546e58b376b07fcb56e34c424e932"
        },
        {
          "alg" : "SHA-512",
          "content" : "3a0286021fbf19aebe2d97aacbd5691b06cd67e2f6654e6f6547ce38218b5e4c9d9facfc607268265b954ba05859c80985f3198d10d4d889a123356f0f35ef90"
        },
        {
          "alg" : "SHA-384",
          "content" : "d364cf7b256ebcd92f0ac1de5bf6efba62e79d4a81785c0dbb84460f94ffdfc2924b7c353b87672439939f73a4a0a450"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d30cbf2827560a6915584babc075ffb8dea6a2103913538c7af08d04bbebe72a1245bd66e9f2e79d896219afdafa16aa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8d7a01a97cf5e477e400026f541fdbcd79836ce1fd56dc677877c4239d0c6272"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6ce393b9eb900424f9121ebfad7322fe52b430b52febdff316118926183061bece7d6a7f16703a26b0aefe8f2bcef6e74e7e8937007a0ec7537a96c2f38cffb4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-plugin-api@3.9.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.9/maven-plugin-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-plugin-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.9.9?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-classworlds",
      "version" : "2.8.0",
      "description" : "A class loader framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "92089dee35db6423c2128559238430cb"
        },
        {
          "alg" : "SHA-1",
          "content" : "5d0d8c71b61b38ce127a46702a453f9aa09a4ee2"
        },
        {
          "alg" : "SHA-256",
          "content" : "081b40e0eab033cd5ac72d2501bfff4f5fd2a3eef827051111730ea152681c72"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f8eeaf5089244ca8e0eec46ab0d57924dd187375413ddf55edf5881a2fd17f7b4a12abd0b402e8a2d5c8428bff87809f40921eda9f6ddc20585e861825618ec"
        },
        {
          "alg" : "SHA-384",
          "content" : "b689762c3c4a75b2f6eda24e97c6d77c1a550b755baa1d7f6b3151f413421380232d5474f3c1b2a15665651d8909b456"
        },
        {
          "alg" : "SHA3-384",
          "content" : "929e03c89948c96515c8ff58da7653c1396e261b7c5b7d22575634f7266496d655397864ab2e129778af759993f57520"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a1006c9de6b5f60a8e2ee5839c2fbc128158f6008458e42e65123e7bb2e3cbbc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5a813f86a7246cd2f0021d1d6891497128cefcbb2258d3865dc41eb7f4fb5f21c5875f21418a8bbff2b6b100ed0523e7101b7937aa84b6be87a808cfee73e50d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-classworlds/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-classworlds/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-classworlds/tree/plexus-classworlds-2.8.0/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model",
      "version" : "3.9.9",
      "description" : "Model for Maven POM (Project Object Model)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "813d4aceaaa8e16f8a83c95a96afa22c"
        },
        {
          "alg" : "SHA-1",
          "content" : "585bff8f220ddc1c08c5263b7dee26c49fc7df94"
        },
        {
          "alg" : "SHA-256",
          "content" : "8f59b0a16fe9c933be749a60ae0705a0cb337bb5abaf38801b40b740ff775727"
        },
        {
          "alg" : "SHA-512",
          "content" : "a775b5ec120e1de0bc891cf3dc148193a5e357aed06d0c9a289ea21a55c7fa7053b04fdde3a7e0d29a19f6e01023f74e511e39e0cd6568d3a6f8d27734058ee1"
        },
        {
          "alg" : "SHA-384",
          "content" : "410645fc18300eff25914a1519ee3bda627cff86df984b14ff5e0346031fcd339aaaa4994ea980c0665d206b0dacd4c6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5dda2fbf976bb1cb95b42e86a94622f73ecb4ad2cf0db0959b401ae169a7c2a0a54366a8a8f9b492f0d6c069260db834"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3ab286c7fee20c98f7282627c64a53cbd2ddb2717a88e9e157d6207dc7dabff4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "073490b65457dd3ac3d8437874478d7e150fb72a48703340e4e2b608f6ed7badd7c33f388f9c43acc5c4d260ae2672c78404864724d920fa0501a017fd58fa6c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model@3.9.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.9/maven-model/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-model"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model@3.9.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-artifact",
      "version" : "3.9.9",
      "description" : "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fcb27c2b8225edec3f2356973fa39e98"
        },
        {
          "alg" : "SHA-1",
          "content" : "a130ec431ef32e12a4424f9b074735bb58e15d2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "30f015d1c1a393e19c18cd4f43532089c36d4ca328608ce3dda78b74d3d31515"
        },
        {
          "alg" : "SHA-512",
          "content" : "d9ef181d2d7284c3c4bd1537171cfd1d6e1fd2f365293b71515f039d6951ab1bf40af5240e3b47229c54aaf967078da0d8dfaf79c5f2406ed4966b9a4ac0db92"
        },
        {
          "alg" : "SHA-384",
          "content" : "40186026f8d4b7fecbb7ac283128efb3667aa12ef39d12ecb3c4c9a1c424b90693ff16412b891ac0109432ad1482418e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aa018d441ce753b0b8091622e734d84a45114022a5bb806880e5016ecd4afcbb5e1c4b3054d56a8b1dca131c70c72a0e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6c4faabeae8bbba3746f11b27ba1222b35c3de5ce434e04b8aa1df6b4572a4dc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "02c324849c45463d233dfee4dc36e0f41d1983cd24fb13f92890b764f12b84d76d4e36fc7e51c07dc9db533fa08c0119486fe22cb384b009dd1313dcd70ade7a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-artifact@3.9.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.9/maven-artifact/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-artifact"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-artifact@3.9.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-core",
      "version" : "3.9.9",
      "description" : "Maven Core classes.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eed2eb37f03ccdea7ef9dab069c0b5d8"
        },
        {
          "alg" : "SHA-1",
          "content" : "b58645e3f14348024b05735c171425e19d30c02e"
        },
        {
          "alg" : "SHA-256",
          "content" : "7fab37fc6044f20ae004376ab8414373636cf51e26ad0b1efa6b3f1cd2bec503"
        },
        {
          "alg" : "SHA-512",
          "content" : "95a717d05c4fb51c4e4d196d6e4e183447f9eb56db13b0b1a8181e3c8b0dbd9abd2ed612ce93bb87799aee4d3b309ba1a7e6924964cb9e45daff2f70a25a0abe"
        },
        {
          "alg" : "SHA-384",
          "content" : "a953e88f9dce06d35b3e2d33ad873d2024730b846e5f94d80fdd687efa0dd07fc42e3d53a70c075abc3497bc4f1383d9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "efdd79ce31e93b75a2df359fec4a0d209eb36d74ff8e89d06c9d95c5125d7bc5b1d7bc67a7b03144ccac46abd3b847dc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f924a04aa56c923c9e5c904365738e5c46841ad9b5e010ce7adc34b69349c436"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e59ec3884fbfa2528a184db8b008bc46d41a373d94e5b728a6c1d9216f44ca838b96ab95e3c40ef937920e4a068b5824c0f3902d13955d7bc7050a2e3906548e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-core@3.9.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.9/maven-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-core@3.9.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings-builder",
      "version" : "3.9.9",
      "description" : "The effective settings builder, with inheritance and password decryption.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4fb4ae61642d42cba66821d8698a670a"
        },
        {
          "alg" : "SHA-1",
          "content" : "71a9bee9618839ffaf7c0de3b53ac1c408b57ae0"
        },
        {
          "alg" : "SHA-256",
          "content" : "094640f3fdce47250cb06968a143f40c4e2f1c22be979c73caac2f49f3c38373"
        },
        {
          "alg" : "SHA-512",
          "content" : "aa2b61dd81291b30e627e1894d8336d68b2f4cb99cedf087cc7081d6f3b6685a33c943e3fb04a851fd7635c916f2d0fb8dd705067ea67d13fc43d08025cec19a"
        },
        {
          "alg" : "SHA-384",
          "content" : "3dbfab791cb5a9d27a89c6277f4a9a9e376a8064db0fb208514bbd1ee6a47ac1b2e573402814c313977d2377401cb9b4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3cbd4352a5d05fc16e305e6cb5ac98b675a51cdab7ac3c8c59dd9d0272c9f82813e06be233604879f198530a7362433b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "abdce4df1cef68ac91b1b307127d3c3c2ce902f1ace17de96c5ff2a6aa54d368"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9b798693e04c6bc23a48c7880e29df42bbb6fa00e144d95c2aea07f2689ccd1618b9fd986a0c05830a120310e5e43d67d1944b19d49dd10113f70c22856ddcf2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings-builder@3.9.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.9/maven-settings-builder/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-settings-builder"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.9.9?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-sec-dispatcher",
      "version" : "2.0",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e68635a721630177ac70173e441336b6"
        },
        {
          "alg" : "SHA-1",
          "content" : "f89c5080614ffd0764e49861895dbedde1b47237"
        },
        {
          "alg" : "SHA-256",
          "content" : "873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb"
        },
        {
          "alg" : "SHA-512",
          "content" : "ad4e814c8baff780a4eee064903e52b09ae00420a59fb075ef72dbb8d64d12d3d5009b03d56c15f93587d931c3a7f06cad6351ab2dc9415ccc6eeab0daebeb07"
        },
        {
          "alg" : "SHA-384",
          "content" : "4af3426b6409cce7d5fcda4e2af407fc2dbae9873e06d98332bcd032c0039d9080a291e42223ea2bbef9825d3d63493f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "41720858dd5804f9cb26a8878c16dbdf0372a90e99c037809fe76c3de2c5517ba252af8f8cdf534c1a09900702e6a917"
        },
        {
          "alg" : "SHA3-256",
          "content" : "50fa723aefb551a3fd5888375d01f1d776c534cdf833baea392818e9bfa8166e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a43f823d31b377c0c7ec8d36ace69e5dbcdaf4dc4ebb45ff0561fea9e12d74c06090ee24b29b06769d4031693faf5d7e3146583d3a64bfaef6b7c79773a8831f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-sec-dispatcher/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-cipher",
      "version" : "2.0",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "55d612839faf248cbe3e273969c002c2"
        },
        {
          "alg" : "SHA-1",
          "content" : "425ea8e534716b4bff1ea90f39bd76be951d651b"
        },
        {
          "alg" : "SHA-256",
          "content" : "9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a"
        },
        {
          "alg" : "SHA-512",
          "content" : "8f187b07867a7c29d77454aae4b76479300238d9c4e777c1afa2aebe33b88dab916e29111dd55acac1341849f4579fe91a5470fdd45ccba0e05709c2ce3a1d65"
        },
        {
          "alg" : "SHA-384",
          "content" : "6973eefe06a8992aa8db1775c0f43a84cbef54eeea9122a5a30c362af3e4fb13b6cbd6fba229142e2a4495f97d71f409"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ea780d218f96e61005c5582bf3785ddbb33b53ccb4efbffd76ab58166cf261d3c256d52fea28759380684b7e9b0db8eb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e2e51d5350ffdce341464ddcdf9ae60108bff40bf5174dc6be43e33ffcd84af9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f3e17ea31bdefc8094ba3495b8231ec7f90c7175839b009d9fd230110b66ac4c68c912fda1a6e644d93dbce639d738e2535f1ade5841e072a604f5f8ac536729"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-cipher/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-cipher/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-cipher"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-builder-support",
      "version" : "3.9.9",
      "description" : "Support for descriptor builders (model, setting, toolchains)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0266bb9314b63d9fde8aff0d190f48d6"
        },
        {
          "alg" : "SHA-1",
          "content" : "812c13c808e42c54d3f4abdaab603e5262bf8ab8"
        },
        {
          "alg" : "SHA-256",
          "content" : "2ca4a967bdd12a9e85d40e012374f86e63d4a1030c199da4832e3d0a1c6770d8"
        },
        {
          "alg" : "SHA-512",
          "content" : "ea4c95e9b4ee9078b464ca9002857a149d2fd0bbc5fa79e3984ce981c37de0b18b3be03574b909ba4fc330a70387fef2ccbdac4dba029c11dd5cd53375f9be7a"
        },
        {
          "alg" : "SHA-384",
          "content" : "56f102530fdf58549e9470949bd46d6bcd99eb619da435ea6c0579776e77b06b5b1e8faf76b9c6c0b4d1862bbc9747a2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "096b894a7e0aac0801816be8cd439b0825710a2c5dd3a9a64f3c6cadd8d96b2ceb1d635c0c3a52fd4b2393eb774fadf1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a411474232b09f28bb48a74543df102c9aa4f324bc31c4e041c475024e835093"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e0764cdfafc85f8504fc1e457ff564f70a124de065c89b120f449d01812a9b4e6b26cfa171ed1f81563cd54db0b16ad049903c52e6ca82f1e632df3c4e8025a7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-builder-support@3.9.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.9/maven-builder-support/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-builder-support"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-builder-support@3.9.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-repository-metadata",
      "version" : "3.9.9",
      "description" : "Per-directory local and remote repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d341cdcc9abac2d01546301a305f12b3"
        },
        {
          "alg" : "SHA-1",
          "content" : "33a43f0af3371225d1dcaaa20a824df59c692172"
        },
        {
          "alg" : "SHA-256",
          "content" : "137c297e6a52d489b76663c82324d54e40f5d498a8fc015c0203fd91df8623b0"
        },
        {
          "alg" : "SHA-512",
          "content" : "07d1cd2e99588c43835815f5acdf2cb163288041c803cbb8597c81d5a583a5abc553628fdaaa5a22b4bf7a579aa88155e3e5e27c63c31ba4cab74126f7b35824"
        },
        {
          "alg" : "SHA-384",
          "content" : "f088d97c86378ecb5312f79183aa2e469ff1efe28d0244fa7d86cc37f6bf6fa7b277cba016541967d289fbc474bb2305"
        },
        {
          "alg" : "SHA3-384",
          "content" : "332e75f31f8adfad22990c0a612ec12aab085923f3d425453c25275e177daa2feeade1ff22743a4e5f67d33130ae866a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "40356485644aed030cc175fd8d00443a63a3f1384180edcb1be98ccad67081db"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1d8320d0c4421696705f3a4737ed7c4cb5de37a3b0873abbe19e2a57092b1f0c405b2987c8e3c3931105c1a518f92d304c92b394018842f1cde98fd259488482"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.9/maven-repository-metadata/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-repository-metadata"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model-builder",
      "version" : "3.9.9",
      "description" : "The effective model builder, with inheritance, profile activation, interpolation, ...",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a48ea3e9ceec85a9bff88e88048148d9"
        },
        {
          "alg" : "SHA-1",
          "content" : "6dcd87768eb615301aef0c2221dd168a2d36bc7b"
        },
        {
          "alg" : "SHA-256",
          "content" : "a4377182ac2e5adfe16be3b3c81981a5ecddab014184de72ae1e522f04a77602"
        },
        {
          "alg" : "SHA-512",
          "content" : "558ca7b03233b8d38aca3f2f142e0b4a64d576c92e6b5a8921061eb8c83614d8074845e8656fb77b983711e64db9d145f385a0d1a3ae5bf26805b93a6c4ce041"
        },
        {
          "alg" : "SHA-384",
          "content" : "5ba902dee188aafc6cecb1f9eab759116d00158e0812811f6775654a3f5a73b0b6b429c20e9c727ac157643627b72c27"
        },
        {
          "alg" : "SHA3-384",
          "content" : "364b44bbff164b35ab770c329592560b1f12037bf466137b137db7434877570ad815a9d2027fcf2ebd35275f29ef7cd0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd2bd5e3ff91d9c5f405d0c584e4a71f91a1ac5c82e8cfb729f78f13ed73c8d2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cd2692abcdbf1c0c9adf3ac0210b4f923b6f3497618bf1337d60133e377569b45399f6b3994d73558e9f8ef890192a7bbbb0f674d36ebd482ca5396abfc85ffb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model-builder@3.9.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.9/maven-model-builder/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-model-builder"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.9.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-resolver-provider",
      "version" : "3.9.9",
      "description" : "Extensions to Maven Resolver for utilizing Maven POM and repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ea2fccfc4c499dbaa570a26da14050d9"
        },
        {
          "alg" : "SHA-1",
          "content" : "ea361822cd25ae6c9153c594aef805e853031224"
        },
        {
          "alg" : "SHA-256",
          "content" : "5dea05049c94f952f48ce2bfe0111afdf986acc591fcc11d23fe3b8dcb70291e"
        },
        {
          "alg" : "SHA-512",
          "content" : "6dcb398c60080cbeaac396df5e565a44e29c9ecffb440d17ca819c2e3e7a86b933e7346eb11c409cad02e2bc97c9ae5f10bc5c4e7d6f5fe81652a7e1d99f9c0f"
        },
        {
          "alg" : "SHA-384",
          "content" : "170d7d6271574947baff824cfd36e00fa20ea1cefc361c27af52a96f45ac7b7fe23edfd0adfd483f121f2cc63491ad39"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4223458ae362fc39853aa5538bd99ec00be1af4e41859b00f3937e9922f8353db51248dd06f88865f67b2296b1920724"
        },
        {
          "alg" : "SHA3-256",
          "content" : "96ad201686d5c420903bab2ac170dfae7b66cc6faadd4dff84dbe981573bbeec"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2c4610bcc74f5d11b145b58d6f11f74a2f74b8fe95f725f11177a8b930563bbd7ffc49b0b712c2534c0702f3329b75966b1dafe6d4777ec641fe1c45e19f117"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.9/maven-resolver-provider/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-resolver-provider"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-impl",
      "version" : "1.9.22",
      "description" : "An implementation of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "965f1348220f046c6cbde059c971685d"
        },
        {
          "alg" : "SHA-1",
          "content" : "19b7a728c9000f8db615f64552d95fe74b413617"
        },
        {
          "alg" : "SHA-256",
          "content" : "e4dafb8acc13d736377c02d2170d869438dd74b98b860745909d238726babcbb"
        },
        {
          "alg" : "SHA-512",
          "content" : "82c9ff9c9505e6350983a5a90ef16c64e67f2cb21779e56f5ad02979591f8f2cd12ced6bba066fd0bdfaf6be07d39edf9cecada35d16002a8005711602001d90"
        },
        {
          "alg" : "SHA-384",
          "content" : "adaca9b851a5f354f5ea1cda398b1d5b910d4c0fac21a33bfa0a44d40ed19cf63afe99f81fc7718293496421ef64777c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "69dab881fcf9f2b45881899f14ca2c0d885f9de6621d0109887654b6b3f92978b21733348dba75eddd588bd8144da83e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b35dea4f939c188e848878b6a3331e6312964ff0258833375c6b975d70cd71a8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dc7a39b8a50f5633194a3f070208e2eda099b88226a4d8728c9c4f4bc876e4eba1a7bb018870e1cf414cf31e5bcb214c2b64393c79d8f498b1c380630698f70d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.22?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.22/maven-resolver-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.22?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-named-locks",
      "version" : "1.9.22",
      "description" : "A synchronization utility implementation using Named locks.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3d3855f4775bc27f9962f999ea88919b"
        },
        {
          "alg" : "SHA-1",
          "content" : "121433b079aad9be7ed266b19f2122eeb0e2d111"
        },
        {
          "alg" : "SHA-256",
          "content" : "0685f29ec3b548d9b6917c527f13c667685a3394b955aaa5b25d0559818b7fc5"
        },
        {
          "alg" : "SHA-512",
          "content" : "f77654e42e551bfa6ef1e737501123dd1a4faca6cee7eceddad358c7c66e27ece0dbaae7abcf1b8422344e92b5bd5beeb43b8ca3637bc7b0c06cc87ee1d54792"
        },
        {
          "alg" : "SHA-384",
          "content" : "4130344d40d9054360be193e9b7712b708b9b1cd95fac22e13f980366b1e341e8fe0a6a7bd555836e7ff1bd980844722"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5446d9a0d6ec6846b33ed718cedeb1eae9df55a08a1005c88e3a5734f1097ce8ef4c6208a70c21ae9d15a7a2a3139e94"
        },
        {
          "alg" : "SHA3-256",
          "content" : "75af3978ed7eff2d40330beb06c38d8a2df8c31c592f2d0417aecc9e32a491bf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0dff59894683f076e09adb05dca30db2ab9ea8fef3b8280437b10be65e649175f7a5e684177891fe6661af6e86a464521e24f7559090dd7d8f7625452ec8cac2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.22?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-named-locks/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.22/maven-resolver-named-locks"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.22?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-api",
      "version" : "1.9.22",
      "description" : "The application programming interface for the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c59d27b3750461be99f8d38e1f503f56"
        },
        {
          "alg" : "SHA-1",
          "content" : "756660687ea077b85be02b019d593ef2758e7db6"
        },
        {
          "alg" : "SHA-256",
          "content" : "63f5f665e44a09ef55463b3b91fda0b78ff07dd24b1060d56e79c10b6e32cbfb"
        },
        {
          "alg" : "SHA-512",
          "content" : "a803e35af37b807b08019f9a9e3184d86774cd99c9c2d89aeb4033bb2f1d8d8b79b523de8e05fdbe020f623bea783611f472db8c7331949f9bbfe4da1ed46415"
        },
        {
          "alg" : "SHA-384",
          "content" : "51b6c0b437ecc37d697ea248ab225891391fc46491713044ffd9230a9484434227bc8e833213abc340bbcdd02172ec9b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e7b25bee133e6533aa65b3adc31af2e88081a88745028089e57f56dd7b58af4299de99416373322a8332e9d3ce3229da"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9a3a6ba00fcba33588b0767f3c5d92e30906ecb55797891c4de3eae9ec30e6a3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7dca13e6576e2bd58da3b20f061fa40bf4d07ddc62f1985faec2b5f840f0089c0ff6c4b3a34adeaec4beac9e7780a793091249dfa0facc715556704333606e68"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.22?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.22/maven-resolver-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.22?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-spi",
      "version" : "1.9.22",
      "description" : "The service provider interface for repository system implementations and repository connectors.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7ae784f1d4088fff396386ed6966cafc"
        },
        {
          "alg" : "SHA-1",
          "content" : "c3101acaa4ec053557028cf1917f1d22112b100d"
        },
        {
          "alg" : "SHA-256",
          "content" : "99ad721e4631d9bd0c4f9e29c869672577c66f2a674a5723ce38eff13c75cbfd"
        },
        {
          "alg" : "SHA-512",
          "content" : "3a1e31d872659834cb59a82bd0118fb26ef983e5004849a9a38f80bea344f2d919aa73f142fc605601b8236c431a891a6e98fd8760e7b11aa6a3d7d4862ee009"
        },
        {
          "alg" : "SHA-384",
          "content" : "8ae4ccfcd203dee8263c6db10061f6afefc5a95903f43ad99f237c92300348ac1dbfdbf22042aefd5bdce86c58e4637f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "efcfbeb1c69bbfc880d624d24b9376ce07c703df64505776d91b8574ba2292526dbe4ae592bbafde971d2c7feca2617c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5e12347c1f0125eea11c00859b4d02c6b7c4f1ea2af305a68b5c2579983d6af0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8953a2b8bfc66d3ea6f5ec52c87838759b79624485e08c4ecfafbf05521ccc73e9cf724e3dee643975d10b6b5b0d37caf6cd316823074f5cfd49bd05899cec96"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.22?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-spi/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.22/maven-resolver-spi"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.22?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-util",
      "version" : "1.9.22",
      "description" : "A collection of utility classes to ease usage of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4e84c0379667d2436a99fced60a74b5d"
        },
        {
          "alg" : "SHA-1",
          "content" : "d5febed69ca2fe0dacffec95b6cb0760b0270fd1"
        },
        {
          "alg" : "SHA-256",
          "content" : "4aaea1584c39294ca926fc474723d9684473609ef4490c4eb169d6ea7daca6b5"
        },
        {
          "alg" : "SHA-512",
          "content" : "25c26f2b1929277fdfc8d3fd868dea7b60c8d067f91daafd65918fcc77db2e4c5afcc210dfff76077fa0c1060c6febba4f3a79075ac196ed00791dd197b41d95"
        },
        {
          "alg" : "SHA-384",
          "content" : "2c8441716a3acc3c24694e7f436eb0255802e4dc4c15d27814807be63b676096e1381e4bc7ac6397f4f5dbee5c255e01"
        },
        {
          "alg" : "SHA3-384",
          "content" : "39e3cb46426ee1ae7c0e1b3098e14aa87fe36a37938fbd6cfafe4333ef047a41559e6d9ecc4a59d3201999834c881581"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d8539e2f082bfee39edb15271b72215a3b948ba0872cfa7e6403c7e495968421"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c4407f0e8713d0595cbcbca86c8c7d2c594c02b4bfa2cc67aac97cae84f63f8b71a95948b86261ff9eb71bee0c0bcd94861f836c28a28d199be2d42ade378cfd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.22?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-util/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.22/maven-resolver-util"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.22?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-shared-utils",
      "version" : "3.4.2",
      "description" : "Shared utilities for use by Maven core and plugins",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53a038f77a81cb5816ad2b1c7daa8711"
        },
        {
          "alg" : "SHA-1",
          "content" : "bfa28296272a5915b08de9f11f34a94b0a818fd0"
        },
        {
          "alg" : "SHA-256",
          "content" : "b613357e1bad4dfc1dead801691c9460f9585fe7c6b466bc25186212d7d18487"
        },
        {
          "alg" : "SHA-512",
          "content" : "71db8a485a6436cb305276ea9d748f578e1a8ffa1346c8570f7038684ce53d320584174634aeffa1b51629af0171a2d6572854eb07236a83236ad1d9949988e9"
        },
        {
          "alg" : "SHA-384",
          "content" : "8f7e2c449282244fea3151ac0c956b42bb7ae6cb2397ca8b18952aea802d33cccad6e08a5f515fc34e52bacfece18862"
        },
        {
          "alg" : "SHA3-384",
          "content" : "72ec6c2c5de8cd074bd59dbb8215005bedc9de58795484ec2792fa867eaf13547aaca81daaf06f1ec117d29b21e70cd0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5cf6de29555bde0317d641e8a7afd7d1ed84dddff92c80f8493b4a2873d26c41"
        },
        {
          "alg" : "SHA3-512",
          "content" : "836acb2525ddc3b352da7db824e00c0831b25f46cb32a77c1e578b39978621e3c47da3554a901749af15b3981620875a4c4492f421a1833d8eb8e50c4804eff8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-shared-utils/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.4.2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.inject",
      "version" : "0.9.0.M3",
      "description" : "JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "643a13084e0ac59cdda06319e1b348ea"
        },
        {
          "alg" : "SHA-1",
          "content" : "3665002ba4d16dfa779ef658a63d0608c4bd898b"
        },
        {
          "alg" : "SHA-256",
          "content" : "15335c4dcf082f599fb8eddcfb58d6a7e9a9c97de2883c257089a479b9b24522"
        },
        {
          "alg" : "SHA-512",
          "content" : "76267078f3dd887fd7c4a0931d0ae057d5f51478f712ce4bb5530cfa5c2aa18a8dbe935b32c1afb01a4e2cde44d30579baf5868b8b63ee066ea0714fd9d8a81c"
        },
        {
          "alg" : "SHA-384",
          "content" : "d24164f8aaae165de8533530b90168228e7d107a5eeb63997bf6e2d41f1adfaabf29aa9ab4f08e3445c69aa57f6c09b8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aab9bce13f047bcdd8d47420f80e88a314f3566bf7edcd7d37cf286865f45586fda8745793eb2a54c506759f9654bd5b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d9e302304b0f99703243f697f72b12e42df692553c08ef9d2d2e0eb83847eab7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8ac0b60618e01e819fcabcfd210176310d98f9856b49cafd5dfb451393b791b1ed43fc17e359c5868662dc76e0059e23a152c5564f7ce94ca4720bd092cb29d0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.inject/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/sisu/job/sisu.inject/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/sisu.inject/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/sisu.inject/org.eclipse.sisu.inject"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject",
      "name" : "guice",
      "version" : "5.1.0",
      "description" : "Guice is a lightweight dependency injection framework for Java 6 and above",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2560169296aa94492af34af2115e9511"
        },
        {
          "alg" : "SHA-1",
          "content" : "da25056c694c54ba16e78e4fc35f17fc60f0d1b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "4130e50bfac48099c860f0d903b91860c81a249c90f38245f8fed58fc817bc26"
        },
        {
          "alg" : "SHA-512",
          "content" : "b9c7a9b815d9ce387ebf6d58a71541da1be3cb8d847358133dc1f35ca45315bb9db11c13f3238adb643670759a58fd106247039f42c10759374a9b361c62e99e"
        },
        {
          "alg" : "SHA-384",
          "content" : "1f7e6e7555c97752e2a3a7dc07473384762467c24a0fc8f4c93c0f209ef361ecd4bf2be847281798dd84f68fc8c54b2f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "59b895108174073d9889ba3e18566eb5e0785310e90dbd918dfb06af5bdf0d72e8a54094c6109090f43e242daa4d6ebf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5a9518cdc72dd7fb8d7848500cb8c97c7689e64a52028dabf44e61a933ffd853"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5b53b7ee09cf057f83acf86de3f35fc45c04cd95c01e78b59fc1b4d9322e17ecaec1d6c5d37cd37084b602c1a74f6457342e27c6271fd140ade3190448c9fb27"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject/guice@5.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guice/guice"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guice"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guice/guice"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject/guice@5.1.0?type=jar"
    },
    {
      "group" : "aopalliance",
      "name" : "aopalliance",
      "version" : "1.0",
      "description" : "AOP Alliance",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04177054e180d09e3998808efa0401c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aopalliance.sourceforge.net"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "33.2.1-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872309e5982530bdc7e68096c0d53cd2"
        },
        {
          "alg" : "SHA-1",
          "content" : "818e780da2c66c63bbb6480fef1f3855eeafa3e4"
        },
        {
          "alg" : "SHA-256",
          "content" : "452b2d9787b7d366fa8cf5ed9a1c40404542d05effa7a598da03bbbbb76d9f31"
        },
        {
          "alg" : "SHA-512",
          "content" : "daf6b2eca6df556f70052361657ad11167a21a3b8a76b5821416fe1f7bbe262367216ae5f9135cc8ddb4f94e5d532ca79555b438a9967fbea41e26b203914b85"
        },
        {
          "alg" : "SHA-384",
          "content" : "bdfa6908c68fcdc4969a260998bb65da326ccd3afaecd9c1b6fe72ce84aedcdc30f3c14ca812647a62e65da5cc74f95e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a3e516ba3b32697eb71c511c0fc872113ee4ee6e6239241f9c6e54ca53b06d96a161de9b2431ef77433e7793e3b1cef3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a48184d72e92dde277e29ac0ab73d8b4b8afb7d5ca4db94a08f7fd5a3934379f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ac0a9fad5d942e5b00423116e773196f8f37163b84e48213891500b5b060f89e3380038efad7ef7da5303c6a2c7f6c0e73d0b48a9024b759edcc3a26ea89551b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@33.2.1-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@33.2.1-jre?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.2",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3f75955b49b6758fd6d1e1bd9bf777b3"
        },
        {
          "alg" : "SHA-1",
          "content" : "c4a06a64e650562f30b7bf9aaec1bfed43aca12b"
        },
        {
          "alg" : "SHA-256",
          "content" : "8a8f81cf9b359e3f6dfa691a1e776985c061ef2f223c9b2c80753e1b458e8064"
        },
        {
          "alg" : "SHA-512",
          "content" : "ff4ee76aa661708989d53d45576cff3beea9ebbd86481dbbf2ee8c81bb22f882097b430588312b711025f0e890f22c6799d722ccd422a6a7278de08660fe2f51"
        },
        {
          "alg" : "SHA-384",
          "content" : "85a7bd379da27ad57a4e5c02099fef206083caa52244597ac858a921b48e2912cfa7ef0e7d0c7a10ab2dd8d0f7d6ada0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "652b22d09b297320e62ac254801e7d3a0fd2a8038461c5cbf7a53a27d681f62b768b964aa62c864453c4e7af217c8c4a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a650b2f7982affc2dbb7e2807fbb0fbf58b74fd8dc111cc6dc5e95a00179b7e3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2c5ee7629a8fb1c952f437b80fcd1cff86c54ff81de02eda1eb73c0bbfe38d3f072946f8c6396c7f1e46e16a6d44ad393dfe6fd2dd96f75ebb854263d36bb193"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar"
    },
    {
      "group" : "javax.inject",
      "name" : "javax.inject",
      "version" : "1",
      "description" : "The javax.inject API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/atinject/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/atinject/source/checkout"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-interpolation",
      "version" : "1.27",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c2edbe0dbc934692794aaeac6006055a"
        },
        {
          "alg" : "SHA-1",
          "content" : "8dc73f4ff5eafcbb7ec035ba54736e828b272533"
        },
        {
          "alg" : "SHA-256",
          "content" : "3fb4fb6143fdf964024c3cb738551524b9ea84e5c211cd660c559ad0703e5230"
        },
        {
          "alg" : "SHA-512",
          "content" : "34ae1399e75560d6aec6743ce37e10d2236342ec58145c3fdd7b03340f4ed3ef500f824c845d452dbb8c3f14d118c855707de4a080074fa572daf7ccfef4dddf"
        },
        {
          "alg" : "SHA-384",
          "content" : "cf31f04d414db3c864a403628707df8b36c379a984d75804e5cbfeeea5fea54d2510620de045c0b01a7745063b3135fb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9a439b4e81260659af067e91d5e2482337dc718cd32abc08562e9a90fee45da6a0cbfffdc7190b13ba662ed3153fcde1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d8cd271924ed99a870e9f8c17796e2ab0a3e69350465508517992bee0cea6bbe"
        },
        {
          "alg" : "SHA3-512",
          "content" : "75a3e2cbde1c45b70c1b4103620f76673db127e17518e2ca51cff1e6d7a84041e495c71171490004650d6476679d009594db2557898e231962bea3744914c501"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-pom/plexus-interpolation/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-interpolation/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-interpolation/tree/plexus-interpolation-1.27/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-component-annotations",
      "version" : "2.1.0",
      "description" : "Plexus Component \"Java 5\" Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "141fd7a2ae613cb17d25ecd54b43eb3f"
        },
        {
          "alg" : "SHA-1",
          "content" : "2f2147a6cc6a119a1b51a96f31d45c557f6244b9"
        },
        {
          "alg" : "SHA-256",
          "content" : "bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac"
        },
        {
          "alg" : "SHA-512",
          "content" : "cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2b335733d7683e8bae312b0608af7c17b1aa22a1b9cbc4cc11549faf6bacc51c7591f1073aac99e5d70fdea31c6253c4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2e9f44d1c5df160563d3cedaf01929682fb3e0432beca7c782d8ba0324fb32b1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5051e4210310ec60fae9f32284a93da3cff63bf43a7dda30eaf2715d24cfc7f2353a6c2731521f4d6ef32e7a3e2526b6a41c8a11b0889c8dbf7ffc7914812641"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-containers/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-containers/plexus-component-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings",
      "version" : "3.9.9",
      "description" : "Maven Settings model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a5eede8fe9b01b7bb3c6dad06a738365"
        },
        {
          "alg" : "SHA-1",
          "content" : "a82024d87a107965ae274d944c844c9186ff410d"
        },
        {
          "alg" : "SHA-256",
          "content" : "68edf1b510e0d759ec501271a5d05e3a6e425462fbb84126c16e8a6f89abdada"
        },
        {
          "alg" : "SHA-512",
          "content" : "0f7466c4791b083e38e5a6f4631b03317f57bdeee6bf1d152a4b75830bf652c80e1f9707b3f64fcfd5f790886eb55279a4c33fbebbb42b5c97066cb3010b1137"
        },
        {
          "alg" : "SHA-384",
          "content" : "b3d6d9512709e1c5f02b86775501c64c0bd81e76a97e399d2928646584f0f4feff5ea922e45c16865f4749bd4301eea7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e81ec5efa79028a6eb8c58501023882c1f15142659ce3893b4a862b7b7b867397d7c67eb519f972c856979fb728c93a1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5cad01acc7d3ad12c6da20ef43aa7b8be20bf6b69a59fc532b734ed2d331d00b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dd6502ca14b0ca1283746748a4dccbe57e150f1d031965dc543baadf520321e1c396a6d94f1f99d7ab23af04edc6be200aa56655066eb0d23d1a7b8367397be1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings@3.9.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.9/maven-settings/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.9/maven-settings"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings@3.9.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.plugin-tools",
      "name" : "maven-plugin-annotations",
      "version" : "3.13.1",
      "description" : "Java annotations to use in Mojos",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "28e0cd46a9e26fb2b222eb8509295a49"
        },
        {
          "alg" : "SHA-1",
          "content" : "ba70695f2f396589c49d5da5a99114ee71d03961"
        },
        {
          "alg" : "SHA-256",
          "content" : "8e22e4b806eb760990a0a9a79a8988d26af060b3342e00c62f7a0664f4d73575"
        },
        {
          "alg" : "SHA-512",
          "content" : "8444cddd5c95cbda780dd0711f321ae92e6bf9d6101dbef65bf4eab9232452c88bd2db1d6578b9c0263a35e614835f440994e01edb87acae53d4216c0fe47640"
        },
        {
          "alg" : "SHA-384",
          "content" : "51a67a4a4aca0403f4840583e64176959c01195be401f6b7c01617d804ba8147236ae283feebd1035e0506f5a03746a5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a0608e48a9109765f00fc647d92175a8b9a7ae7f01a3f5f60ebea40fd0861e08bfbff02870a1a4a9fa1423f67054367f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "61228758b79bd7ff3aa734c2626999552f78ec70888af3b4033066afaf511320"
        },
        {
          "alg" : "SHA3-512",
          "content" : "33b748333f4799a256333e5fa729ae346f5de72e629b990457ce44dfc79b8294133742f168c048690bf5c1b1a87755fa1bd053117e0809e0c0f06bb2edcbbdbf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/plugin-tools/maven-plugin-annotations"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MPLUGIN"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-plugin-tools/tree/maven-plugin-tools-3.13.1/maven-plugin-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.13.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.reporting",
      "name" : "maven-reporting-api",
      "version" : "3.1.1",
      "description" : "API to manage report generation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1e1e0b2f189c861995e33a2a746501bb"
        },
        {
          "alg" : "SHA-1",
          "content" : "74ca00a13e46d065071cdf6376d7d231e0208916"
        },
        {
          "alg" : "SHA-256",
          "content" : "25be6603c97d28fa3dcd122073054271c8fcaf667d220dce7a26a61a6f3cffd1"
        },
        {
          "alg" : "SHA-512",
          "content" : "a129606b163aab3cbbea22c8157a4349952739211b878aea8f75d4f0f756b44c3f0d40bbeeb682af35f5538d25dad3c02fc67fcb6eeb8a4235eb93e9200e7ed1"
        },
        {
          "alg" : "SHA-384",
          "content" : "fa1c5cf8c8069176c3c35577a58a0e9f5bf03bf387282a63fb11f4886dbd788aee7c651efe4dfe35b5665c5ccaad10cd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0e4d69e1ee5ec90007f84e3ba423f2e23b343774c7f4c847f4d81194b65b6b5095f721b704b598da1e99474872477f1a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7e251bf4ac0468511e0f58a6203257b12898138e7af42e0798d5847ec4076c15"
        },
        {
          "alg" : "SHA3-512",
          "content" : "68117514c3a2a0f0e110b64da6d4135aec08c901d664952ddb41bc9a0934bc34e0c82e960ceb75f192edc266932ff6a22953d73fa66df4076c5bcf73ff07ed61"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-reporting-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-reporting-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-reporting-api"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-reporting-api/tree/maven-reporting-api-3.1.1"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.1.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.reporting",
      "name" : "maven-reporting-impl",
      "version" : "3.1.0",
      "description" : "Abstract classes to manage report generation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3c425355e6d71e918e4881c4c9404b85"
        },
        {
          "alg" : "SHA-1",
          "content" : "67d6750c2cb6d8e486175f1cbb3abba2f07ada98"
        },
        {
          "alg" : "SHA-256",
          "content" : "82256d8ffe0ad73899a8860cf2c91a305ee30e8376943450266d563bc53b1218"
        },
        {
          "alg" : "SHA-512",
          "content" : "8989a77a6892b45e89f841a99a05e733fb17c36a07bcaf429e063a0af6bd1efae100d8b8e8384de60bf923355032fb306932113e2fc72daba7acc5847825eafb"
        },
        {
          "alg" : "SHA-384",
          "content" : "2450d927d8c3ff919b24dd119373891acad573812e4f82600f5b5f5115b02d084e364e487adc104399e86cfeba35bdff"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f755db24147f40fe090c7ffa84ca2e13ca79e7bc3c5032c97c8fb7325cd66a931ababe316e11447889aedfb9641042d6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "05e5b971c1a49b557e2676a50cbd16ddfd424e4b36a59b51d3fc5883b9d994b7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "97f1fb681c7bf7f452afe4bd640e8a6d2f920b970fca81a001c5f8828c6f439986d80e0441c756d90ff0e64a14a51e90c9c9477ed0835a3d42f4a615d3489ff8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.reporting/maven-reporting-impl@3.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-reporting-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-reporting-impl/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20in%20(maven-reporting-impl)"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-reporting-impl/tree/maven-reporting-impl-3.1.0"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.reporting/maven-reporting-impl@3.1.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-core",
      "version" : "1.11.1",
      "description" : "Doxia core classes and interfaces.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a5f49cc5f7dadd2fa104974dfa3a6766"
        },
        {
          "alg" : "SHA-1",
          "content" : "0b0438a61c2c1208b4d2e2b38241478383dd758b"
        },
        {
          "alg" : "SHA-256",
          "content" : "d79801594566bdd7168b1adf927c3cc40cf17a95dd4480b4151e45eb30128cd7"
        },
        {
          "alg" : "SHA-512",
          "content" : "3d5ffeb4638ae177c5ca958b540549f195416065bdbcbb6bbd80d815fa96d9b60467add41c46130b3bd7463f46be605fa13325cd5d783b786d60d4c929503337"
        },
        {
          "alg" : "SHA-384",
          "content" : "c157a1591035feab2dd92f785c128774a7251c6d97215e0d7930c3c27ce3b0e42b9196de0a44a0ba7c8982674bf7651c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d851ab3a29c16b4f278c61fdc15fa89fa2ee78b24b75599556821605ed560148b79e0c367fe2c93a420c84d757da61a7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f36ba66861227101e0901b68626218f49030973b7648388233845d49517a5d1f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "68a184868d0e32f8016e2c88dd62dfd4928a0958f5ac583bad7b011dc8bb543fdb074bf97e179ff1ef46bbe045498657bd09f89d2b60c28d64032154946278d9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-core@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-1.11.1/doxia-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-core@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.5.13",
      "description" : "Apache HttpComponents Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "40d6b9075fbd28fa10292a45a0db9457"
        },
        {
          "alg" : "SHA-1",
          "content" : "e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada"
        },
        {
          "alg" : "SHA-256",
          "content" : "6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743"
        },
        {
          "alg" : "SHA-512",
          "content" : "3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089"
        },
        {
          "alg" : "SHA-384",
          "content" : "093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-client"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-client/tree/4.5.13/httpclient"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.11",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "567159b1ae257a43e1391a8f59d24cfe"
        },
        {
          "alg" : "SHA-1",
          "content" : "3acb4705652e16236558f0f4f2192cc33c3bd189"
        },
        {
          "alg" : "SHA-256",
          "content" : "e599d5318e97aa48f42136a2927e6dfa4e8881dff0e6c8e3109ddbbff51d7b7d"
        },
        {
          "alg" : "SHA-512",
          "content" : "d9586162b257386b5871e7e9ae255a38014a9efaeef5148de5e40a3b0200364dad8516bddd554352aa2e5337bec2cc11df88c76c4fdde96a40f3421aa60650d7"
        },
        {
          "alg" : "SHA-384",
          "content" : "9ae3d8fd4c38f3af52c76c5f98039109901cb0f70700e6d9999b27cc4b30b188e2688aa4adcf6b846376bc3ca125907a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bd272e22540371e7d834cd897bce9be657293ba9c5584e0d47a4073711dacb524cc59e294e942ffc01613d17ac7d6ac1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "90ec34f9701a8b212c65e6167c505ea6417289f910deedcac8517075b8349728"
        },
        {
          "alg" : "SHA3-512",
          "content" : "101bc04efae2bd16d7923e61bca922c4a006b0e4b34909e0f8865196cb4df4f4f6269737c17880b4dfd0309cb487b806e88d09c6e1a7dc70237563b3f4312f7f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/codec/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.11?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.14",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2b3991eda121042765a5ee299556c200"
        },
        {
          "alg" : "SHA-1",
          "content" : "9dd1a631c082d92ecd4bd8fd4cf55026c720a8c1"
        },
        {
          "alg" : "SHA-256",
          "content" : "f956209e450cb1d0c51776dfbd23e53e9dd8db9a1298ed62b70bf0944ba63b28"
        },
        {
          "alg" : "SHA-512",
          "content" : "f16a652f4a7b87dbf7cb16f8590d54a3f719c4c7b2f8883ce59db2d73be4701b64f2ca8a2c45aca6a5dbeaddeedff0c280a03722f70c076e239b645faa54eff9"
        },
        {
          "alg" : "SHA-384",
          "content" : "1cd0a3c120cfb4974573b0f499b2ac8a200aa43506777ed09f9806c6899541605fd355a3b5f44977517dd1cb463e808b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c771301cda89b2c102b76ba7b46222e0ee1898fa1e53fd4d43a7994e4a234a9804f7221feafe0259f0e9db164a5d4576"
        },
        {
          "alg" : "SHA3-256",
          "content" : "97a9e2fcd1946204dd8643e504c0ff73904957da5df605d703734f95345d5816"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ee6045c3724c2a4983330cf9bc57a46c0fcfc252be455a864953ef5c538ea4aab399c4315f7e5b1a315a48bb8f11cc7492e0735615fd68aa3981fa3ddb4d0a98"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.14/httpcore"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-sink-api",
      "version" : "1.11.1",
      "description" : "Doxia Sink API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b1bd5c9efde9f14969fa881b87fe709b"
        },
        {
          "alg" : "SHA-1",
          "content" : "59c2255f58c78fbbcb7e638e82bd2914e78aec8b"
        },
        {
          "alg" : "SHA-256",
          "content" : "39ac38bb7d752ea003be17a0065522e4e1b076a4f7e374bea55259f3e133f28f"
        },
        {
          "alg" : "SHA-512",
          "content" : "2be3a3859737732cc7d5f6bed028d5f0ffbadd90c4e79a1dc7aaede258496c7c4017b49c606d2f4fc2c56f8df327befe21766a483147840b122f0606192555ea"
        },
        {
          "alg" : "SHA-384",
          "content" : "710aa1003a7d35c7e66efbfcfda24ba3c2c0f19e55f6be6e67d61aaa92469d55f786c078ede479a394caf7b3466f840f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a1960d6bc80fea9b2e80ec26d97ec6afa5463142be0c135dbc3146ce6fc33b1d74bb393fbd7ef025fa453a1636a199c0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "641e16336ff9efb2d8ef73040d57ede810395cc0309bfd2285301b1c4f334164"
        },
        {
          "alg" : "SHA3-512",
          "content" : "20769dded70cad7be78bbe3a9a11fd4a277b6f8523aa067de33f7ec7e4638b9903f5733307938c4d44db9c14afa3e0253d4ec5af0aa9aa7f9fb727a9fc9f448b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-sink-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-1.11.1/doxia-sink-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-logging-api",
      "version" : "1.11.1",
      "description" : "Doxia Logging API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6452e33a36b87939630e0b18f8ffcff0"
        },
        {
          "alg" : "SHA-1",
          "content" : "ee28757cce6ee0215bac550dead25074c97c532d"
        },
        {
          "alg" : "SHA-256",
          "content" : "243c66f842cd2b3ded7c6d2c36b177a65c3f5d94800cef988ba3e29ec8cf60c9"
        },
        {
          "alg" : "SHA-512",
          "content" : "a09084b6973c059654c8ff171d1eeff236f9d9737149ccdeb83ae6a6104df41a5400aafe708ef3412835622a6385bbbb9342bcf775050a859544c005866c66a8"
        },
        {
          "alg" : "SHA-384",
          "content" : "88d49fe6721215cf896afdb0e99baf54a4d48c8dcc610b4e1afd160f92ac19ac3798f3c83e0bb71bd33c960e12108c0c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9fb11e49f1a3426e2e463a1354fa7158b884c8841b4ebc838d11b2e3b35ae321648f245239c132e681aa4d2fffe267c9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "558bdecdd6ebca212693bf51b9fdc6f278aba1b7b80c94435836209f5c5855ee"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6042f2536f4e0e4179d58d3fe145d046b08dc4c2987b0c3169fad7e3d3847972154f86e6f6d8fd3812f1cdf4fa93a0051684c0cb523564de7743eb6ae154f98d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-logging-api@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-logging-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-1.11.1/doxia-logging-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-logging-api@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-site-renderer",
      "version" : "1.11.1",
      "description" : "The Site Renderer handles the rendering of sites, merging site decoration with document content.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "871abead02f713fb9c02d5ba36f65bf7"
        },
        {
          "alg" : "SHA-1",
          "content" : "414e3b2049aa6f6710ecca4fa905d9d2ce318773"
        },
        {
          "alg" : "SHA-256",
          "content" : "f279a087910d3e0728daad9114da8f3211cfb49b5e8457d05ee9ee5f04284527"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb5368bd1283ed42dc9b629cccc728217f80b386054bd4da2ddd5e57f4705a1832ca724dc4d89f13aed1897998e233eee417df6ccb3c50b3fa3575739ae21834"
        },
        {
          "alg" : "SHA-384",
          "content" : "5d00a93b0300be8dfa7a59428662ac73f04f7de823e863b2dfec99d46ca3a3ad4419028134b8194e563473066ce25fa7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "481b4b3fccfa3b1e6eaf1fcc6f07c9dc0596786114deb8ce3f0b0a5e7ce4ddaf1d1305128d0138fba8dd73e97de31e92"
        },
        {
          "alg" : "SHA3-256",
          "content" : "46341f1294d7005cc7de536c4ece13803ad137dc93d3d58c7cc27020163bf3c8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bd0ea4984ebfd2426483d401f19add4fce368263776f64a5eb98edba90bb840875506bb78491b21d2864ac94214a5d377e6ef22e8aeffe0d8844957d616f0d76"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-site-renderer@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia-sitetools/doxia-site-renderer/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/doxia-sitetools/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIASITETOOLS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia-sitetools/tree/doxia-sitetools-1.11.1/doxia-site-renderer"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-site-renderer@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-skin-model",
      "version" : "1.11.1",
      "description" : "The Skin Model defines metadata for Doxia Sitetools skins.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6fa7b3005dad9f4b285a889b3b68d8aa"
        },
        {
          "alg" : "SHA-1",
          "content" : "b6994a60da09eb429c01362e9a6a510e0f83d24e"
        },
        {
          "alg" : "SHA-256",
          "content" : "5337efbe45413d24b71422d145062f84bde96271dab9f3a5caa3fab461974bf4"
        },
        {
          "alg" : "SHA-512",
          "content" : "484d6efa064a5c332ab4b94f4ab445773fb7573a4e5b845769fd32e04673343fee6b87a8d8a46ddabf495d6e016a6e03a3ca92638c3ea0c0a8414b525fe1a7f6"
        },
        {
          "alg" : "SHA-384",
          "content" : "874b350a935c268350fc4009169781662a459c4ce992df79168eaba9831e4162b5da88601299255f2b874fbc380dde11"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d76572956daa0618f2bcdcad1e0419fc5911abf7a659fc8d234fcf664fe54db3450eb2d55556c63020be9000294225d9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "dda0ab1b0a3cdfb4f40365f57dd41caf4a5910bcc36bcef675bcd6606efa4cb7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5f3059bf781ff00e96b5c30854cbc45d37996d294f85ed88ba25ef01ce45ff4d902b5387bebb6852293bae05059d64bfcf87d20af87180d49fbd108ffbb7b5db"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-skin-model@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia-sitetools/doxia-skin-model/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/doxia-sitetools/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIASITETOOLS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia-sitetools/tree/doxia-sitetools-1.11.1/doxia-skin-model"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-skin-model@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-module-xhtml",
      "version" : "1.11.1",
      "description" : "A Doxia module for Xhtml source documents. Xhtml format is supported both as source and target formats.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "82c4cfb79b666b922e1a8cf7b919df22"
        },
        {
          "alg" : "SHA-1",
          "content" : "f1b755a09934cd9c51d87b606c8e8ddf07719ebf"
        },
        {
          "alg" : "SHA-256",
          "content" : "3d298e2da1e11dba952cf4e5d750fafc41713470767b57c4f6969123c0892a23"
        },
        {
          "alg" : "SHA-512",
          "content" : "881824ec074e109d7f8641738e15750fbe33e4e47749a601c84ff83e8c97fb9e0c5c07b59a0534b73ccdb7e9a6fe4f785aa17b980c9c16625404b8e8e468aab6"
        },
        {
          "alg" : "SHA-384",
          "content" : "578e13414d19cc08dedee9f33ff205b2b8db4c02c6c952e80b13514f45ca48506b5206e3c0fc12229334462f3afdbeab"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3c153d7e9e0b7a0d4df36bee9a6ad63d167503ee6fde4e3a08b94e5dfd0cfd5e0dc8806fbba4352ef5fc8a2492f306f4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4edfbc9bbd74911a59186461c889b85d28faf1068fecfdc6e73edb113b221d10"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ee8cdefd6efeed524f8408204cf8ef1daa9d843c5feb26ebfdc56b3e820c5c255a8e75585e615ac2f9a8f92330370c9caa5913cfa77df01de486a9a8f7a95195"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-modules/doxia-module-xhtml/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-1.11.1/doxia-modules/doxia-module-xhtml"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-module-xhtml5",
      "version" : "1.11.1",
      "description" : "A Doxia module for Xhtml5 source documents. Xhtml5 format is supported both as source and target formats.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "37208526e7ed1051bc8c7f8dc076e5c9"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4ee721555ff063d7ef9042d6b9237386c6b33e0"
        },
        {
          "alg" : "SHA-256",
          "content" : "3583ae17f9ae97db41da038dc67552a386e7a9f850f45fa6fdb0d2b9ef36a31c"
        },
        {
          "alg" : "SHA-512",
          "content" : "0b0ea0e4c80235256aad6e3d5f1cb97756367b753ff46040a5afff598ff1e4eccf872f6b4bcb70e3f84f770a45c6fcb517726927ea52b87ae8dc572348378b01"
        },
        {
          "alg" : "SHA-384",
          "content" : "8dfab16d650a9b4e6aa68e54c4d7a54978e7b20c66f3e92408a98cde6dd7d2ccfce076e9e782e0e860865785fdadfd8b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9b33c60e774ae862bcf1076a4f48096d7c85feed8c835ea3dd12d64c1241fd5778c6c1496d0393132e8617153ef77998"
        },
        {
          "alg" : "SHA3-256",
          "content" : "af4359df0cc3c83531b6f7399819c7494fdabfcbc51220b5622d8ae90052c607"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b4fbc877ca911fadef89c1ed01bf811d59c84bef54472b61a8f3013af12572e8340392a14c79f2f9cd2982ae258222a7d8e8202cd791fe3ff5f609fc81983176"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-modules/doxia-module-xhtml5/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-1.11.1/doxia-modules/doxia-module-xhtml5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@1.11.1?type=jar"
    },
    {
      "publisher" : "Codehaus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-i18n",
      "version" : "1.0-beta-10",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7f36c0459c853750c627f682ec7bcf52"
        },
        {
          "alg" : "SHA-1",
          "content" : "27506f59e54cc80b8c28b977c2bcd0478094e0cc"
        },
        {
          "alg" : "SHA-256",
          "content" : "b87f25b512ffafcafbf4a05ab943812e9c6915291370c6b46016eb3836886c41"
        },
        {
          "alg" : "SHA-512",
          "content" : "c06555d10b1f1e66ddb93f3f5045de305b3e7b04f761a9d1956e2aba32d9d7541affc2f2281eae2be48b32d233da08da9f905153c6a0804de98d55b2d3025fae"
        },
        {
          "alg" : "SHA-384",
          "content" : "5e2a8327bb2d682e2e8aa69526006d831bda94eaee64b20174b7de88bd476b461be35564f274b4255546609578ecf0f8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c82cafd0a29d74b46d50b1dfd5995dc9a1730595795d603e1608dce98d912a5efed8e26237f27fe6c81bd4d4d0525e56"
        },
        {
          "alg" : "SHA3-256",
          "content" : "adacb3d925b0861d579905082a13fd6a2798d33498854ec4293b2a70b2abce02"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0a91213ad27ba30f7f9d6586682016d812b73aac213e4084db5bf194d24aab32ca2c38d1c5ee8c5810b39aaacb23528e500da05d579d3aaaf5acff3f41a7668b"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://plexus.codehaus.org/plexus-components/plexus-i18n"
        },
        {
          "type" : "distribution-intake",
          "url" : "dav:https://dav.codehaus.org/repository/plexus"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/PLX"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.codehaus.org/browse/plexus/plexus-components/tags/plexus-i18n-1.0-beta-10"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-velocity",
      "version" : "1.2",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7d7805136e8165f53c944612a809f1a6"
        },
        {
          "alg" : "SHA-1",
          "content" : "1331b9d6bbf99ead362c68c2f318ebe5fedda598"
        },
        {
          "alg" : "SHA-256",
          "content" : "b4c4a0dbeacad54306a1ae230eff5ab45d58e3ab88c86ab7245d3a0772be57ab"
        },
        {
          "alg" : "SHA-512",
          "content" : "421e51c12343c5537b2e52b1fea89e9ade7db095b9c71ef47c019e1cb586ec94e24b48b18a851669c1d6fc9c0ca1456683fa1a020f4ca34084ab2c3a54600df4"
        },
        {
          "alg" : "SHA-384",
          "content" : "844f82a7b5f116afbcd5e24f7d1cbb6491ba4fca20d8bb1da6351dababddcec90ae2d76667a0bb873213e9892eedc900"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1af2e6be634af622c2cf6c43d757d831cc699cc5818100072adf7577977fbac7200ef768a49bebf0104495c08d3269ab"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0da4dea1c0775cdcc0d74a30cfb0e83f91e91814e63e98b0b84d60bb8b8f2728"
        },
        {
          "alg" : "SHA3-512",
          "content" : "aa2603b57a73215173854724afc05e507cb8b78a82b838c5737eca21056e0cdd2d7f65f6bb44e56d805d3b0d690d86d42576b751a5c785aaa52689fe715bff66"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-velocity@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/plexus-components/plexus-velocity/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-velocity/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-velocity"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-velocity@1.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.velocity",
      "name" : "velocity",
      "version" : "1.7",
      "description" : "Apache Velocity is a general purpose template engine.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3692dd72f8367cb35fb6280dc2916725"
        },
        {
          "alg" : "SHA-1",
          "content" : "2ceb567b8f3f21118ecdec129fe1271dbc09aa7a"
        },
        {
          "alg" : "SHA-256",
          "content" : "ec92dae810034f4b46dbb16ef4364a4013b0efb24a8c5dd67435cae46a290d8e"
        },
        {
          "alg" : "SHA-512",
          "content" : "e521785d947cae1a02070b26a43d235b6319439a6364c58266d3f9c458f9a099406c10aab5f51c5db5ba541e88322cb35203c6758b4b8bb65f9539a345da9a04"
        },
        {
          "alg" : "SHA-384",
          "content" : "94eb2247eb326dfc5f39a6d5bb71f6402531dad128281db32cad84d5571fb5fd4d07bdcdddb6fde91576021fe5faaa2d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "32292f15259b5a1cfee52be3c0e7ca08b778e7b4d40b07136d836f726bb9893075e3444dcefe7ab7ff0f1284092b138c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b3e19d65650a20bf773683b7aadb92edd588237d3c8a6600dcfe25fd22098535"
        },
        {
          "alg" : "SHA3-512",
          "content" : "00ed4a489b0372cac0e677df29b07e7c21c54aec229833c92b92bdb16da9178a94826fe665154f1e6ea22e2c1fdce4aa847fa40b75928dc82a87b68f6bd6aec6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.velocity/velocity@1.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://velocity.apache.org/engine/devel/"
        },
        {
          "type" : "distribution-intake",
          "url" : "scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/VELOCITY"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/velocity/engine/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.velocity/velocity@1.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-lang",
      "name" : "commons-lang",
      "version" : "2.4",
      "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "237a8e845441bad2e535c57d985c8204"
        },
        {
          "alg" : "SHA-1",
          "content" : "16313e02a793435009f1e458fa4af5d879f6fb11"
        },
        {
          "alg" : "SHA-256",
          "content" : "2c73b940c91250bc98346926270f13a6a10bb6e29d2c9316a70d134e382c873e"
        },
        {
          "alg" : "SHA-512",
          "content" : "ae35b761d16f4327cdb6fda16789166fc67020efd71fd2cc3395b97444f439dfcc7eee948a3efd3b02440416caeb873417d95db6a2b16f4ef198de9d1afbc045"
        },
        {
          "alg" : "SHA-384",
          "content" : "aef894734c328ec53b22c4efa33759c6ddb888093498411a439eb9a5494a8529beaa71cde0fd1d9ca526812d748c3a88"
        },
        {
          "alg" : "SHA3-384",
          "content" : "970e56888f04a30878e6d6b7ec895060f61eeb6f745a8a58beb2ab94871e45845a468443629c1d1dc5ed6b8eecd5f6e9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c6b19be6e3d3bb980cd6ecb6c0e2daaa506200d6e4e8a2a3cf29748581406971"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c1cb8ff6c49109acb57dbc0ae2a21e0a689fc34ddf01521ced8c4ae93355b55527ced59c6b3f324b44cf4b24ced5f063815046f9bd62c44e3ef41417d8eff972"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-lang/commons-lang@2.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/lang/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/lang/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.4?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.velocity",
      "name" : "velocity-tools",
      "version" : "2.0",
      "description" : "VelocityTools is an integrated collection of Velocity subprojects with the common goal of creating tools and infrastructure to speed and ease development of both web and non-web applications using the Velocity template engine.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "51ed2c6c0103cf3fdbeb9aa5170f5288"
        },
        {
          "alg" : "SHA-1",
          "content" : "69936384de86857018b023a8c56ae0635c56b6a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "b174eb36bc48c25dce10571c7d3d5dca4e4c1b3e2e31a92b9ed68fe9dea688d9"
        },
        {
          "alg" : "SHA-512",
          "content" : "c10486f112bb7119a557fe9a138878eae980eb57027a5bddfa249e171eb2589fa8d3d36cb77e825cc336245d7f8455e106daa04c54c6eae9741875a332af15ba"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f784eaa6eb5e947339d74780730c6bb311bf697029d3e4e1d1531ae4a1c7339f80f5e4a68d5e01da480b9afaefb2769"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b38c88890a15b55b6f67d403a795639ab9a6733ef8d2a10d4f15ce007fa949dc9576a7993d13e16ebbdf19dee71c054c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "67247b64ea82fe36636007c822bbe01ec008dbbb801d269f9446a0b967a45b32"
        },
        {
          "alg" : "SHA3-512",
          "content" : "164394e3f5067b2d77678c9094adc8bee562d3f9400961a2f3981836d802fece512106f3895c5322f5a852a33373799e263cf5212a1e9bfba6e34849f4e978d5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.velocity/velocity-tools@2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://velocity.apache.org/tools/devel/"
        },
        {
          "type" : "distribution-intake",
          "url" : "scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/VELTOOLS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/velocity-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/velocity/tools/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.velocity/velocity-tools@2.0?type=jar"
    },
    {
      "group" : "commons-beanutils",
      "name" : "commons-beanutils",
      "version" : "1.7.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0f18acf5fa857f9959675e14d901a7ce"
        },
        {
          "alg" : "SHA-1",
          "content" : "5675fd96b29656504b86029551973d60fb41339b"
        },
        {
          "alg" : "SHA-256",
          "content" : "24bcaa20ccbdc7c856ce0c0aea144566943403e2e9f27bd9779cda1d76823ef4"
        },
        {
          "alg" : "SHA-512",
          "content" : "0b29d78fd71aa4d4989f78518b1aeab1152a0ffcaa1b75460c689b7c7dc1559447be32bf938a230e29240bfff278bfc914589162cca1e6ba980bfb58edaf5b06"
        },
        {
          "alg" : "SHA-384",
          "content" : "afecec496c387c5d566ae5f21acdc0094209d93d54013616cfdf606f653330d6f7f18e37cb7bf50583bfefce7c2dd374"
        },
        {
          "alg" : "SHA3-384",
          "content" : "eb8cc7d32855984bba52f859cf8285784854fd7ffdc88f234f0c87d883ffb3ca131afe68c4a2b14325fca3acca1ca113"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a8a064980fdee92f835b95d77600a6470e5ce2c3467a596d371612db4338e4d9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5f9fd2790a94b91afdfc48272099ea2966624dc54ddf49edbe0a7a34f45c1a8c580d0146704ae04a286034253ebc6a8583c1412f22ac9fa32e32058356103e3d"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/commons-beanutils/commons-beanutils@1.7.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.7.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-digester",
      "name" : "commons-digester",
      "version" : "1.8",
      "description" : "The Digester package lets you configure an XML->Java object mapping module which triggers certain actions called rules whenever a particular pattern of nested XML elements is recognized.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf89c593f0378e9509a06fce7030aeba"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc6a73fdbd1fa3f0944e8497c6c872fa21dca37e"
        },
        {
          "alg" : "SHA-256",
          "content" : "05662373044f3dff112567b7bb5dfa1174e91e074c0c727b4412788013f49d56"
        },
        {
          "alg" : "SHA-512",
          "content" : "138aaadde6b134eeb39574fde80f8eed1dee4a7049fccdd8c462c0a0dfab5419bafd259e77b99d85094b4e7c864673f07249c39c3b18aff87ef39b3663f537a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "9dcfb1988fb8de4fb7482ce419bd99ea780795403228cc51454e9dd7fec3cb3af889178fbc6b906ec6f991aa77124cb5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "40f4faa08d895e7aed56f62b5e793cb99c91819629ed1f6a82a8decfe12fd08077dfa6d61f7974bf1069a1684dcca273"
        },
        {
          "alg" : "SHA3-256",
          "content" : "473187f8a52324feaf965f6ea1a8d578c15e57b68f1336799ff432521ab2df27"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e7a95ea8e864301db31754797d164f37cbc53f61598fdfac9cfdce04f4538f56a10a638a193c60ee176f2cf24e9785c682ccde3b6c13562638b4d5a3a81a0389"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-digester/commons-digester@1.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jakarta.apache.org/commons/digester/"
        },
        {
          "type" : "distribution-intake",
          "url" : "file:///www/jakarta.apache.org/builds/jakarta-commons/digester/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/jakarta-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/jakarta/commons/proper/digester/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-digester/commons-digester@1.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-chain",
      "name" : "commons-chain",
      "version" : "1.1",
      "description" : "An implmentation of the GoF Chain of Responsibility pattern",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d4ce482153073855e7c6453dc3c725cb"
        },
        {
          "alg" : "SHA-1",
          "content" : "3038bd41dcdb2b63b8c6dcc8c15f0fdf3f389012"
        },
        {
          "alg" : "SHA-256",
          "content" : "e408f72da5ed4c5db6ae19e8c3b7ee36259c36c05f7a77f15509a014bfe7bcaa"
        },
        {
          "alg" : "SHA-512",
          "content" : "46c8e1a61064be662bfce7a802389f511f9dfeaf80e46864eff3b1d02cc65c54c83e4639c20ac33d428e1e55dfd62d4414c3568af68fcb57998849dbc61c8e2d"
        },
        {
          "alg" : "SHA-384",
          "content" : "7a213578b92bacae76b184074bc4f14ddddde9631c4ef4573d1c7632ac6b0fbfac242cd9d0beef0a8bcbad9f9bb6ef5f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3d700f78831911891b6ca9eb9a808e687917988a5dd78fe6542e09cac3e5609dca750c0b2a01ecceee8b9e64625eb92e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "19fd971a752093fe55c78694d4857863ff769b9d0ac7f0b864c7e4ba58c24d39"
        },
        {
          "alg" : "SHA3-512",
          "content" : "53ceae963459625f961d61ab09992b09733fda190b8d7f6d546cbb98b5398199291427e38754ca9bcf2782cf335f3e9668e333bbbb417c2eb4c02feca6ecccaa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-chain/commons-chain@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/eyebrowse/SummarizeList?listName=commons-dev@jakarta.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewcvs.cgi"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-chain/commons-chain@1.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.1",
      "description" : "Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6b62417e77b000a87de66ee3935edbf5"
        },
        {
          "alg" : "SHA-1",
          "content" : "ba24d5de831911b684c92cd289ed5ff826271824"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e8d01f172301b966f1f404aa6fc0bdbec478ae9197256ad95bfcad1ef927601"
        },
        {
          "alg" : "SHA-512",
          "content" : "5e8b069406c05148555760681417a9edabf40b0c807a286262bc449bd5ad976e3715c0a05ff941680f73f83962321ad0663cc8cd414537a1326658d00d5b6630"
        },
        {
          "alg" : "SHA-384",
          "content" : "2e5b81be573afeb4665b2c861674953816df9e2e3ff8426a358348f8301594e0b15f1f9e62229bc51a6541b4c547ca6f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bd42a1234bbfabe77bc51180696f6c795b016323cc2d916b82520e60b25a52ea5ecff3d105a0f6ac007197abef371d9e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "edb36a9bb6a9837d399789b30c7dbd1f342320d6409584001d32fe7c32d74ed4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9018c4ec1841c6e71c9c049abb1d30c36c4371b582d8763d7cbbcccd43b62efaef34947765adde2fd81d0378cbf201f119130a2857e54e8ee554289df7e37458"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/jakarta-commons-dev/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.1?type=jar"
    },
    {
      "group" : "dom4j",
      "name" : "dom4j",
      "version" : "1.1",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f1c39d0d2b2c6f5ffb0046841a34b5c9"
        },
        {
          "alg" : "SHA-1",
          "content" : "0690b3108a502c8f033ea87e7278aec309ffa668"
        },
        {
          "alg" : "SHA-256",
          "content" : "50bd5c21b5fbd27b8bbb5f8050544b53f49a4480fd347ce9c46d55c706015156"
        },
        {
          "alg" : "SHA-512",
          "content" : "26e6971e5015159671a0bc81b8d40236b116d417198d7d0282f7527e4d25946e0a859af0ca091e41e97bf57af6c53b7eb77d6e2eb66d24f81263642313e111bf"
        },
        {
          "alg" : "SHA-384",
          "content" : "264399890df6489b369bab85a53f3ec00b26742ac8335900412aa6c07071e2df795478a2437d24cc212cfaf70df792a7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a8844f0b6beedade4c9e248cac70ab62a42e48b02ec117274211e3a7d2e4c46d8e4ed21e1a41cceba795010a889f88db"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e5a9e986fc32c2b9f49df52a50fa774613939ba472f38dce2c8733cb483dffb6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "910699215447eefd789216661642bd6172cce2e59c3d138d9df008a7f8693f2454725121753f97b6af4c0e1160f0753b4412d13f11d1d769393e7c1aef91b2c4"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/dom4j/dom4j@1.1?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/dom4j/dom4j@1.1?type=jar"
    },
    {
      "group" : "oro",
      "name" : "oro",
      "version" : "2.0.8",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "42e940d5d2d822f4dc04c65053e630ab"
        },
        {
          "alg" : "SHA-1",
          "content" : "5592374f834645c4ae250f4c9fbb314c9369d698"
        },
        {
          "alg" : "SHA-256",
          "content" : "e00ccdad5df7eb43fdee44232ef64602bf63807c2d133a7be83ba09fd49af26e"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a98e493c4d771322b1331ec05ab0e363a83d8ac2af8018d96a44df2bf5bfc97d33ebe6f6f93e46ab10bf1536f0c29e9d9569318ed49bc18b4e96b1a8b476d37"
        },
        {
          "alg" : "SHA-384",
          "content" : "f542e92b7a86bcb20cc21f0c4b29778428944391344ca11df432f9ce36a96ce8e8f65da67e450e52c0e8ba441d2a7332"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e483eec12e463136ea4163a280dc17d62e48f5d49f0f0ad2ab672c4c5366b1f4e5fd460e880caaa4b39666106ac98ca1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e558c00adc56713dc57cebed64b966e3ca0d8f096056d8843fa8bb11c7c96017"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f6e02d2cd83014e4a4d5ca0f24b189ec944c3b1e306c5eb04fac7e148b47ad2432256ef6b05292cf6d34a31c72420637702cc0fff4b38edcfae21bc0ffda98aa"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/oro/oro@2.0.8?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/oro/oro@2.0.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.8.1",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "540b1256d887a6993ecbef23371a3302"
        },
        {
          "alg" : "SHA-1",
          "content" : "6505a72a097d9270f7a9e7bf42c4238283247755"
        },
        {
          "alg" : "SHA-256",
          "content" : "dac807f65b07698ff39b1b07bfef3d87ae3fd46d91bbf8a2bc02b2a831616f68"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb0fe98385496a565678a000c26a3245082abfbf879cc29a35112b4bf18c966697a7a63bb1fd2fae4a42512cd3de5a2e6dc9d1df4a4058332a6ddeae06cdf667"
        },
        {
          "alg" : "SHA-384",
          "content" : "72c6fd199936f06db886eba9dccd188e26afabf7b9e6744cea18f27e414abfe04d3d3f609f8505311a01f43e885bec1a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3b6eede7aaff2bbbf5133872b59e9c4932e60064951a68c219f128a8c3a2556c25c2c90a599b342ee3fdef25a745a474"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4e708ddf8ed0c6dbd8c6bba07e06425b5d263d899884b91bf11f86ec0d6f8463"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f43e89519e803e976f7b4d756d934be802ab36077cf2dc38dd9aa901eaf7104e58157859f45ccef7b38e072007a60f17270923e2ed7eabd41a4c776dee1458e1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-decoration-model",
      "version" : "1.11.1",
      "description" : "The Decoration Model handles the decoration descriptor for sites, also known as site.xml.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "927ed3e7c39b6fed77875ed385b63447"
        },
        {
          "alg" : "SHA-1",
          "content" : "1e10f4e9268b49edf40bca721eef07271bc91de5"
        },
        {
          "alg" : "SHA-256",
          "content" : "411fc167774f2e3573f280c57a278fbe7bae677ee596a8ad24bd6c6bb2c5bbce"
        },
        {
          "alg" : "SHA-512",
          "content" : "0fb497a4b5b57e2f6c08e479334cd76931feca66f07420ccf3ec79212405227edc4eb426a3f94418eaf3aa77e53952de614f7de3784f9604ebb439391eebfcf7"
        },
        {
          "alg" : "SHA-384",
          "content" : "d040436164726842d3331bb0c4fdc66a673029f3d97ac2687eb9c71203464ff94d40ad9d8d15df8bfa0948f2cf460292"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e75bd8ad928d7bd21cbf34c3b62b3cc408af612f159b87cdc6ef93075ca7c442961c9b8e7788e7a38e211a305e05d012"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3d4a2d32c6de7ba138540f8c89e155b53a377ddc0bfb7d12015956330765dab4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "41140f6a9b75d2c5cdc58dc63c4ca28f27009950f8fae8d3f7ba0b79bc5bf5270e02f12357bd06ba1395e2462eb1f324679d71d05a9110332cfd1bd58e9de5fc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-decoration-model@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia-sitetools/doxia-decoration-model/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/doxia-sitetools/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIASITETOOLS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia-sitetools/tree/doxia-sitetools-1.11.1/doxia-decoration-model"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-decoration-model@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.scm",
      "name" : "maven-scm-api",
      "version" : "2.1.0",
      "description" : "The SCM API provides mechanisms to manage all SCM tools.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b21bdd4ef8cbdf393e88004a252186d9"
        },
        {
          "alg" : "SHA-1",
          "content" : "cb5d90a50c67b2f833d5db0861027a3a5f2ece43"
        },
        {
          "alg" : "SHA-256",
          "content" : "8c352e583ab13c9b4519d80bec07beff0e2b5bb752b3a40883edb9af3f99133b"
        },
        {
          "alg" : "SHA-512",
          "content" : "5e9a24e0a4cd119a6a45ca7ae344589800fb1877bb4ee7b5da80762201d1c89d571cf9b409b8902077378337b25296701b1f8926dd7f8e0c01cd6d74a9ef8daa"
        },
        {
          "alg" : "SHA-384",
          "content" : "dff336dc6969642003b5d6fc11344fc67ca677984e8d5c0a28663d52c1c2ce3caf8a48f72cb0a374d70c987fc0868c0a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "39d768b171d37ff1ae29f2aee162255bde161b224ef6821bae17ec8131caebe569eec44b32991ef8cffff5952bf03129"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b8f894e351fd1bd98b7a4a0c5f9bcaecb9161af208eee749dadb7802372f365"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d83ef75d103244e610fe24739f3c274da6a25c45b20944dbbe02ee4053fe059153825b96aabdf0288ac23c90c23d36b879ffca6d876a7b5a7016e9db88dd03fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.scm/maven-scm-api@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/scm/maven-scm-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SCM"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-scm/tree/maven-scm-2.1.0/maven-scm-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.scm/maven-scm-api@2.1.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.scm",
      "name" : "maven-scm-manager-plexus",
      "version" : "2.1.0",
      "description" : "SCM Plexus component.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7154a5a2c1ac9ee749c5f426128bd718"
        },
        {
          "alg" : "SHA-1",
          "content" : "c1b0b68d378389285d74e2f7c593f7c8d8901aa7"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d305e863a41410f31c8723da8191cb8f42f4a41ad6e25f6f07d1faa9e9ffb33"
        },
        {
          "alg" : "SHA-512",
          "content" : "3c8201df747a8a6146fe3b1a2bdd51186c39a592fa0992c5816f2bd77a49ca71c1895fc5692a875d52adf842c47c78b5f8491b49616e27d760a7aa9a88e6c556"
        },
        {
          "alg" : "SHA-384",
          "content" : "33a59b925b4430715b247227c320d8c555c44f9353cfa1989bb479b91d81f463e6f51f6c923248b2ae35cf5ec028476e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "96afa5be8cb0f76dc8a72aff2c72fb153930496f2f8bac282dacd625d8522ac7551249aeeb02dcfe092733d06c80dbc6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "435c4f24ce71500ee25c0d87fdfffc3f537252bb9bc4fd1108ffa5edcb5e7aeb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3aef164057043a8981f94f6cd33759354b32b94fc783b3e756db21c7948f455aa50250814f9bef3559ba1cec92ed2bca824c5d72a7e620ea1c940fd1e52c55c3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.scm/maven-scm-manager-plexus@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/scm/maven-scm-managers/maven-scm-manager-plexus/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SCM"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-scm/tree/maven-scm-2.1.0/maven-scm-managers/maven-scm-manager-plexus"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.scm/maven-scm-manager-plexus@2.1.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.scm",
      "name" : "maven-scm-provider-gitexe",
      "version" : "2.1.0",
      "description" : "Executable implementation for SCM Git Provider.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d69905114056d8591621811df51453ee"
        },
        {
          "alg" : "SHA-1",
          "content" : "d4b9efbac6bf0b63e1333607618aea320c6a02ef"
        },
        {
          "alg" : "SHA-256",
          "content" : "8db59acd6e30c32094610be9703e44b2e1bf31ee844d03e4915443c4041be1fb"
        },
        {
          "alg" : "SHA-512",
          "content" : "b83e294f2aaeaa8f5ad5aaecf2953bcd346b8986d2ce028a2b50436ba66df5d7fb7bfbc018fa0881d6c5bb04f64502835ccab2f200154f6a83ad3844de73bee4"
        },
        {
          "alg" : "SHA-384",
          "content" : "5fc99f3614ce50400eaa9d6702856d308e38ea35ffef77bd0227e439248bc779af786cc3de647477ef426bb1bc53327c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e1e39e77b96ff1a7171293abbcd4c500a38f0d35e8c84990094c30feb78f75be8ad440cc705eae370be4450b992c5a53"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a527114002f99e10a6cd3c2ff5321e6bc69a8c4ac014565991eec240d4543aa8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cd074ca36341079cc7c921f100f0a18b6bc41885743574c344070b3b315a10475180811f7f0d3df40721c1059d859de627e391c5bd060c23c0aaff84b907576e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-gitexe@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/scm/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-gitexe/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SCM"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-scm/tree/maven-scm-2.1.0/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-gitexe"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-gitexe@2.1.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.16.1",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ed8191a5a217940140001b0acfed18d9"
        },
        {
          "alg" : "SHA-1",
          "content" : "377d592e740dc77124e0901291dbfaa6810a200e"
        },
        {
          "alg" : "SHA-256",
          "content" : "f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f"
        },
        {
          "alg" : "SHA-512",
          "content" : "97eab31b073c5c57c8bcfaa2fec7b481a15a9a1f9ed864dfdc63b57f062b230557caa734c3133aca1165facb588c58db0185c07832241d70159e87a4bcf48008"
        },
        {
          "alg" : "SHA-384",
          "content" : "bd78e2eb3d005046d1329557d3a77529e98384d4d87940374eef432d73d5a06ef20fb7b0c44389de64496fe134dcf199"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f9acc2f04f076328d17e2d0615da4367470b45b15f828008d8df57033401ae6b3b83b21cf9bc1745ff3cfe5a102bc48e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5d4bbe43356c92e3970b69892b44a10cc736ef8cb1bedfc753cc8df050520161"
        },
        {
          "alg" : "SHA3-512",
          "content" : "29440ccf2551b383c7e6cbdf78ef7784a421322e418da1be3fcd3251c8a826ffd5c6d1bea32b9c80e74744c035cc9cd8483e629e407110ff3133a05cb34bef93"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.16.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.16.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.11.0",
      "description" : "Apache Commons Text is a library focused on algorithms working on strings.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ebfec4f77cc595c518d655f7e68346be"
        },
        {
          "alg" : "SHA-1",
          "content" : "2bb044b7717ec2eccaf9ea7769c1509054b50e9a"
        },
        {
          "alg" : "SHA-256",
          "content" : "2acf30a070b19163d5a480eae411a281341e870020e3534c6d5d4c8472739e30"
        },
        {
          "alg" : "SHA-512",
          "content" : "486fdff6253c0e837fd838f75f1737176987bd12192c955d98a4aebf6d8e1b14413b5269d53b150ce1536a70f59367ae54c1371a60f53b6f0ed5bba1b9eb6ee4"
        },
        {
          "alg" : "SHA-384",
          "content" : "65bfca9b4f21565689cadfa15bb565ca3f9823316303bfc57a75f4daa5a2a35daf70f373fd08e9692efac2fb013d90b7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b316d8f7706795520f25d0258b3d42663cea6059dfed3470e50e24892594cbb9a034f5b1677c09fdf85a454430690240"
        },
        {
          "alg" : "SHA3-256",
          "content" : "52c61d3d160045f0add1fa54817670ab752b649d0801fc0d84fe668f6b8f73df"
        },
        {
          "alg" : "SHA3-512",
          "content" : "865302dbc8ca36be2b8d4766d3e677e0e2f7dc80588415379ae6f5af1b143a6e5f9c361834311bb54bfb76368b7818f37ffd31e248a8b4d273200187f74eeb84"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.11.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.scm",
      "name" : "maven-scm-provider-git-commons",
      "version" : "2.1.0",
      "description" : "Common library for SCM Git Provider.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f3c8dc5ad1a0a102e8f95bc017f2a39a"
        },
        {
          "alg" : "SHA-1",
          "content" : "31b07f5a57f3d9bb8c24f1c7d32f185906f5f572"
        },
        {
          "alg" : "SHA-256",
          "content" : "b27aeb8d54b1ac62381bd26b8d53ac7d2569c7fe52851e2d591bc8e64d4a789a"
        },
        {
          "alg" : "SHA-512",
          "content" : "37558056b57ff60e181d8ec4e8ab79019584498267ed932d07d689993a68459327db992b67aefac179ec524df45cadd2ef82b79ac195947a06b33d0205630cb6"
        },
        {
          "alg" : "SHA-384",
          "content" : "98f289cee033b504cf6f1797e823be5648237ce1e4e27f6ec37bba09f8c74042febed4c30481cefddcaeda15a8e73e0d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "68ee562cd560be60a1139f59f34c78272e01b394bff5ec0d408d65ed4106d744daec8a74fb33456c99e750ab269c6a11"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a011935bdcfb8dc0a2c784ddd3cc594300f6e654f42149812c1e7f7cd8a4a6a7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f86f482e7b7a203652475ab9dcdff3b671d67c94324632baee650941dbb0b8c08ac9298d65ba1e51474542a0e67bd3bbd3a439b222e0054e14ae708a92dffd24"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-git-commons@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/scm/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-git-commons/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SCM"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-scm/tree/maven-scm-2.1.0/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-git-commons"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-git-commons@2.1.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.scm",
      "name" : "maven-scm-provider-hg",
      "version" : "2.1.0",
      "description" : "SCM Provider implementation for Mercurial Hg (http://www.selenic.com/mercurial/wiki/).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d34e343bcdd1d510e896400094c4766b"
        },
        {
          "alg" : "SHA-1",
          "content" : "df4d4dcee1309ede63d541709d9f767a54a78b4a"
        },
        {
          "alg" : "SHA-256",
          "content" : "9f5bfa1fd883c005da542789fa47b12746264263a90994592b213a5fe7c4ad28"
        },
        {
          "alg" : "SHA-512",
          "content" : "d4b90c86226a73a5a4fe4a047187315fc53aec4c62a82ff735fe15005565a7d83ecc61dac796f1585f7b813fb839dc01e3f5940bc043fd5c3512eb104c1a5122"
        },
        {
          "alg" : "SHA-384",
          "content" : "14342b81442f9c87d69dd198bac1a40a473841bc005d46c2bccabef6449bf6948fd0b5ec25cec78467ff6f6ac21a779f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bea460cad54c0d54ae8af7d71b7ee4d00426ea48f8d375a671817e022743f3eaff3bcccf4b30bd9a3c417177dd2daab0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "34a030b256b32ad7cc63b1e885d9e06f9195f988fceaca66069a7990ea598d45"
        },
        {
          "alg" : "SHA3-512",
          "content" : "772f3a81bdf5b50f4477a9340888b8fa0dfa04b62125785a24eec75b78f21e690d7352cbcb8a4b0fa7d454fe679fa9182714283c2e3eec96003c73eae88d6ac4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-hg@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/scm/maven-scm-providers/maven-scm-provider-hg/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SCM"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-scm/tree/maven-scm-2.1.0/maven-scm-providers/maven-scm-provider-hg"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-hg@2.1.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.scm",
      "name" : "maven-scm-provider-local",
      "version" : "2.1.0",
      "description" : "SCM Provider implementation for Local.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "629bb0874546b8bc9a355bcc06f89345"
        },
        {
          "alg" : "SHA-1",
          "content" : "e61465c20ed436a3b7cce811cf15281b61aaf7d0"
        },
        {
          "alg" : "SHA-256",
          "content" : "3e06c8025dc50880f9e5075fc1e2a6c9c2164e4a957fbd1980eceba5633bc1c2"
        },
        {
          "alg" : "SHA-512",
          "content" : "277bbae5beda1a800f81143df321d04e0d99581c13acfff6856a78555685195b4195a1122dc82d2d745857e832e1ab1c53b86ec23ff7b6c2414f3f4d1b4e9fad"
        },
        {
          "alg" : "SHA-384",
          "content" : "1bcbd8cb4369df7e0c1397473e4b2ca400495e63bd4e208632137a8f38e8e2e3bcf3227a253b5c1696f91a567c84086e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fdff71d66b0b87e620e689299b8ae0071b11d19e8f22d466ab7e6cf25f36d33b2d65e1f1a8ba88d1c75ea458d71bec52"
        },
        {
          "alg" : "SHA3-256",
          "content" : "11a56dfc8a4cf646a78a4ab442a7b77323ecf31e64182cae7a122338d420401c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "287b6f30aeba106553a8a454588df55f9b647dc50c70860de610b9c38fcc10c3ce9344f8782bdd0a607a8bd06c8fe1a7f085372f2499c88054a518dd26ed4ecc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-local@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/scm/maven-scm-providers/maven-scm-provider-local/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SCM"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-scm/tree/maven-scm-2.1.0/maven-scm-providers/maven-scm-provider-local"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-local@2.1.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.scm",
      "name" : "maven-scm-provider-svnexe",
      "version" : "2.1.0",
      "description" : "Executable library for SCM SVN Provider.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ab02e005e722ad5f740889b58200bf09"
        },
        {
          "alg" : "SHA-1",
          "content" : "4cc3bec8b81d34baaefa985000386c68834494b0"
        },
        {
          "alg" : "SHA-256",
          "content" : "c146afa91b7866e116c9c2800fa5a72fcd922c8fc1d54caadcb49adcc922e26d"
        },
        {
          "alg" : "SHA-512",
          "content" : "46d596c9ec78e6bb1141c0b847c799774520205d64bb5e3b82720c4d58f54edd43d390d1f07334e55d7b697744fe1a7b8d82be1a2c154e63c7584d94aaa18e9a"
        },
        {
          "alg" : "SHA-384",
          "content" : "c733b436f25a95a7e1e4732b63d222f00477303865c70961e94c6d870dca2623950933d3cc9791a30565bf40bb14bc6c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0b2b1ca5542184452c58ebe9b8054b58cfe80ca98b71a5a0e548f403e43dec64a68df013900beeab195b2927af217084"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9ee32de4f3af5cb51322868615141216585bdade91fe1157ed4c8dec40209734"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0020c09af9bdb33c5b67e5ce22d7d606de59b33f36321df7ff72edc8f20b1bc462f40951b7a60e664ae105ead8c8030c98e50b3c3c5887377ef95005b6db28e6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-svnexe@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/scm/maven-scm-providers/maven-scm-providers-svn/maven-scm-provider-svnexe/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SCM"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-scm/tree/maven-scm-2.1.0/maven-scm-providers/maven-scm-providers-svn/maven-scm-provider-svnexe"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-svnexe@2.1.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.scm",
      "name" : "maven-scm-provider-svn-commons",
      "version" : "2.1.0",
      "description" : "Common library for SCM SVN Provider. Includes the svn-settings.xml configuration model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "753b8dde536a3146e3b7c799a38266c2"
        },
        {
          "alg" : "SHA-1",
          "content" : "15302868a3e8186a4eac0f19d17a147c85d7b52b"
        },
        {
          "alg" : "SHA-256",
          "content" : "6bd0152d1bea9a7f299de0d787fce767c828f9534db9671965a1eab0ada7fd7d"
        },
        {
          "alg" : "SHA-512",
          "content" : "516e17b64d9d7124cafb810431f307bfc314560717a97652fa1548ac20a09e0997d4f28c54c515b98920e324648c714765302d0e5b3b6928f09f5381fd25e8a4"
        },
        {
          "alg" : "SHA-384",
          "content" : "a40cbbea8523454329984fa5bbb3ce768b53fe963fe899725795385adf19ecbf608878907f3f2acda5c448ba77f5d5f9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "84af46b8c35edf0736f7c38353201ce07f9fbda66186048f0a4797266fdcae34d28c3c4a8391378d64bcd98f1010694b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "efe4d90cecd7fe9a1cba647c1de29c3f521b106da493e84f3fbd1164faf33fcb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "21c7caa892b5d7a39d5632998fd87c4ae56ce4187a523e5ab21a20b7e4af6ad206aac97595544e5b45c873d93c6333c8d1d88ac33467951f3b040cb2362e9e65"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-svn-commons@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/scm/maven-scm-providers/maven-scm-providers-svn/maven-scm-provider-svn-commons/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SCM"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-scm/tree/maven-scm-2.1.0/maven-scm-providers/maven-scm-providers-svn/maven-scm-provider-svn-commons"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-svn-commons@2.1.0?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-utils",
      "version" : "4.0.1",
      "description" : "A collection of various utility classes to ease working with strings, files, command lines and more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0fa4c6aabfa676c4a1a1bf0c7473f684"
        },
        {
          "alg" : "SHA-1",
          "content" : "2162c639aa9b081ef2a0be9d41643513e284bf99"
        },
        {
          "alg" : "SHA-256",
          "content" : "96b9cc44439191d2d0635974e2d44e768736b4fb2abcb65f94cd95e41912fa8b"
        },
        {
          "alg" : "SHA-512",
          "content" : "ecf609d495c9e7728476ca35d4290c94d862c393afc6a98090571f4047d4184d1c5231fd6af4bc68fe7d832eca26171f86af5ec590d6f2f70740b720a6f636b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "713234f501e1911062a1e4272e10ab355c7dfb8f67ee1068dd35e71f6c1bd97becf4cf41a242877f8272db4028408e3c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "615f7639ab790d564b7b96ba58bc30fe38e65348ab6f1d5fa3cc6e96924badea397fb6ceeef1ba3f4bfe738d9c7d9797"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2ea14f0fa9b179ee6a286b3973bcb11ab30f419aa0f4bc02bfaaaa65ac984de2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e21bf0de988be9861c589574c742b5f94558baf69e965d103e9b8bdb24bbe3a805bff45c5358f515749b5e9061af2ab4b99f6328babc3c396fc04f1cfd4b5fcc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-utils/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-utils/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-utils/tree/plexus-utils-4.0.1/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.plexus",
      "version" : "0.9.0.M3",
      "description" : "Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "964e7bc9837b270566f18b87af65f5d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "b493c7abcc6e04fa0a6a20d489a3db0395c76f70"
        },
        {
          "alg" : "SHA-256",
          "content" : "c99674d3773e26154885661711f0b6d63aa5008f5cc99227a236756d4ad9de5e"
        },
        {
          "alg" : "SHA-512",
          "content" : "68c5df01ad522917d954b62cb3b11376b3446920e8d5cb35737de508e6acd91a36b34144933f427bbe1d29dca9097ba9dd2431c713fe18069f271a80b519f051"
        },
        {
          "alg" : "SHA-384",
          "content" : "bd39a6cc9c18c62e64393da231b61efbf5bdeb8c0306e455bbc6e33f4b614e14023ccfbec83c943994da6684ab453092"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aa3ca83152de61ee92ba94f655190b61aa25520db903489656485a56aa9314a453a91284c0fb377dffb8160580a610c2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "434081d9dbbd4ffedafa88010d4db9a699fd2bc736e8b12b3bf3cede21f30aa9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "86e4c864bdfcbcb7d58ac08d80b2c1406cadf10424c92889d1cb181f924af19b28d53210f77cb2b0515faa7ac6fff2dacd25ae1b62c419a798bdfd2a9f3108ae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/sisu/job/sisu.inject/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/sisu.inject/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/sisu.inject/org.eclipse.sisu.plexus"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-xml",
      "version" : "3.0.1",
      "description" : "A collection of various utility classes to ease working with XML in Maven 3.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cd868918ebc742350840124ea4422ab0"
        },
        {
          "alg" : "SHA-1",
          "content" : "b0e73c21402f03c2765674b8dede21673b3288cf"
        },
        {
          "alg" : "SHA-256",
          "content" : "c1a510a87a62bd2d74ac1472dd31c3f9e9b0b8b8568f37d77c0f135415bebd05"
        },
        {
          "alg" : "SHA-512",
          "content" : "422f2ccdda00dd8c90c2f5b5f4ad6f0410fb6f2bcb3429d196f7f39c96a44a6709c70539648214d5b7686a70240a6c16c7b985b943f8002d318f90896230a259"
        },
        {
          "alg" : "SHA-384",
          "content" : "da397eb08963f4366d2119af1d993efa00fee25e50b09454422805ce83e662507e2afc7f6b4171a9c5da111d7ada3365"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d21cc3459871a9f6e9a893df8f8bcb85a4f20cee96e821098e2a0f2655b20c9f01f1139e7dc4a80444d627d9854c56f6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bdf4b087b5d0ed2473c5ff7524b7c6dff791738715aa5499f14ed11729b3690b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fedd50a88c651e5a5da1639d5c507634bd50cb9103acfdec9e0db7827656855b7d1ee19ec7318de91996e86dc5e9c38f1b507433498c75ae327b865534999a9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-xml/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-xml/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-xml/tree/plexus-xml-3.0.1/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "javax.xml.bind",
      "name" : "jaxb-api",
      "version" : "2.3.1",
      "description" : "JAXB (JSR 222) API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bcf270d320f645ad19f5edb60091e87f"
        },
        {
          "alg" : "SHA-1",
          "content" : "8531ad5ac454cc2deb9d4d32c40c4d7451939b5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "88b955a0df57880a26a74708bc34f74dcaf8ebf4e78843a28b50eae945732b06"
        },
        {
          "alg" : "SHA-512",
          "content" : "93a47b245ab830d664a48c9d14e86198a38809ce94f72ca66b3d68746ae1d7b902f6fef2d1ac1a92c01701549ae80a07db69bd822ffd831a95d8dbffad435790"
        },
        {
          "alg" : "SHA-384",
          "content" : "1eb2d7f307bda8cbf6a4ab5b2b97d830d33ca48ad94eb4bb1cbce860c54fca96285dbcb1ce9b164dbf37d4475f9a198f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8df7409d3f60888f3a80f4d49af66c2cab6dc9f00e79c87c17703faad19d8ba6c8fc96ad897434170ce2686952921cdd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "41338683257d5ecead579ccc137bdef7bc4fea685d039a3d894e1d6730425e1d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3371a96171f69876b0e6b8354674d252680e6d52c509a2645b1a0b0d7f9e176274bde6c89edb40986264733ffb6794cb7b2cba417666b1e82075bd4fd51197b6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/javaee/jaxb-spec/jaxb-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/javaee/jaxb-spec/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/jaxb-spec.git/jaxb-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"
    },
    {
      "publisher" : "Oracle",
      "group" : "javax.activation",
      "name" : "javax.activation-api",
      "version" : "1.2.0",
      "description" : "JavaBeans Activation Framework API jar",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5e50e56bcf4a3ef3bc758f69f7643c3b"
        },
        {
          "alg" : "SHA-1",
          "content" : "85262acf3ca9816f9537ca47d5adeabaead7cb16"
        },
        {
          "alg" : "SHA-256",
          "content" : "43fdef0b5b6ceb31b0424b208b930c74ab58fac2ceeb7b3f6fd3aeb8b5ca4393"
        },
        {
          "alg" : "SHA-512",
          "content" : "8ee0db43ae402f0079a836ef2bff5d15160e3ff9d585c3283f4cf474be4edd2fcc8714d8f032efd72cae77ec5f6d304fc24fa094d9cdba5cf72966cc964af6c9"
        },
        {
          "alg" : "SHA-384",
          "content" : "d38a6af7ed00f13de8b46d49b9592af9b67adf3df47ddae5e4672f989f3f39101d446a77d1c11319acf8ff0a5b4feedf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cfee76de5976d5994758a06113368092f09b0729d753b99969d6a5ec32919428bd7c270c98cbbc682ff8ebcf2b93fd8d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aff48d0f28d8a99690c5a84c3fffdb3775452d5387e5698f4c9028c92a3b4888"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0507ece74b3147de60a830071bd434569c82e03f414a2b7f0d8a225dda36720d2e2194799cdc04def1909fdec21059b67c518bb9162f7f605764d542194e721d"
        }
      ],
      "licenses" : [
        {
          "expression" : "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl" : "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://java.net/all/javax.activation-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/javaee/activation/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/activation/javax.activation-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.maven.plugins/maven-changelog-plugin@3.0.0-M1?type=maven-plugin",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-plugin-api@3.9.9?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.9.9?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.9?type=jar",
        "pkg:maven/org.apache.maven/maven-core@3.9.9?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.9.9?type=jar",
        "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.13.1?type=jar",
        "pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.1.1?type=jar",
        "pkg:maven/org.apache.maven.reporting/maven-reporting-impl@3.1.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-site-renderer@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-decoration-model@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-api@2.1.0?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-manager-plexus@2.1.0?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-provider-gitexe@2.1.0?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-provider-hg@2.1.0?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-provider-local@2.1.0?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-provider-svnexe@2.1.0?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-provider-svn-commons@2.1.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.9.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.9.9?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.9?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model@3.9.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-artifact@3.9.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-core@3.9.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.9.9?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.9.9?type=jar",
        "pkg:maven/org.apache.maven/maven-settings-builder@3.9.9?type=jar",
        "pkg:maven/org.apache.maven/maven-builder-support@3.9.9?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.9?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.9?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.9.9?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.9.9?type=jar",
        "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.9?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.22?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.22?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.22?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.22?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar",
        "pkg:maven/com.google.inject/guice@5.1.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.2.1-jre?type=jar",
        "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings@3.9.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.9.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-builder-support@3.9.9?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.9.9?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-builder-support@3.9.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.9.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.9.9?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.9?type=jar",
        "pkg:maven/org.apache.maven/maven-builder-support@3.9.9?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.9.9?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.9.9?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.9?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.22?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.22?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.22?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.22?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.22?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.22?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.22?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.22?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.22?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.22?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.22?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.22?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.22?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.22?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.22?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.inject/guice@5.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@33.2.1-jre?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.13.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.1.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.doxia/doxia-logging-api@1.11.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-logging-api@1.11.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.reporting/maven-reporting-impl@3.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.1.1?type=jar",
        "pkg:maven/org.apache.maven/maven-core@3.9.9?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.9.9?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-decoration-model@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-core@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-site-renderer@1.11.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-decoration-model@1.11.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-core@1.11.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-logging-api@1.11.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.11.0?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.11.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.11?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.11?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-site-renderer@1.11.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-artifact@3.9.9?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-core@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-logging-api@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-decoration-model@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-skin-model@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@1.11.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-velocity@1.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.apache.velocity/velocity@1.7?type=jar",
        "pkg:maven/org.apache.velocity/velocity-tools@2.0?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-skin-model@1.11.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml@1.11.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-core@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@1.11.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-core@1.11.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-velocity@1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/org.apache.velocity/velocity@1.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.velocity/velocity@1.7?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-lang/commons-lang@2.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.velocity/velocity-tools@2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-beanutils/commons-beanutils@1.7.0?type=jar",
        "pkg:maven/commons-digester/commons-digester@1.8?type=jar",
        "pkg:maven/commons-chain/commons-chain@1.1?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1?type=jar",
        "pkg:maven/dom4j/dom4j@1.1?type=jar",
        "pkg:maven/oro/oro@2.0.8?type=jar",
        "pkg:maven/org.apache.velocity/velocity@1.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.7.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-digester/commons-digester@1.8?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-beanutils/commons-beanutils@1.7.0?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-chain/commons-chain@1.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-beanutils/commons-beanutils@1.7.0?type=jar",
        "pkg:maven/commons-digester/commons-digester@1.8?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/dom4j/dom4j@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/oro/oro@2.0.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.scm/maven-scm-api@2.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.scm/maven-scm-manager-plexus@2.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-api@2.1.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-gitexe@2.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-io/commons-io@2.16.1?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.11.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-provider-git-commons@2.1.0?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-api@2.1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.16.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-git-commons@2.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-api@2.1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-hg@2.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-api@2.1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-local@2.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-api@2.1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-svnexe@2.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-provider-svn-commons@2.1.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-api@2.1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-svn-commons@2.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-api@2.1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "dependsOn" : [ ]
    }
  ]
}