{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:5f94f201-fa01-342f-8995-6ccab8bdc88b",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.11",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "a70e8b649ab4a2bb7922d360173c8237"
          },
          {
            "alg" : "SHA-1",
            "content" : "4c3c0878c15561639076e5be7a48ffcd6111c5ee"
          },
          {
            "alg" : "SHA-256",
            "content" : "70997d52dbffd4e797c467b2062c6ba9b8b5a7380ff2884779f2743b6172ebb5"
          },
          {
            "alg" : "SHA-512",
            "content" : "bc1ce91190c642f68fd3571939d7668def3b879ec8e5a87a213a9710a106e0290f60f9e0414593d19cca958c4fcb5d4450bd2793bcd609948419c8a2a6a7f5c8"
          },
          {
            "alg" : "SHA-384",
            "content" : "3c8421bdafd1754fb424f16dccc83bfe0827648c1cadfffc98bdf1c7da65475dfe48d2f4b16d233bb8819e155ba6a4f3"
          },
          {
            "alg" : "SHA3-384",
            "content" : "ad88cf6a0e0a5d51df49a4dab5530a28de9df7eec8460c045dff3e1f9316b82a244a125d52b937fe9d4ee72e44f5d01a"
          },
          {
            "alg" : "SHA3-256",
            "content" : "b4d9c3ef07c34517fd9f33178ba95ffc9618eb84a3671e71b0c82991ec3717e5"
          },
          {
            "alg" : "SHA3-512",
            "content" : "935b43aba8999dc7d95d93288a251c97b6b32852841b7bef31516c27c8d65c8de7f8411f1829f765ee760f25930c766db6a49df68e5994e18721c0a71f606f1e"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-policy",
      "version" : "3.0.3",
      "description" : "Apache WSS4J parent pom",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-policy@3.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-policy/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-policy"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-policy@3.0.3?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.neethi",
      "name" : "neethi",
      "version" : "3.2.0",
      "description" : "Apache Neethi provides general framework for the programmers to use WS Policy. It is compliant with latest WS Policy specification which was published in March 2006. This framework is specifically written to enable the Apache Web services stack to use WS Policy as a way of expressing it's requirements and capabilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e6040db3584bfdbadd0515dbdba6b25a"
        },
        {
          "alg" : "SHA-1",
          "content" : "4e409cf251f420f65130d458256f7be1ad68f055"
        },
        {
          "alg" : "SHA-256",
          "content" : "6ed3c2cd20444972936c1f9b623862d1415592290ce1eb79e1cf1008f999aa3b"
        },
        {
          "alg" : "SHA-512",
          "content" : "eef049866bfec3f543b8cbd5b673516fdb868fa45d2884a3cae3d65293ce179f32135c06d15ecbc039f6738fb9919c5aa2039df75df729e6081988f3570ad032"
        },
        {
          "alg" : "SHA-384",
          "content" : "2eba46d946e12b0898d4578248a606ab767a75d213d61951ab340e66e4c424650eb34356e4bd16e3f89c030a4edc06ea"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6820e996bd39ba01125dea34d002820ff0d9fbb4fbc3613f980eb9954aa355f744aa2a3342f6358f05bbfb145e9dd4a9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2bdd0c710cedb0d1445e56508b67d3a882e6f68f5ad2b36d8dc76af7118c5e0a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a67a7fb6c99d8933d9eef3af6498ed52f1f1fe9a9c937fa48d653d4ae1e431363e41ee7ee11a836ed152711b9b2b87aebf7c6a5cff2fc2fc9ab6dd99512d44e6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.neethi/neethi@3.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/neethi/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/NEETHI"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ws-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-neethi.git;a=summary"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.neethi/neethi@3.2.0?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-policy@3.0.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.neethi/neethi@3.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.neethi/neethi@3.2.0?type=jar",
      "dependsOn" : [ ]
    }
  ]
}