{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:b9af3269-4267-32a9-b04f-3f95f1848b01",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2026-04-07T05:41:24Z",
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.docx4j/docx4j-core@11.5.12?type=jar",
      "group" : "org.docx4j",
      "name" : "docx4j-core",
      "version" : "11.5.12",
      "description" : "docx4j is a library which helps you to work with the Office Open XML file format as used in docx documents, pptx presentations, and xlsx spreadsheets.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.docx4j/docx4j-core@11.5.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.docx4java.org/docx4j-core/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/plutext/docx4j/docx4j-core"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.12?type=jar",
      "group" : "org.docx4j",
      "name" : "docx4j-openxml-objects",
      "version" : "11.5.12",
      "description" : "Our JAXB representation of OpenXML, except for pml and sml (handled separately)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f2bb09ddea05431d52c99bb64dc37dd8"
        },
        {
          "alg" : "SHA-1",
          "content" : "1486ccd85955635770c57a155710628a1fa53848"
        },
        {
          "alg" : "SHA-256",
          "content" : "e480d8dd0a03ed4e8d23ee574014500bb80787892ef7a070bb88a0a5e04c8ffa"
        },
        {
          "alg" : "SHA-512",
          "content" : "3869dd4e4b9ea63e7e1bf57c0de247f5c7515f8a1093dd30b384b21d67887b3c52f5f693626690138fffac68480a45c1f949d2275763fe98e78f5539076979d5"
        },
        {
          "alg" : "SHA-384",
          "content" : "9cd8d167ca3473badfca6e6d9fb9ab9aaf1a8ed71dc14cc56924639d6fd68ac81daf04cb9c4ea5fba73b920bdeca21b5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5ff2c9fe7e9b85d2aeeb697fe9cbec784d728bc3d304ef1796f089b1b677100b97f59cdd8ac9384aa9522c5257bd57a3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bbdd3ba1286167788021fa6465e747ffbb225d5c854f7980e93508cd98f6b63a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a8b298d0b42d23afca6565b29291fe6ef045425e81e860b68ee865e044ec28e51e8bfd1a3841ad8a48c779d7c476f0ded1a624a27e935bfaa4e1e23635f87a3f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.docx4java.org/docx4j-openxml-objects/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/plutext/docx4j/docx4j-openxml-objects"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.docx4j/docx4j-openxml-objects-pml@11.5.12?type=jar",
      "group" : "org.docx4j",
      "name" : "docx4j-openxml-objects-pml",
      "version" : "11.5.12",
      "description" : "Our JAXB representation of OpenXML Presentation Markup Language (pml)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8f6819018c50239afefa5fbf8d1bb9d2"
        },
        {
          "alg" : "SHA-1",
          "content" : "0b4c0a0ff8865a2e2f4429bd4fc54d74d475e328"
        },
        {
          "alg" : "SHA-256",
          "content" : "f1bcb3a4843bc81ae39ff268276caa1a3f92d4e2cac81c0a851700414a43a51c"
        },
        {
          "alg" : "SHA-512",
          "content" : "8b4b7ded9a5270de394da3bfc4505f6f6f1a89dc3b1c7d7b871bcad75a51afc82838f47178f288047945baa7e664a74cedc6ec5b30f7657bb0551124c86993a8"
        },
        {
          "alg" : "SHA-384",
          "content" : "4c110e1deb323a4c2bd06ce3ab831332a9b57b7147ddf04412b4eb6b28ff1958c0b6744507a5d30b77f25bd952522e99"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6dc39050b90db662294d3720faa249c0e97d3a5e040b93dc99641a8e49a136e3cca7069b2926f8dddd1515807402e9c1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d76f1cb1dcae27fe94848b94cf6dfd0bbad29420afc58007fa9fdd2ae9e50baa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "93636d303c68b94d03fdd57cd27fe0a779d9d706ae79909c2540d10ab1071eee08b82455e3ef1f20aed174c63ccc2e73f6df33ed02700d0313e4910947abf5f5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.docx4j/docx4j-openxml-objects-pml@11.5.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.docx4java.org/docx4j-openxml-objects-pml/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/plutext/docx4j/docx4j-openxml-objects-pml"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.docx4j/docx4j-openxml-objects-sml@11.5.12?type=jar",
      "group" : "org.docx4j",
      "name" : "docx4j-openxml-objects-sml",
      "version" : "11.5.12",
      "description" : "Our JAXB representation of OpenXML Spreadsheet Markup Language (sml)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d35a1571e0d72c226614b5b4158e5380"
        },
        {
          "alg" : "SHA-1",
          "content" : "12b75104e6e352478ad8d2f9ba3a08c49418448d"
        },
        {
          "alg" : "SHA-256",
          "content" : "239f2c2dbc19e28420759066b2fa4dd46e8fa6f181e82ed0acfa21f059e5e4c1"
        },
        {
          "alg" : "SHA-512",
          "content" : "8954e89fdcadc32cb062e10727778081eb005ef2de08f3ab92a33b55b718b70beb1b62905921cf145f7858d97a85fd983fed06688fb81a7ed1e8ca5321db1f67"
        },
        {
          "alg" : "SHA-384",
          "content" : "b752ce4f24aed8bfa0a25b75bd9c739533f9a786c084a2065cb35989d21ce3abb02b77e3cbcfbbcda7d570db1a7be062"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5f210e71c36428b73d82f2a86a987e312f339ca8515f8e31860bc494a897d3f07ab0907184f7a8c12c7f3db18ea876e7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bd9d82dbf408abb9de81e052848d98551ff9c32802d135ce11692e068be0b0c5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d19de5d8ad01eeeff4842c8575344091f48d4e105c064cad9c363a77293a20afb2df82124facb6aa51fa47a9d16dbff33433c87776130f83dedf360c075fc97c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.docx4j/docx4j-openxml-objects-sml@11.5.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.docx4java.org/docx4j-openxml-objects-sml/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/plutext/docx4j/docx4j-openxml-objects-sml"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.plutext/jaxb-svg11@11.4.0?type=jar",
      "group" : "org.plutext",
      "name" : "jaxb-svg11",
      "version" : "11.4.0",
      "description" : "JAXB classes modelling SVG 1.1",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f48497d2e66ef552a508709b19f3edb9"
        },
        {
          "alg" : "SHA-1",
          "content" : "1213219395e7b6c3ab6affdc7b343ded7a044140"
        },
        {
          "alg" : "SHA-256",
          "content" : "1ee69b8ee0a3d0d931b71b9f5475724b0cce1a181070890ed1b53fc09199a3ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "b24fd189a7a77c4614affe28bafea17a18c199bafe86a98d0e26578e3c251de88bdc708cbcce1c93ca09f1169ac6d3eccd4189f4ae2b86160cb01201ee3833e4"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e13bfe6003022a6d21af6d01480d2dd88478c85681068d2592d31312a199ff62ff02abd2a2b8ca578af83a495dc860f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1a5ced7ceea823d5bb6a567e97c92d28ce8d7940f66b41c02115d81d3c893551ccad0dce9764bf593f36f13343cce7fa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "eed46c51ea1667b079edb91e48f03eeee4bf997162c583f2d705a9c947f826d2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "179174e72afae5199b6da251ee0a8e4b96dda0bfc263428f5a87a7774e74a87bde40b6b8d4f6c1bb6f6d275ee16b4471c3298ad9ded7b1240e26be95dc9ca7f7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.plutext/jaxb-svg11@11.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/plutext/JAXB-classes-for-SVG"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/jaxb-svg11"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.engio/mbassador@1.3.2?type=jar",
      "group" : "net.engio",
      "name" : "mbassador",
      "version" : "1.3.2",
      "description" : "Mbassador is a fast and flexible event bus system following the publish subscribe pattern. It is designed for ease of use and aims to be feature rich and extensible while preserving resource efficiency and performance. It provides non-blocking iterators and minimal write contention with low memory footprint. Some features: declarative handler definition via annotations, sync and/or async event delivery, weak or strong references, configurable event filters,",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6844d9220e623fa491776e38a61f29a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "4ebb2c5f853bf8a5f87147b186a9758d2e2ec0af"
        },
        {
          "alg" : "SHA-256",
          "content" : "469e2e9c68271eadaff12483bbb1abc640ea9973af7fa0519250e04f503aca67"
        },
        {
          "alg" : "SHA-512",
          "content" : "88afd389682e1101d2ee031809065e96e4ae8a44ebb638c320322013310e4b201ee91057cd05d171c3fa147a9aff8c10ab536d1c9b664e99d119e53ef8031ce7"
        },
        {
          "alg" : "SHA-384",
          "content" : "d59239342c7764f98a8f79a2708416c3ad988a7c560c39d63882b8e9999687b7cdf4d779a35e561e05b7ea0fd8ed9f9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "76e5086dbc14a5bd435193edac66dc79326d5e07e9c1096efee06e8c5ebfe0f1f687d004e6fed6d843f62d300c2421e8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3022080e8729165f17c813385e5fc65f4bae5e4155c938329f7c474c574a5474"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fc8cf59cd0a39cbfe78b992e3b58919834095906f338b248b45fb71752215383491bc96dfa5c513dbcce6ab6ed796512db66920b07bdd1521c21352688c9d9b7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/net.engio/mbassador@1.3.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/bennidi/mbassador"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jcl-over-slf4j",
      "version" : "2.0.17",
      "description" : "JCL 1.2 implemented over SLF4J",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4fcd46ca51e55b9fd9b0db34474927e0"
        },
        {
          "alg" : "SHA-1",
          "content" : "76ea503eb688f06556a9ba69995d7eab63e34531"
        },
        {
          "alg" : "SHA-256",
          "content" : "affd06771589ebfe454bb11315a4f466ecaa135b95f3e7939534cf1d2fd7064c"
        },
        {
          "alg" : "SHA-512",
          "content" : "7efb2771bad2e643b0e814cd78ab4f9af3ea166643700776618c397e9755ca11f4b7c00030562a619932c9d2ec5114fd253ece3abbc3db2f1a064431d8990733"
        },
        {
          "alg" : "SHA-384",
          "content" : "96fd8b2732de79c40e5e6613e324d2845dc6e19bf31bc7f3e9fa6730fa527cd16579ba9eb7915481faae1e9a32dc82fd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "252a3e6847dafd84955a71724d71641b5c6508bcbbc1f2457fdb18994b61f6d78b08cbd40d5c430743950e351ec79835"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4c066cec2c40de9b5743f43d99b629d60de937718f69ffd837bbe5902682ee92"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3334a1fff0751378abe8e010ca9716a85a15a90450265699c32886d2e8f9ff63df89237667a262350d860dbfb2f20fffff14e9a094f0bd2acf990dd543c2b86f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/jcl-over-slf4j"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.20.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17, 21 and 25 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4b29562ded527aa074e1d44f8646dac5"
        },
        {
          "alg" : "SHA-1",
          "content" : "65897b3e5731220962e659e001904af3c3cbeba9"
        },
        {
          "alg" : "SHA-256",
          "content" : "69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4"
        },
        {
          "alg" : "SHA-512",
          "content" : "1c72db334ea44f932c35e602b78907865f5bab43e30c871c9be67c8184eaa778f32d7bc3ab525d5921cd28619d3f9babfd483f17de54f007ee07db2e074b0307"
        },
        {
          "alg" : "SHA-384",
          "content" : "77dd27c4d5e9372c002bd6878d2cfaaec3cf46dd57d65de63d7f2e09351344531cfa81a537b56628ac6db18adee7e484"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3456de40eef224b3ad195d2f218dd28eacb0da07607aee7ead94bd8d54bd8311d51c28d4066db4bf8b69a2df48c415f5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "36e3f71352fa14bc580db45a05b09b063392c6d39acf9e24ffa6a67bbc07a336"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6ecbc05bb5cd3f7537078b0cf51b0a5f7189dfa60c22e5ec0d6b9e2fd3f7fa7566770b5da87e0c9929f48769933c3e3a473fd5cc7231672fca36ab1fee1f8670"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-lang/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.28.0",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f33efe616d561f8281ef7bf9f2576ad0"
        },
        {
          "alg" : "SHA-1",
          "content" : "e482f2c7a88dac3c497e96aa420b6a769f59c8d7"
        },
        {
          "alg" : "SHA-256",
          "content" : "e1522945218456f3649a39bc4afd70ce4bd466221519dba7d378f2141a4642ca"
        },
        {
          "alg" : "SHA-512",
          "content" : "f1f140f4f40ab3cf3265919db9dbb95a631a29aa784e305f291de4e68876bb711d9217d62d7937cddddd393982decdf71a608b4b3ab7f4e6375cf28af2893d7f"
        },
        {
          "alg" : "SHA-384",
          "content" : "afe6a8fc8e7486c4ecce95276bb1467763d7ff7d941c7bcff8661bbbd4bff442fd0899ff7a11bc540cda86818ee4a8f0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6afb636ad0805e522913cfd91c8293c485b7f4eff5e45dd3a17a716c3f4b8ab8969e9c00927559a5fb762cba1fdb3d3f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4420e0b462b5dcc45077e95e012a82a5ae17659e5abe8a685fa086dab6995298"
        },
        {
          "alg" : "SHA3-512",
          "content" : "23e37d13c8ee6c7369e407c29d1f9ee1bb44eca9f09a6f9742f6b4cf3d38dd7a0509fe0142536cd8087b68a76e71d819105af2c23f2aeed08acc58eb93cf7e61"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-compress/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.21.0",
      "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c49977029838babaf8a71485aa9aaef8"
        },
        {
          "alg" : "SHA-1",
          "content" : "d95f998db5f89900fe895daf6cd2cddcb2f1d64b"
        },
        {
          "alg" : "SHA-256",
          "content" : "4da851cb6abfb98bfe9eb77c5e5fc47f5414fa28b94e21b7fd9a646705dc167f"
        },
        {
          "alg" : "SHA-512",
          "content" : "3ceb4aa588d0b918e46b1ddda9ff41b5a765985bf66542d2728458fc3f83b9dedfd972ff5d919cf6f456fbaa9f8c4e5f0c0913848ec3a471c316374e683b1f2a"
        },
        {
          "alg" : "SHA-384",
          "content" : "05786582b0a85264688ad5b49ad6da09db1cdfe6301cf31ddea48f97f45b13ff25d9e3def1702890457fd5bbbd00f793"
        },
        {
          "alg" : "SHA3-384",
          "content" : "805bda170837bbedbecc5c63a5defc6a348777952906d8e6f33544866e86aa25c9d28f3b351e981d0fa49bb16e07884c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cbc2eafcba305c08e852133d0881d209799c4dc83d587869eed5f281d6bed4f3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "244e6a342d4b5a6e7d077426427979f26320be305f1cb33d933672c926ea3a96fe4f284c9f592970f604928209fe0e149613b64990202d595bce01a669de418b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-codec/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.21.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bc7e020873f086ede85f97bd9f013215"
        },
        {
          "alg" : "SHA-1",
          "content" : "52a6f68fe5afe335cde95461dd5c3412f04996f7"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d643a2afea8b058b762aa6fb90e5b256f6c729739f8b3784c3370ddc609e88d"
        },
        {
          "alg" : "SHA-512",
          "content" : "7ac1aa4d834cd7cdecaee223a64c63d481810c73dfdb5109f402234a05cadf754e414cead99072f5140d4f7042ee084161935fb28129a631d908d989c5bbac5d"
        },
        {
          "alg" : "SHA-384",
          "content" : "97c07e5c4f62484c98b6777f63ab032ee09eeb1c9ddae8332890126df9c665afb9cd554db02495171738720d23c53732"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e3e44c9f4a5f4075fb62a438a84015fe2abf878e9793835a7816dc3c35141bb79fe96dfdc6bb5aef96b7c5bbbcf453c1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1f8f4ce25b7169452dabb10ce843b3246378ea55c1971acd2300e417747b3a68"
        },
        {
          "alg" : "SHA3-512",
          "content" : "175630adf10305aeb31d737f833021a25582ffe2ef66fda6e7f694598af9c68cebbd205ade469eca4faaf6b9d349244289e62179d9cf48d93427090e2c008cf8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-io/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-collections4",
      "version" : "4.5.0",
      "description" : "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d564105594035b363b193d8ce3c18b98"
        },
        {
          "alg" : "SHA-1",
          "content" : "e5cf89f0c6e132fc970bd9a465fdcb8dbe94f75a"
        },
        {
          "alg" : "SHA-256",
          "content" : "00f93263c267be201b8ae521b44a7137271b16688435340bf629db1bac0a5845"
        },
        {
          "alg" : "SHA-512",
          "content" : "ee43c513ac9dcbd7dd23b5cbb4ea5f65a2e10cdfbb403d080b87e778b3b45062315522297c41eca514a9a946228ad7650f0a572d5b78effb8260dd8084131988"
        },
        {
          "alg" : "SHA-384",
          "content" : "73db8eb3e79569b3fa62aefdce413e6ea250b9853953cb75b9d5ce0f2f35b59b6e86ef708326a608ff20d95bdade8522"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7a9c035fa846cdcebd4331eb86ed31a67595518299a8bee54597c1eb663aee63214553a561a510b929035266c2a4800b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "614c41bfd8f9c6c1c1e5667c5be45587c3021b780937ad62f54d17051f425086"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3cfd12ec2d03ed29b682123cedae422a4c6dc459034a7e0ab5f00ccd422cb9a2ec423a08b953119c426569b888157a6d80aa0e0c63debea50c5c54c481e2eff5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-collections.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.zaxxer/SparseBitSet@1.3?type=jar",
      "publisher" : "Zaxxer.com",
      "group" : "com.zaxxer",
      "name" : "SparseBitSet",
      "version" : "1.3",
      "description" : "An efficient sparse bitset implementation for Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fbe27bb4c05e8719b7fff5aa71a57364"
        },
        {
          "alg" : "SHA-1",
          "content" : "533eac055afe3d5f614ea95e333afd6c2bde8f26"
        },
        {
          "alg" : "SHA-256",
          "content" : "f76b85adb0c00721ae267b7cfde4da7f71d3121cc2160c9fc00c0c89f8c53c8a"
        },
        {
          "alg" : "SHA-512",
          "content" : "c5609f2fdd72ab2e7461a03c85004a47941b883926f84665302bfff35aba5fa48d4ce47ac24314a3bc2dd7c70e1f8d824567e5026fd17485b06c44999942af5f"
        },
        {
          "alg" : "SHA-384",
          "content" : "bb6204a7383b1ad02f5f314c65ad50e264d4f7818e1aeaf7b45b28124dc740eebee3ff74fb07f09787dcd3985fe6de17"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ea39ffd286957150adcc1fd5aa392a8f02a5a7b7efd95d0dbbaa6d359f3a376f0adb4b953f9c54087670bbab6625d653"
        },
        {
          "alg" : "SHA3-256",
          "content" : "361ed8bdf596a2f4ea61b0ed452ceabddbf3ff581f8dafa203e27e537c558f75"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5ea52aee7b1f6e44996cff11fcb11c72c63c1558fd90824eb65e758cd375d038c9c441f7e52a8b234d8dbac26d9891146de2c5d6008c71bae7566c771abae418"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.zaxxer/SparseBitSet@1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/brettwooldridge/SparseBitSet"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/brettwooldridge/SparseBitSet.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.11?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.xmlgraphics",
      "name" : "xmlgraphics-commons",
      "version" : "2.11",
      "description" : "XML Graphics Common Support",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3de3b70187202c0a2812e93c0fa81a9b"
        },
        {
          "alg" : "SHA-1",
          "content" : "4adc636cc7051d40f859f53287ae268684ab6a80"
        },
        {
          "alg" : "SHA-256",
          "content" : "1a37948ebfedab0cd292cfc5007e65c2fa16a701b94c206152720d3a738561bc"
        },
        {
          "alg" : "SHA-512",
          "content" : "59f74788fe09f6f91fdcda2057294e1eb772eb32f40cee07b4810bc4cb1adfda1552bb7afa07c56dbd7bc73769efbbcf0f806d8a45aba62815d465c2efd44d7a"
        },
        {
          "alg" : "SHA-384",
          "content" : "fdb9743ccae8cf02fbc6238301557b88eeb8d475b6c2e45bc0dd20ae2f08d79fbc234e5f826bd2621e5ae766013866fe"
        },
        {
          "alg" : "SHA3-384",
          "content" : "47d1b10fa867686712f5aebabb9f77a57f28fbc8303c57b8a286460e4d311d28eb1ba7e6d553b84aa2029599aed4b348"
        },
        {
          "alg" : "SHA3-256",
          "content" : "04b96e80fec2c62f9d56ad9f316d326cdc158ff3ff42557e0bab4fd205d7f59e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a29255f0341da17af28a2c9d26dd05e0b27dd97c2844b34765ab4401765ae4150737125b8196eb239fc4af6f3640387c7c5d8129ccf1fc88482f00eccaf20db7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xmlgraphics.apache.org/commons/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:https://gitbox.apache.org/repos/asf/xmlgraphics-commons.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.docx4j.org.apache/xalan-interpretive@11.0.0?type=jar",
      "group" : "org.docx4j.org.apache",
      "name" : "xalan-interpretive",
      "version" : "11.0.0",
      "description" : "xalan-interpretive",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc5a8e36ca1cbe5eb05dbf328e058403"
        },
        {
          "alg" : "SHA-1",
          "content" : "7494b62aced4c3d0ffa259e59c435dc9bd7f07b3"
        },
        {
          "alg" : "SHA-256",
          "content" : "badfeb922041262d667363e05bd1cea3947f2ad63dc0f586582ef20ab5a52456"
        },
        {
          "alg" : "SHA-512",
          "content" : "c4913784dac832c021092f898677fc93faeb07b0dc74aff786ba4d5b6afd7431a3991fd2dfbef31596241874b6c1b548d207578759a97318b29891427aba4943"
        },
        {
          "alg" : "SHA-384",
          "content" : "75a45df03bf76fa6af4634028216e0986094c1fa0ffa3820a81a8caa79f9f79bc94f46007f7ed6335fe3c6d8c2375044"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6756efe7083df031b6eabf6b0b1852f6625235c74a1b61161e26372ac38fa8b7ecc54e591ab0b2bb6b2aa62cc56ff814"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a32cd216279f223127a126b0ea5a97e528defa41896c72425d684abc0a106d15"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7923cfb6ebcbbd885f776e615088054ed6135d6e03cb0349f04e03f10dec07a3f2367ec381d594086be430135c098cac3ea64d3be81e671aa2a4e06a3f787e34"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.docx4j.org.apache/xalan-interpretive@11.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xml.apache.org/xalan-j/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/xalan-parent/xalan-interpretive"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.docx4j.org.apache/xalan-serializer@11.0.0?type=jar",
      "group" : "org.docx4j.org.apache",
      "name" : "xalan-serializer",
      "version" : "11.0.0",
      "description" : "xalan-serializer",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f21112d50f8c5e067bcb388697cb6af1"
        },
        {
          "alg" : "SHA-1",
          "content" : "7a6b5802bdba3d3b12e935b8a0ae2e020d839cfd"
        },
        {
          "alg" : "SHA-256",
          "content" : "ee20541b9180bbd4dc4d55b825e397aefc1545d11d819e4d488012fa76a4b6dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "75c4b4fb27adcd972b536c7141b296b53f104fd3ec30488b82982651f8302e0af7d6bc6d9963e3ecbce6d407a08a943e3fe2777fbd1d3e46ba74844786aef510"
        },
        {
          "alg" : "SHA-384",
          "content" : "3138661bdc40f7a533c24698477f9c59823fb9e8cafa97f3f91b5ed8d0ffd2b1b3edb93cd7a232d9467b1a79264e4d74"
        },
        {
          "alg" : "SHA3-384",
          "content" : "272ae36139509cf8edb6b82a6e140b17443ecf01cd710c97448a81d3eb94cf4f8624d00dba287c769c1c41a14c239d9e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ab621ce97531f9fcc24786deb7dd3c8ad4ae29e14669a6416bd325bf04f61cff"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b69abd06440aaef49861f2d4b01c66536e97830ee368f661d81d3e03dbd2616f40454ff4def033f5e559d4d2b308c9907d685e4f8f126bb9b4ca9d0d01ef14c1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.docx4j.org.apache/xalan-serializer@11.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xml.apache.org/xalan-j/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/xalan-parent/xalan-serializer"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.arnx/wmf2svg@0.9.11?type=jar",
      "group" : "net.arnx",
      "name" : "wmf2svg",
      "version" : "0.9.11",
      "description" : "WMF to SVG Converting Tool & Library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a07dca5ecc8fd88e425168d646c065ee"
        },
        {
          "alg" : "SHA-1",
          "content" : "2727f04b008f370fb1379d2ecd1fbf935a6bdf14"
        },
        {
          "alg" : "SHA-256",
          "content" : "8f45166a8cbbd2d8734f8f8813b4377c45c11c2f9b32714bfc45d9a8afa51e59"
        },
        {
          "alg" : "SHA-512",
          "content" : "4afa235cd9a5d6a5e6f80eda1fbc082ed17662d184f91eaa0feec36b58232a8b903460709d7c794ddf4d0312af4f02dabe81700eb4c9910e3e6af84281f98b09"
        },
        {
          "alg" : "SHA-384",
          "content" : "ab41b1da8622c08ebc4b76b315b8ab5e0f437aea0c3817b7efe250c6b4ff76e7a52f80c36f1c81baf48f03856d7dccb0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ce3eaa746fea72f1ea3c59fd05bf0f55aa5d5d928252647f203bc409157b78c2021f5ec83527b2b8b2e1e946d38a5d6e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cccde908335005a0302daa14d950793c483dc2f70373628a6c34ba59ee4ec213"
        },
        {
          "alg" : "SHA3-512",
          "content" : "35bc96a458c1e8c7bc631e27224118995bb47153debd8f24b8d43ce244bbeeb90904c361babecdf1d1405d296817d88fc3ea94ff0d87ce9d8b45a198faf954cb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.arnx/wmf2svg@0.9.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hidekatsu-izuno.github.io/wmf2svg/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/hidekatsu-izuno/wmf2svg"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.antlr/antlr-runtime@3.5.3?type=jar",
      "publisher" : "ANTLR",
      "group" : "org.antlr",
      "name" : "antlr-runtime",
      "version" : "3.5.3",
      "description" : "A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing Java, C#, C++, or Python actions.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0b5c0ce1bb9c8190e2e60401fc439daa"
        },
        {
          "alg" : "SHA-1",
          "content" : "9011fb189c5ed6d99e5f3322514848d1ec1e1416"
        },
        {
          "alg" : "SHA-256",
          "content" : "68bf9f5a33dfcb34033495c587e6236bef4e37aa6612919f5b1e843b90669fb9"
        },
        {
          "alg" : "SHA-512",
          "content" : "7714970915d7187d7abb32610b3764305e67798d8289f8a59461ebb3bf7f26a09b933279de1cf95c14bbb60f213bf3f1af6aa8f20e75b26768223883a6883aaa"
        },
        {
          "alg" : "SHA-384",
          "content" : "e2c7c6211b673413739f34a28420af990809a4ed3ef4832d12ce3910c409be42adfbf0a90b949b17f88aaf8980dd124e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "08924b6c5772c6d588b4bf3a026c79d4cd69b19f460758e94169a72a210efe9da2d8684ea0c029008d028a8a5414cc9f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "86a8aa88ee5c27c2f90600c9cbedece6a3ac6b8e7762543299e6af7f64729121"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ef4d5408027ccf3db7ac34065d610d978b59ef759964301103c720a7d6d97d832aa46554ef4e8e70b469d132e870627bd050e7bd165b2385ddc98bd621b3059c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD licence",
            "url" : "http://antlr.org/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.antlr/antlr-runtime@3.5.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.antlr.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/antlr/antlr3/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/antlr/antlr3/tree/master/antlr-runtime"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.antlr/stringtemplate@3.2.1?type=jar",
      "group" : "org.antlr",
      "name" : "stringtemplate",
      "version" : "3.2.1",
      "description" : "StringTemplate is a java template engine for generating source code, web pages, emails, or any other formatted text output. StringTemplate is particularly good at multi-targeted code generators, multiple site skins, and internationalization/localization. It evolved over years of effort developing jGuru.com. StringTemplate also generates the stringtemplate website: http://www.stringtemplate.org and powers the ANTLR v3 code generator. Its distinguishing characteristic is that unlike other engines, it strictly enforces model-view separation. Strict separation makes websites and code generators more flexible and maintainable; it also provides an excellent defense against malicious template authors. There are currently about 600 StringTemplate source downloads a month.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b58ca53e518a92a1991eb63b61917582"
        },
        {
          "alg" : "SHA-1",
          "content" : "59ec8083721eae215c6f3caee944c410d2be34de"
        },
        {
          "alg" : "SHA-256",
          "content" : "f66ce72e965e5301cb0f020e54d2ba6ad76feb91b3cbfc30dbbf00c06a6df6d7"
        },
        {
          "alg" : "SHA-512",
          "content" : "47f3cfd91906b527b615fd10d27387aafa9f355aa9c18a86861c975091c39895b711fe514ed1597dabe6af2a2705dfc45bb70fb5e30f5d428a48e0d1b02b7856"
        },
        {
          "alg" : "SHA-384",
          "content" : "a12c2a95e162207835a2a785f2dfccd4b3d9d9b94741d1b3e171ff04699afc920c549425115c63a95c7941ead3909edf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d9ccd03170058316ea8c98142afbecb7a3b357dda5cd1253c9b57810449048fae7d79e93d5ba74cb901bd765429d8714"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6181e67482392f97de747d04dc11418e54ca77888d1d1f6925563fe6a2c1633b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e75331f732a6c9e280f04438db65c47aa2efb4b07980ad3ce5e227693b47c5959d87e40590e19552f67dc257cc4f187a35ee112e850a6bda9d9e69bba2dba34c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD licence",
            "url" : "http://antlr.org/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.antlr/stringtemplate@3.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.stringtemplate.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "scpexe://antlr.org/home/mavensync/antlr-repo"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye2.cenqua.com/browse/stringtemplate"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/antlr/antlr@2.7.7?type=jar",
      "group" : "antlr",
      "name" : "antlr",
      "version" : "2.7.7",
      "description" : "A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing Java, C#, C++, or Python actions.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f8f1352c52a4c6a500b597596501fc64"
        },
        {
          "alg" : "SHA-1",
          "content" : "83cd2cd674a217ade95a4bb83a8a14f351f48bd0"
        },
        {
          "alg" : "SHA-256",
          "content" : "88fbda4b912596b9f56e8e12e580cc954bacfb51776ecfddd3e18fc1cf56dc4c"
        },
        {
          "alg" : "SHA-512",
          "content" : "311c3115f9f6651d1711c52d1739e25a70f25456cacb9a2cdde7627498c30b13d721133cc75b39462ad18812a82472ef1b3b9d64fab5abb0377c12bf82043a74"
        },
        {
          "alg" : "SHA-384",
          "content" : "2e811e531ce30a2a905d093a00de596cf04406413b60422db8252b46125cadf07b71459cf6ac6da575ec030a9bf05e57"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bdf019332ae8714ef6a3904bb42bb08c1fe4feacf5e6137274884b0377d4e5b5f7aa9fe8e1ef5ca9b3e15f12320fdb67"
        },
        {
          "alg" : "SHA3-256",
          "content" : "babce5c8beb1d5907a7ed6354589e991da7d8d5cbd86c479abfa1e1dfc4d2eb8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3a8ce565280a157dd6e08fb68c317a4c28616099c56bc4992c38cf74a10a54a89e18e7c45190ce8511360798a87adc92f432382f9d9bdde0d56664b50044b517"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/antlr/antlr@2.7.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.antlr.org/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.54.0?type=jar",
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "3.54.0",
      "description" : "checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c37e1dfa8c74da0e2284d4ab6760b44"
        },
        {
          "alg" : "SHA-1",
          "content" : "c3ce292a54faccba14e2a9f3077a4dc05e5770a8"
        },
        {
          "alg" : "SHA-256",
          "content" : "20b88b0fe12233933f3c88848c276758da1c14bafe5c686ad21e2eb6abc8c4cb"
        },
        {
          "alg" : "SHA-512",
          "content" : "294560350e591e8c8f054c3e02f9b92cb7e3460a5078919401889792a8a1ab28788464e217b3c90611e9223d5d3ff36b2ed40de00d2e5d39e9bc6c504377ac3f"
        },
        {
          "alg" : "SHA-384",
          "content" : "4aa9e889f5e0f7492e421330a3f21b62f840b5e72c418a00b1f0907e7c01774ed4f9c5e6c1bdf67f0c900e639e1392db"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7587ac0354a4a05487426c209bc7713d3269067843eea00799231c2d0b698a4f0ac61e4431b11d1f90571d5c0baf9150"
        },
        {
          "alg" : "SHA3-256",
          "content" : "05445c4ad1848a3830b0bd459dcfc33ecbb347572a3e446d89f7ee2ea4968191"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ce79ff20b6ce9f517baee86161e85b81c743ede9d4a638ec58cc6e41068cf2ced7f0335a2a6b2a44a8a46e04fd70b4c6891746c15ccb8a18fdd498b8d0e98a84"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@3.54.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://checkerframework.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.3.3?type=jar",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.3.3",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eb4aa14a92f3099780ab93d0ad781b3c"
        },
        {
          "alg" : "SHA-1",
          "content" : "42aa5155a54a87d70af32d4b0d06bf43779de0e2"
        },
        {
          "alg" : "SHA-256",
          "content" : "ec59f1b702d9afc09e8c3929f5c42777dec623a6ea2731ac694332c7d7680f5a"
        },
        {
          "alg" : "SHA-512",
          "content" : "48bfbdf0cf1c08dc54a3748f315d40c548eaabc08dfc4347e625a2afb7ae206970c0b74bd7e6cf9356314b5c26d2ab51522fb192cf8d6c6b5a6a610021544501"
        },
        {
          "alg" : "SHA-384",
          "content" : "03faabdb6626601026b11069276e6e5a91ff69532fdefe29080d1d06bae5bcd0b24fa9ddcc1f0a3cc262dec0c5f872fe"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b2713a1ac39de66ba796466239762c3de498a9e52779f847ba6d066687b3e4d52027f492ce2ecb56463a1d7a42edad87"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cc84ad905a4ae01dd3951e0afa2f612fc8c0effe5df5969f2c05aaf0fcad8e24"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f146a8105507707983b2a110980471bc86f0068833b538f5e5b8de47fec220a5366d1c5874e9b6f67b829d0dc99a82b44e96f6280e015d8cf29eefa67768db5d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://nexus.sonatype.org/oss-repository-hosting.html/error_prone_parent/error_prone_annotations"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.pdfbox/fontbox@3.0.7?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.pdfbox",
      "name" : "fontbox",
      "version" : "3.0.7",
      "description" : "The Apache FontBox library is an open source Java tool to obtain low level information from font files. FontBox is a subproject of Apache PDFBox.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fd7e63f326b2e92ced87c15c854bf820"
        },
        {
          "alg" : "SHA-1",
          "content" : "48c70ca4297548041b7e05493a2db4780a037cf1"
        },
        {
          "alg" : "SHA-256",
          "content" : "8149d9897ab504f7a3f3797d552cd8925ef58149b4de3fb470eb46d747e68f86"
        },
        {
          "alg" : "SHA-512",
          "content" : "4b96f514e32b49e01de11ae8bff095f1053f800f36e44061f64d9afbc837bb875117e2340ca1586afa927ab0c4c67ae157906826b50ed60759521750838f00b1"
        },
        {
          "alg" : "SHA-384",
          "content" : "efecda469cf8fe4ee8cdc05d31b3b0c60866f823ffb6cef397ab7d34e8e04d9794a83ea577aaf9293c463e536253db2d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2bbfdb3d0a62a1cfe58b53912c66afaa37623446363488b7ea82b2e4096dd4bb1a353d865aba6d81bbcd6a71c36c097e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e0b367ae4c69b35a344880bb3024fff7e3187e85d6da476a03b0812e5c4581b6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c205c93c314ced55b5c4ec9c15ce580618f854a5837ce09801485b873ca78c2fa2ff27f811b6895027f8fb62bbf12c99d49c7e9d474f9f74330ad09358f104b7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.pdfbox/fontbox@3.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://pdfbox.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PDFBOX"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/pdfbox/tags/3.0.7/fontbox"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.pdfbox/pdfbox-io@3.0.7?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.pdfbox",
      "name" : "pdfbox-io",
      "version" : "3.0.7",
      "description" : "The Apache PDFBox library is an open source Java tool for working with PDF documents. This artefact contains IO related classes.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ce78b0210c28f580cbc0550673deace3"
        },
        {
          "alg" : "SHA-1",
          "content" : "9ca53467e2ae49a669034c0ac377992dc26e8c20"
        },
        {
          "alg" : "SHA-256",
          "content" : "b9a838291978069086efbcd1f62b81b9e4a6016e61dd2c68104ee9f4c2ff997b"
        },
        {
          "alg" : "SHA-512",
          "content" : "e720d6c685cc87acb5f70e86fc425ca63a324ab4e9c0400790e4d84e385ee1b89f3d1769ccab4d1ad6705418103f68a66290b7c0be62269fb8058c2ad6cf5c9c"
        },
        {
          "alg" : "SHA-384",
          "content" : "9321c186d4f0df47e116ecd51def40c49870012de5af4386e1940525eb7e5cfd24b7de634d9742b1e13ecdf70e9c167d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "61f9414d955862e0f91ea2c1a2f04b034a5bbc15e6177d8e7bfe776e2a51f631cdb41da6889b3ae5d337bbe5876948d1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4ed590da377bab6c71ba39056e4a04861e6ae01990bb9c25c3ec3ad0a37f9a40"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e36e634e56e66343db8bb62cbd6ab2568c5e19abe83e26152be2eb77249b15afd5ab6f750532d8587a33ff57afacda196bb62c0a4ed592d88e240bf259a8cd1b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.pdfbox/pdfbox-io@3.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/pdfbox-parent/pdfbox-io/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PDFBOX"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/pdfbox/tags/3.0.7/io"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.thoughtworks.qdox/qdox@1.12.1?type=jar",
      "group" : "com.thoughtworks.qdox",
      "name" : "qdox",
      "version" : "1.12.1",
      "description" : "QDox is a high speed, small footprint parser for extracting class/interface/method definitions from source files complete with JavaDoc @tags. It is designed to be used by active code generators or documentation tools.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9fb6970f934f8d836ae8e6d133316ab4"
        },
        {
          "alg" : "SHA-1",
          "content" : "f7122f6ab1f64bdf9f5970b0e89bfb355e036897"
        },
        {
          "alg" : "SHA-256",
          "content" : "21fba22f830e9268f07cf4ab2d99e8181abbdcb0cb91ee0228eb3cb918dcdd1d"
        },
        {
          "alg" : "SHA-512",
          "content" : "50557e884bd963f405e25319036a278cfe10ed2bf886d05ccf61f98db90ed78d7a587b07379e120323a4ba7a707cbab612b40da78598a3ce3e86adc53a6a189b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2c21bb7a9b41473305a14b97301c45ec78c97ec246171fd5ed7f7408fe562819ddd0f2c65a1fbec9b946ab4884c61327"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d49b02953e5f6b8cb4cef0e9993f662b4f2e9de2bcc54632909ddbd6a93dd121414ed9a487061dbf0bb7093139c6bed9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0533b35e8a6055773b7a7a9ccd251caea00018dc5a6be8855e9f55a687a3ebce"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1356a413d5ef4016355698806454efccb47949554add6eb353a725127d2f64a7ff6be429d9d63ba363ace73e2cb752ecb3178a1aa316cb76e54e2f92a75cba36"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.thoughtworks.qdox/qdox@1.12.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://qdox.codehaus.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://nexus.codehaus.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/QDOX"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.codehaus.org/lists/org.codehaus.qdox.announce"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.qdox.codehaus.org/browse/qdox/tags/qdox-1.12.1"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.xml.bind",
      "name" : "jakarta.xml.bind-api",
      "version" : "4.0.5",
      "description" : "Jakarta XML Binding API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "935053b2c792f34c7ea3a238ea96f3ac"
        },
        {
          "alg" : "SHA-1",
          "content" : "161811f36cad3c65991502e80317f2f6703361df"
        },
        {
          "alg" : "SHA-256",
          "content" : "5e489b6c874c4119e003ff1403db523ee3a8959ec499f3de29e77245efccf216"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f3e522bd716ab6842ba2eed8bd44fc7d859ca5a3798e5adf2447eabde1c5d3b74b6f58d217d6cd772cbb034e4f003d9f9e10fafa15f4e108ea802548d1e5044"
        },
        {
          "alg" : "SHA-384",
          "content" : "0030a82d345127efdf52273c7ed5939deb67163821d73ba6050f51d5b6d918539c43a8c1e04594afce16e0b47b4576aa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9161e41f583009e64c236660b561acb1c04e3f46adde5383cb0006a31a71884c6580548ba583530460d04801507447a9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f5490e1ab440817067b53e3c381c7d6eb4fa86d8eeed297f89ae1b7e5f31424a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4f4d18ab8edf47e5debf05fdd52f92f2d18d4089e7d705300830be0964bba93c6ff810e308bad2f5e4875e5588cab171221027c4704315388ca4668b195d25eb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/jakartaee/jaxb-api/jakarta.xml.bind-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jakartaee/jaxb-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jakartaee/jaxb-api.git/jakarta.xml.bind-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.activation",
      "name" : "jakarta.activation-api",
      "version" : "2.1.4",
      "description" : "Jakarta Activation API 2.1 Specification",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bc1602eee7bc61a0b86f14bbbb0cc794"
        },
        {
          "alg" : "SHA-1",
          "content" : "9e5c2a0d75dde71a0bedc4dbdbe47b78a5dc50f8"
        },
        {
          "alg" : "SHA-256",
          "content" : "c9db52100ce6c8aac95cc39075f95720d2e561b11f8051b81c121ad4effd7004"
        },
        {
          "alg" : "SHA-512",
          "content" : "cd078772acb5ebf1f90f7c737f372b7e86a5ce31b995ed759526a9eee73fd89f97e506f9a208ba3b73e757cb78830b829733411cf7989680aea2272abba7323b"
        },
        {
          "alg" : "SHA-384",
          "content" : "0b9a413939a024f562c15e60b11f85c336620987441fb053645499704960464d01ae83e9989b43ae6cd4f2164eb0cebe"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d2fa51a3e18ced20f097ae019982cbd945942103df59327f319c64eeef1c109d6262d1de332fa2b6dfde41c98a9e7b2c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b259d17f48ae1f357a28b9c33b66fbcae50eaa86d61ac3c8cbc5184e7914d2d5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "aae6a55fe1fa397b13b1bcb5a05ccc3e4e87049865233482dc09a8ab2af3eb128646394e3ef529609031e7c6c2215c91ffd27de06cd97ca9ae7e07bd4b9595bd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/jakartaee/jaf-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jakartaee/jaf-api/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jakartaee/jaf-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.17",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b6480d114a23683498ac3f746f959d2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f"
        },
        {
          "alg" : "SHA-256",
          "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9"
        },
        {
          "alg" : "SHA-384",
          "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557"
        },
        {
          "alg" : "SHA3-256",
          "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.docx4j/docx4j-core@11.5.12?type=jar",
      "dependsOn" : [
        "pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.12?type=jar",
        "pkg:maven/org.docx4j/docx4j-openxml-objects-pml@11.5.12?type=jar",
        "pkg:maven/org.docx4j/docx4j-openxml-objects-sml@11.5.12?type=jar",
        "pkg:maven/org.plutext/jaxb-svg11@11.4.0?type=jar",
        "pkg:maven/net.engio/mbassador@1.3.2?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
        "pkg:maven/com.zaxxer/SparseBitSet@1.3?type=jar",
        "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.11?type=jar",
        "pkg:maven/org.docx4j.org.apache/xalan-interpretive@11.0.0?type=jar",
        "pkg:maven/org.docx4j.org.apache/xalan-serializer@11.0.0?type=jar",
        "pkg:maven/net.arnx/wmf2svg@0.9.11?type=jar",
        "pkg:maven/org.antlr/antlr-runtime@3.5.3?type=jar",
        "pkg:maven/org.antlr/stringtemplate@3.2.1?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.54.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.3.3?type=jar",
        "pkg:maven/org.apache.pdfbox/fontbox@3.0.7?type=jar",
        "pkg:maven/com.thoughtworks.qdox/qdox@1.12.1?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.12?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.docx4j/docx4j-openxml-objects-pml@11.5.12?type=jar",
      "dependsOn" : [
        "pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.12?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.docx4j/docx4j-openxml-objects-sml@11.5.12?type=jar",
      "dependsOn" : [
        "pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.12?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.plutext/jaxb-svg11@11.4.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.engio/mbassador@1.3.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.21.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.zaxxer/SparseBitSet@1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.11?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.docx4j.org.apache/xalan-interpretive@11.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.docx4j.org.apache/xalan-serializer@11.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.docx4j.org.apache/xalan-serializer@11.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.arnx/wmf2svg@0.9.11?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.antlr/antlr-runtime@3.5.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.antlr/stringtemplate@3.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/antlr/antlr@2.7.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/antlr/antlr@2.7.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@3.54.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.3.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.pdfbox/fontbox@3.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.pdfbox/pdfbox-io@3.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.pdfbox/pdfbox-io@3.0.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.thoughtworks.qdox/qdox@1.12.1?type=jar",
      "dependsOn" : [ ]
    }
  ]
}