<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:b9af3269-4267-32a9-b04f-3f95f1848b01" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <timestamp>2026-04-07T05:41:24Z</timestamp>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.docx4j/docx4j-core@11.5.12?type=jar">
      <group>org.docx4j</group>
      <name>docx4j-core</name>
      <version>11.5.12</version>
      <description>docx4j is a library which helps you to work with the Office Open
		XML file format as used in docx
		documents, pptx presentations, and xlsx spreadsheets.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.docx4j/docx4j-core@11.5.12?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.docx4java.org/docx4j-core/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/plutext/docx4j/docx4j-core</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.12?type=jar">
      <group>org.docx4j</group>
      <name>docx4j-openxml-objects</name>
      <version>11.5.12</version>
      <description>Our JAXB representation of OpenXML, except for pml and sml (handled separately)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f2bb09ddea05431d52c99bb64dc37dd8</hash>
        <hash alg="SHA-1">1486ccd85955635770c57a155710628a1fa53848</hash>
        <hash alg="SHA-256">e480d8dd0a03ed4e8d23ee574014500bb80787892ef7a070bb88a0a5e04c8ffa</hash>
        <hash alg="SHA-512">3869dd4e4b9ea63e7e1bf57c0de247f5c7515f8a1093dd30b384b21d67887b3c52f5f693626690138fffac68480a45c1f949d2275763fe98e78f5539076979d5</hash>
        <hash alg="SHA-384">9cd8d167ca3473badfca6e6d9fb9ab9aaf1a8ed71dc14cc56924639d6fd68ac81daf04cb9c4ea5fba73b920bdeca21b5</hash>
        <hash alg="SHA3-384">5ff2c9fe7e9b85d2aeeb697fe9cbec784d728bc3d304ef1796f089b1b677100b97f59cdd8ac9384aa9522c5257bd57a3</hash>
        <hash alg="SHA3-256">bbdd3ba1286167788021fa6465e747ffbb225d5c854f7980e93508cd98f6b63a</hash>
        <hash alg="SHA3-512">a8b298d0b42d23afca6565b29291fe6ef045425e81e860b68ee865e044ec28e51e8bfd1a3841ad8a48c779d7c476f0ded1a624a27e935bfaa4e1e23635f87a3f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.12?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.docx4java.org/docx4j-openxml-objects/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/plutext/docx4j/docx4j-openxml-objects</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.docx4j/docx4j-openxml-objects-pml@11.5.12?type=jar">
      <group>org.docx4j</group>
      <name>docx4j-openxml-objects-pml</name>
      <version>11.5.12</version>
      <description>Our JAXB representation of OpenXML Presentation Markup Language (pml)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8f6819018c50239afefa5fbf8d1bb9d2</hash>
        <hash alg="SHA-1">0b4c0a0ff8865a2e2f4429bd4fc54d74d475e328</hash>
        <hash alg="SHA-256">f1bcb3a4843bc81ae39ff268276caa1a3f92d4e2cac81c0a851700414a43a51c</hash>
        <hash alg="SHA-512">8b4b7ded9a5270de394da3bfc4505f6f6f1a89dc3b1c7d7b871bcad75a51afc82838f47178f288047945baa7e664a74cedc6ec5b30f7657bb0551124c86993a8</hash>
        <hash alg="SHA-384">4c110e1deb323a4c2bd06ce3ab831332a9b57b7147ddf04412b4eb6b28ff1958c0b6744507a5d30b77f25bd952522e99</hash>
        <hash alg="SHA3-384">6dc39050b90db662294d3720faa249c0e97d3a5e040b93dc99641a8e49a136e3cca7069b2926f8dddd1515807402e9c1</hash>
        <hash alg="SHA3-256">d76f1cb1dcae27fe94848b94cf6dfd0bbad29420afc58007fa9fdd2ae9e50baa</hash>
        <hash alg="SHA3-512">93636d303c68b94d03fdd57cd27fe0a779d9d706ae79909c2540d10ab1071eee08b82455e3ef1f20aed174c63ccc2e73f6df33ed02700d0313e4910947abf5f5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.docx4j/docx4j-openxml-objects-pml@11.5.12?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.docx4java.org/docx4j-openxml-objects-pml/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/plutext/docx4j/docx4j-openxml-objects-pml</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.docx4j/docx4j-openxml-objects-sml@11.5.12?type=jar">
      <group>org.docx4j</group>
      <name>docx4j-openxml-objects-sml</name>
      <version>11.5.12</version>
      <description>Our JAXB representation of OpenXML Spreadsheet Markup Language (sml)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d35a1571e0d72c226614b5b4158e5380</hash>
        <hash alg="SHA-1">12b75104e6e352478ad8d2f9ba3a08c49418448d</hash>
        <hash alg="SHA-256">239f2c2dbc19e28420759066b2fa4dd46e8fa6f181e82ed0acfa21f059e5e4c1</hash>
        <hash alg="SHA-512">8954e89fdcadc32cb062e10727778081eb005ef2de08f3ab92a33b55b718b70beb1b62905921cf145f7858d97a85fd983fed06688fb81a7ed1e8ca5321db1f67</hash>
        <hash alg="SHA-384">b752ce4f24aed8bfa0a25b75bd9c739533f9a786c084a2065cb35989d21ce3abb02b77e3cbcfbbcda7d570db1a7be062</hash>
        <hash alg="SHA3-384">5f210e71c36428b73d82f2a86a987e312f339ca8515f8e31860bc494a897d3f07ab0907184f7a8c12c7f3db18ea876e7</hash>
        <hash alg="SHA3-256">bd9d82dbf408abb9de81e052848d98551ff9c32802d135ce11692e068be0b0c5</hash>
        <hash alg="SHA3-512">d19de5d8ad01eeeff4842c8575344091f48d4e105c064cad9c363a77293a20afb2df82124facb6aa51fa47a9d16dbff33433c87776130f83dedf360c075fc97c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.docx4j/docx4j-openxml-objects-sml@11.5.12?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.docx4java.org/docx4j-openxml-objects-sml/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/plutext/docx4j/docx4j-openxml-objects-sml</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.plutext/jaxb-svg11@11.4.0?type=jar">
      <group>org.plutext</group>
      <name>jaxb-svg11</name>
      <version>11.4.0</version>
      <description>JAXB classes modelling SVG 1.1</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f48497d2e66ef552a508709b19f3edb9</hash>
        <hash alg="SHA-1">1213219395e7b6c3ab6affdc7b343ded7a044140</hash>
        <hash alg="SHA-256">1ee69b8ee0a3d0d931b71b9f5475724b0cce1a181070890ed1b53fc09199a3ed</hash>
        <hash alg="SHA-512">b24fd189a7a77c4614affe28bafea17a18c199bafe86a98d0e26578e3c251de88bdc708cbcce1c93ca09f1169ac6d3eccd4189f4ae2b86160cb01201ee3833e4</hash>
        <hash alg="SHA-384">8e13bfe6003022a6d21af6d01480d2dd88478c85681068d2592d31312a199ff62ff02abd2a2b8ca578af83a495dc860f</hash>
        <hash alg="SHA3-384">1a5ced7ceea823d5bb6a567e97c92d28ce8d7940f66b41c02115d81d3c893551ccad0dce9764bf593f36f13343cce7fa</hash>
        <hash alg="SHA3-256">eed46c51ea1667b079edb91e48f03eeee4bf997162c583f2d705a9c947f826d2</hash>
        <hash alg="SHA3-512">179174e72afae5199b6da251ee0a8e4b96dda0bfc263428f5a87a7774e74a87bde40b6b8d4f6c1bb6f6d275ee16b4471c3298ad9ded7b1240e26be95dc9ca7f7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.plutext/jaxb-svg11@11.4.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/plutext/JAXB-classes-for-SVG</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/jaxb-svg11</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.engio/mbassador@1.3.2?type=jar">
      <group>net.engio</group>
      <name>mbassador</name>
      <version>1.3.2</version>
      <description>Mbassador is a fast and flexible event bus system following the publish subscribe pattern.
        It is designed for ease of use and aims to be feature rich and extensible while preserving resource efficiency
        and performance.
        It provides non-blocking iterators and minimal write contention with low memory footprint.

        Some features:
        declarative handler definition via annotations,
        sync and/or async event delivery,
        weak or strong references,
        configurable event filters,</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6844d9220e623fa491776e38a61f29a2</hash>
        <hash alg="SHA-1">4ebb2c5f853bf8a5f87147b186a9758d2e2ec0af</hash>
        <hash alg="SHA-256">469e2e9c68271eadaff12483bbb1abc640ea9973af7fa0519250e04f503aca67</hash>
        <hash alg="SHA-512">88afd389682e1101d2ee031809065e96e4ae8a44ebb638c320322013310e4b201ee91057cd05d171c3fa147a9aff8c10ab536d1c9b664e99d119e53ef8031ce7</hash>
        <hash alg="SHA-384">d59239342c7764f98a8f79a2708416c3ad988a7c560c39d63882b8e9999687b7cdf4d779a35e561e05b7ea0fd8ed9f9a</hash>
        <hash alg="SHA3-384">76e5086dbc14a5bd435193edac66dc79326d5e07e9c1096efee06e8c5ebfe0f1f687d004e6fed6d843f62d300c2421e8</hash>
        <hash alg="SHA3-256">3022080e8729165f17c813385e5fc65f4bae5e4155c938329f7c474c574a5474</hash>
        <hash alg="SHA3-512">fc8cf59cd0a39cbfe78b992e3b58919834095906f338b248b45fb71752215383491bc96dfa5c513dbcce6ab6ed796512db66920b07bdd1521c21352688c9d9b7</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.engio/mbassador@1.3.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/bennidi/mbassador</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>jcl-over-slf4j</name>
      <version>2.0.17</version>
      <description>JCL 1.2 implemented over SLF4J</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4fcd46ca51e55b9fd9b0db34474927e0</hash>
        <hash alg="SHA-1">76ea503eb688f06556a9ba69995d7eab63e34531</hash>
        <hash alg="SHA-256">affd06771589ebfe454bb11315a4f466ecaa135b95f3e7939534cf1d2fd7064c</hash>
        <hash alg="SHA-512">7efb2771bad2e643b0e814cd78ab4f9af3ea166643700776618c397e9755ca11f4b7c00030562a619932c9d2ec5114fd253ece3abbc3db2f1a064431d8990733</hash>
        <hash alg="SHA-384">96fd8b2732de79c40e5e6613e324d2845dc6e19bf31bc7f3e9fa6730fa527cd16579ba9eb7915481faae1e9a32dc82fd</hash>
        <hash alg="SHA3-384">252a3e6847dafd84955a71724d71641b5c6508bcbbc1f2457fdb18994b61f6d78b08cbd40d5c430743950e351ec79835</hash>
        <hash alg="SHA3-256">4c066cec2c40de9b5743f43d99b629d60de937718f69ffd837bbe5902682ee92</hash>
        <hash alg="SHA3-512">3334a1fff0751378abe8e010ca9716a85a15a90450265699c32886d2e8f9ff63df89237667a262350d860dbfb2f20fffff14e9a094f0bd2acf990dd543c2b86f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-parent/jcl-over-slf4j</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.20.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

  The code is tested using the latest revision of the JDK for supported
  LTS releases: 8, 11, 17, 21 and 25 currently.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
  
  Please ensure your build environment is up-to-date and kindly report any build issues.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4b29562ded527aa074e1d44f8646dac5</hash>
        <hash alg="SHA-1">65897b3e5731220962e659e001904af3c3cbeba9</hash>
        <hash alg="SHA-256">69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4</hash>
        <hash alg="SHA-512">1c72db334ea44f932c35e602b78907865f5bab43e30c871c9be67c8184eaa778f32d7bc3ab525d5921cd28619d3f9babfd483f17de54f007ee07db2e074b0307</hash>
        <hash alg="SHA-384">77dd27c4d5e9372c002bd6878d2cfaaec3cf46dd57d65de63d7f2e09351344531cfa81a537b56628ac6db18adee7e484</hash>
        <hash alg="SHA3-384">3456de40eef224b3ad195d2f218dd28eacb0da07607aee7ead94bd8d54bd8311d51c28d4066db4bf8b69a2df48c415f5</hash>
        <hash alg="SHA3-256">36e3f71352fa14bc580db45a05b09b063392c6d39acf9e24ffa6a67bbc07a336</hash>
        <hash alg="SHA3-512">6ecbc05bb5cd3f7537078b0cf51b0a5f7189dfa60c22e5ec0d6b9e2fd3f7fa7566770b5da87e0c9929f48769933c3e3a473fd5cc7231672fca36ab1fee1f8670</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-lang/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-lang/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/LANG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/commons-lang.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.28.0</version>
      <description>Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f33efe616d561f8281ef7bf9f2576ad0</hash>
        <hash alg="SHA-1">e482f2c7a88dac3c497e96aa420b6a769f59c8d7</hash>
        <hash alg="SHA-256">e1522945218456f3649a39bc4afd70ce4bd466221519dba7d378f2141a4642ca</hash>
        <hash alg="SHA-512">f1f140f4f40ab3cf3265919db9dbb95a631a29aa784e305f291de4e68876bb711d9217d62d7937cddddd393982decdf71a608b4b3ab7f4e6375cf28af2893d7f</hash>
        <hash alg="SHA-384">afe6a8fc8e7486c4ecce95276bb1467763d7ff7d941c7bcff8661bbbd4bff442fd0899ff7a11bc540cda86818ee4a8f0</hash>
        <hash alg="SHA3-384">6afb636ad0805e522913cfd91c8293c485b7f4eff5e45dd3a17a716c3f4b8ab8969e9c00927559a5fb762cba1fdb3d3f</hash>
        <hash alg="SHA3-256">4420e0b462b5dcc45077e95e012a82a5ae17659e5abe8a685fa086dab6995298</hash>
        <hash alg="SHA3-512">23e37d13c8ee6c7369e407c29d1f9ee1bb44eca9f09a6f9742f6b4cf3d38dd7a0509fe0142536cd8087b68a76e71d819105af2c23f2aeed08acc58eb93cf7e61</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-compress/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-compress/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/COMPRESS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.21.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.21.0</version>
      <description>The Apache Commons Codec component contains encoders and decoders for
     formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c49977029838babaf8a71485aa9aaef8</hash>
        <hash alg="SHA-1">d95f998db5f89900fe895daf6cd2cddcb2f1d64b</hash>
        <hash alg="SHA-256">4da851cb6abfb98bfe9eb77c5e5fc47f5414fa28b94e21b7fd9a646705dc167f</hash>
        <hash alg="SHA-512">3ceb4aa588d0b918e46b1ddda9ff41b5a765985bf66542d2728458fc3f83b9dedfd972ff5d919cf6f456fbaa9f8c4e5f0c0913848ec3a471c316374e683b1f2a</hash>
        <hash alg="SHA-384">05786582b0a85264688ad5b49ad6da09db1cdfe6301cf31ddea48f97f45b13ff25d9e3def1702890457fd5bbbd00f793</hash>
        <hash alg="SHA3-384">805bda170837bbedbecc5c63a5defc6a348777952906d8e6f33544866e86aa25c9d28f3b351e981d0fa49bb16e07884c</hash>
        <hash alg="SHA3-256">cbc2eafcba305c08e852133d0881d209799c4dc83d587869eed5f281d6bed4f3</hash>
        <hash alg="SHA3-512">244e6a342d4b5a6e7d077426427979f26320be305f1cb33d933672c926ea3a96fe4f284c9f592970f604928209fe0e149613b64990202d595bce01a669de418b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.21.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-codec/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-codec/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CODEC</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/commons-codec</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.21.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.21.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bc7e020873f086ede85f97bd9f013215</hash>
        <hash alg="SHA-1">52a6f68fe5afe335cde95461dd5c3412f04996f7</hash>
        <hash alg="SHA-256">7d643a2afea8b058b762aa6fb90e5b256f6c729739f8b3784c3370ddc609e88d</hash>
        <hash alg="SHA-512">7ac1aa4d834cd7cdecaee223a64c63d481810c73dfdb5109f402234a05cadf754e414cead99072f5140d4f7042ee084161935fb28129a631d908d989c5bbac5d</hash>
        <hash alg="SHA-384">97c07e5c4f62484c98b6777f63ab032ee09eeb1c9ddae8332890126df9c665afb9cd554db02495171738720d23c53732</hash>
        <hash alg="SHA3-384">e3e44c9f4a5f4075fb62a438a84015fe2abf878e9793835a7816dc3c35141bb79fe96dfdc6bb5aef96b7c5bbbcf453c1</hash>
        <hash alg="SHA3-256">1f8f4ce25b7169452dabb10ce843b3246378ea55c1971acd2300e417747b3a68</hash>
        <hash alg="SHA3-512">175630adf10305aeb31d737f833021a25582ffe2ef66fda6e7f694598af9c68cebbd205ade469eca4faaf6b9d349244289e62179d9cf48d93427090e2c008cf8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.21.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-io/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-io/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/IO</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-collections4</name>
      <version>4.5.0</version>
      <description>The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d564105594035b363b193d8ce3c18b98</hash>
        <hash alg="SHA-1">e5cf89f0c6e132fc970bd9a465fdcb8dbe94f75a</hash>
        <hash alg="SHA-256">00f93263c267be201b8ae521b44a7137271b16688435340bf629db1bac0a5845</hash>
        <hash alg="SHA-512">ee43c513ac9dcbd7dd23b5cbb4ea5f65a2e10cdfbb403d080b87e778b3b45062315522297c41eca514a9a946228ad7650f0a572d5b78effb8260dd8084131988</hash>
        <hash alg="SHA-384">73db8eb3e79569b3fa62aefdce413e6ea250b9853953cb75b9d5ce0f2f35b59b6e86ef708326a608ff20d95bdade8522</hash>
        <hash alg="SHA3-384">7a9c035fa846cdcebd4331eb86ed31a67595518299a8bee54597c1eb663aee63214553a561a510b929035266c2a4800b</hash>
        <hash alg="SHA3-256">614c41bfd8f9c6c1c1e5667c5be45587c3021b780937ad62f54d17051f425086</hash>
        <hash alg="SHA3-512">3cfd12ec2d03ed29b682123cedae422a4c6dc459034a7e0ab5f00ccd422cb9a2ec423a08b953119c426569b888157a6d80aa0e0c63debea50c5c54c481e2eff5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-collections/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/COLLECTIONS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-collections.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.zaxxer/SparseBitSet@1.3?type=jar">
      <publisher>Zaxxer.com</publisher>
      <group>com.zaxxer</group>
      <name>SparseBitSet</name>
      <version>1.3</version>
      <description>An efficient sparse bitset implementation for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fbe27bb4c05e8719b7fff5aa71a57364</hash>
        <hash alg="SHA-1">533eac055afe3d5f614ea95e333afd6c2bde8f26</hash>
        <hash alg="SHA-256">f76b85adb0c00721ae267b7cfde4da7f71d3121cc2160c9fc00c0c89f8c53c8a</hash>
        <hash alg="SHA-512">c5609f2fdd72ab2e7461a03c85004a47941b883926f84665302bfff35aba5fa48d4ce47ac24314a3bc2dd7c70e1f8d824567e5026fd17485b06c44999942af5f</hash>
        <hash alg="SHA-384">bb6204a7383b1ad02f5f314c65ad50e264d4f7818e1aeaf7b45b28124dc740eebee3ff74fb07f09787dcd3985fe6de17</hash>
        <hash alg="SHA3-384">ea39ffd286957150adcc1fd5aa392a8f02a5a7b7efd95d0dbbaa6d359f3a376f0adb4b953f9c54087670bbab6625d653</hash>
        <hash alg="SHA3-256">361ed8bdf596a2f4ea61b0ed452ceabddbf3ff581f8dafa203e27e537c558f75</hash>
        <hash alg="SHA3-512">5ea52aee7b1f6e44996cff11fcb11c72c63c1558fd90824eb65e758cd375d038c9c441f7e52a8b234d8dbac26d9891146de2c5d6008c71bae7566c771abae418</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.zaxxer/SparseBitSet@1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/brettwooldridge/SparseBitSet</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/brettwooldridge/SparseBitSet.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.11?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.xmlgraphics</group>
      <name>xmlgraphics-commons</name>
      <version>2.11</version>
      <description>XML Graphics Common Support</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3de3b70187202c0a2812e93c0fa81a9b</hash>
        <hash alg="SHA-1">4adc636cc7051d40f859f53287ae268684ab6a80</hash>
        <hash alg="SHA-256">1a37948ebfedab0cd292cfc5007e65c2fa16a701b94c206152720d3a738561bc</hash>
        <hash alg="SHA-512">59f74788fe09f6f91fdcda2057294e1eb772eb32f40cee07b4810bc4cb1adfda1552bb7afa07c56dbd7bc73769efbbcf0f806d8a45aba62815d465c2efd44d7a</hash>
        <hash alg="SHA-384">fdb9743ccae8cf02fbc6238301557b88eeb8d475b6c2e45bc0dd20ae2f08d79fbc234e5f826bd2621e5ae766013866fe</hash>
        <hash alg="SHA3-384">47d1b10fa867686712f5aebabb9f77a57f28fbc8303c57b8a286460e4d311d28eb1ba7e6d553b84aa2029599aed4b348</hash>
        <hash alg="SHA3-256">04b96e80fec2c62f9d56ad9f316d326cdc158ff3ff42557e0bab4fd205d7f59e</hash>
        <hash alg="SHA3-512">a29255f0341da17af28a2c9d26dd05e0b27dd97c2844b34765ab4401765ae4150737125b8196eb239fc4af6f3640387c7c5d8129ccf1fc88482f00eccaf20db7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.11?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://xmlgraphics.apache.org/commons/</url>
        </reference>
        <reference type="vcs">
          <url>scm:git:https://gitbox.apache.org/repos/asf/xmlgraphics-commons.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.docx4j.org.apache/xalan-interpretive@11.0.0?type=jar">
      <group>org.docx4j.org.apache</group>
      <name>xalan-interpretive</name>
      <version>11.0.0</version>
      <description>xalan-interpretive</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fc5a8e36ca1cbe5eb05dbf328e058403</hash>
        <hash alg="SHA-1">7494b62aced4c3d0ffa259e59c435dc9bd7f07b3</hash>
        <hash alg="SHA-256">badfeb922041262d667363e05bd1cea3947f2ad63dc0f586582ef20ab5a52456</hash>
        <hash alg="SHA-512">c4913784dac832c021092f898677fc93faeb07b0dc74aff786ba4d5b6afd7431a3991fd2dfbef31596241874b6c1b548d207578759a97318b29891427aba4943</hash>
        <hash alg="SHA-384">75a45df03bf76fa6af4634028216e0986094c1fa0ffa3820a81a8caa79f9f79bc94f46007f7ed6335fe3c6d8c2375044</hash>
        <hash alg="SHA3-384">6756efe7083df031b6eabf6b0b1852f6625235c74a1b61161e26372ac38fa8b7ecc54e591ab0b2bb6b2aa62cc56ff814</hash>
        <hash alg="SHA3-256">a32cd216279f223127a126b0ea5a97e528defa41896c72425d684abc0a106d15</hash>
        <hash alg="SHA3-512">7923cfb6ebcbbd885f776e615088054ed6135d6e03cb0349f04e03f10dec07a3f2367ec381d594086be430135c098cac3ea64d3be81e671aa2a4e06a3f787e34</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.docx4j.org.apache/xalan-interpretive@11.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://xml.apache.org/xalan-j/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/xalan-parent/xalan-interpretive</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.docx4j.org.apache/xalan-serializer@11.0.0?type=jar">
      <group>org.docx4j.org.apache</group>
      <name>xalan-serializer</name>
      <version>11.0.0</version>
      <description>xalan-serializer</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f21112d50f8c5e067bcb388697cb6af1</hash>
        <hash alg="SHA-1">7a6b5802bdba3d3b12e935b8a0ae2e020d839cfd</hash>
        <hash alg="SHA-256">ee20541b9180bbd4dc4d55b825e397aefc1545d11d819e4d488012fa76a4b6dc</hash>
        <hash alg="SHA-512">75c4b4fb27adcd972b536c7141b296b53f104fd3ec30488b82982651f8302e0af7d6bc6d9963e3ecbce6d407a08a943e3fe2777fbd1d3e46ba74844786aef510</hash>
        <hash alg="SHA-384">3138661bdc40f7a533c24698477f9c59823fb9e8cafa97f3f91b5ed8d0ffd2b1b3edb93cd7a232d9467b1a79264e4d74</hash>
        <hash alg="SHA3-384">272ae36139509cf8edb6b82a6e140b17443ecf01cd710c97448a81d3eb94cf4f8624d00dba287c769c1c41a14c239d9e</hash>
        <hash alg="SHA3-256">ab621ce97531f9fcc24786deb7dd3c8ad4ae29e14669a6416bd325bf04f61cff</hash>
        <hash alg="SHA3-512">b69abd06440aaef49861f2d4b01c66536e97830ee368f661d81d3e03dbd2616f40454ff4def033f5e559d4d2b308c9907d685e4f8f126bb9b4ca9d0d01ef14c1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.docx4j.org.apache/xalan-serializer@11.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://xml.apache.org/xalan-j/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/xalan-parent/xalan-serializer</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.arnx/wmf2svg@0.9.11?type=jar">
      <group>net.arnx</group>
      <name>wmf2svg</name>
      <version>0.9.11</version>
      <description>WMF to SVG Converting Tool &amp; Library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a07dca5ecc8fd88e425168d646c065ee</hash>
        <hash alg="SHA-1">2727f04b008f370fb1379d2ecd1fbf935a6bdf14</hash>
        <hash alg="SHA-256">8f45166a8cbbd2d8734f8f8813b4377c45c11c2f9b32714bfc45d9a8afa51e59</hash>
        <hash alg="SHA-512">4afa235cd9a5d6a5e6f80eda1fbc082ed17662d184f91eaa0feec36b58232a8b903460709d7c794ddf4d0312af4f02dabe81700eb4c9910e3e6af84281f98b09</hash>
        <hash alg="SHA-384">ab41b1da8622c08ebc4b76b315b8ab5e0f437aea0c3817b7efe250c6b4ff76e7a52f80c36f1c81baf48f03856d7dccb0</hash>
        <hash alg="SHA3-384">ce3eaa746fea72f1ea3c59fd05bf0f55aa5d5d928252647f203bc409157b78c2021f5ec83527b2b8b2e1e946d38a5d6e</hash>
        <hash alg="SHA3-256">cccde908335005a0302daa14d950793c483dc2f70373628a6c34ba59ee4ec213</hash>
        <hash alg="SHA3-512">35bc96a458c1e8c7bc631e27224118995bb47153debd8f24b8d43ce244bbeeb90904c361babecdf1d1405d296817d88fc3ea94ff0d87ce9d8b45a198faf954cb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.arnx/wmf2svg@0.9.11?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://hidekatsu-izuno.github.io/wmf2svg/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/hidekatsu-izuno/wmf2svg</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.antlr/antlr-runtime@3.5.3?type=jar">
      <publisher>ANTLR</publisher>
      <group>org.antlr</group>
      <name>antlr-runtime</name>
      <version>3.5.3</version>
      <description>A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing Java, C#, C++, or Python actions.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0b5c0ce1bb9c8190e2e60401fc439daa</hash>
        <hash alg="SHA-1">9011fb189c5ed6d99e5f3322514848d1ec1e1416</hash>
        <hash alg="SHA-256">68bf9f5a33dfcb34033495c587e6236bef4e37aa6612919f5b1e843b90669fb9</hash>
        <hash alg="SHA-512">7714970915d7187d7abb32610b3764305e67798d8289f8a59461ebb3bf7f26a09b933279de1cf95c14bbb60f213bf3f1af6aa8f20e75b26768223883a6883aaa</hash>
        <hash alg="SHA-384">e2c7c6211b673413739f34a28420af990809a4ed3ef4832d12ce3910c409be42adfbf0a90b949b17f88aaf8980dd124e</hash>
        <hash alg="SHA3-384">08924b6c5772c6d588b4bf3a026c79d4cd69b19f460758e94169a72a210efe9da2d8684ea0c029008d028a8a5414cc9f</hash>
        <hash alg="SHA3-256">86a8aa88ee5c27c2f90600c9cbedece6a3ac6b8e7762543299e6af7f64729121</hash>
        <hash alg="SHA3-512">ef4d5408027ccf3db7ac34065d610d978b59ef759964301103c720a7d6d97d832aa46554ef4e8e70b469d132e870627bd050e7bd165b2385ddc98bd621b3059c</hash>
      </hashes>
      <licenses>
        <license>
          <name>BSD licence</name>
          <url>http://antlr.org/license.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.antlr/antlr-runtime@3.5.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.antlr.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/antlr/antlr3/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/antlr/antlr3/tree/master/antlr-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.antlr/stringtemplate@3.2.1?type=jar">
      <group>org.antlr</group>
      <name>stringtemplate</name>
      <version>3.2.1</version>
      <description>StringTemplate is a java template engine for generating source code,
web pages, emails, or any other formatted text output.

StringTemplate is particularly good at multi-targeted code generators,
multiple site skins, and internationalization/localization. 

It evolved over years of effort developing jGuru.com. 

StringTemplate also generates the stringtemplate website: http://www.stringtemplate.org
and powers the ANTLR v3 code generator. Its distinguishing characteristic 
is that unlike other engines, it strictly enforces model-view separation.

Strict separation makes websites and code generators more flexible
and maintainable; it also provides an excellent defense against malicious
template authors.

There are currently about 600 StringTemplate source downloads a month.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b58ca53e518a92a1991eb63b61917582</hash>
        <hash alg="SHA-1">59ec8083721eae215c6f3caee944c410d2be34de</hash>
        <hash alg="SHA-256">f66ce72e965e5301cb0f020e54d2ba6ad76feb91b3cbfc30dbbf00c06a6df6d7</hash>
        <hash alg="SHA-512">47f3cfd91906b527b615fd10d27387aafa9f355aa9c18a86861c975091c39895b711fe514ed1597dabe6af2a2705dfc45bb70fb5e30f5d428a48e0d1b02b7856</hash>
        <hash alg="SHA-384">a12c2a95e162207835a2a785f2dfccd4b3d9d9b94741d1b3e171ff04699afc920c549425115c63a95c7941ead3909edf</hash>
        <hash alg="SHA3-384">d9ccd03170058316ea8c98142afbecb7a3b357dda5cd1253c9b57810449048fae7d79e93d5ba74cb901bd765429d8714</hash>
        <hash alg="SHA3-256">6181e67482392f97de747d04dc11418e54ca77888d1d1f6925563fe6a2c1633b</hash>
        <hash alg="SHA3-512">e75331f732a6c9e280f04438db65c47aa2efb4b07980ad3ce5e227693b47c5959d87e40590e19552f67dc257cc4f187a35ee112e850a6bda9d9e69bba2dba34c</hash>
      </hashes>
      <licenses>
        <license>
          <name>BSD licence</name>
          <url>http://antlr.org/license.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.antlr/stringtemplate@3.2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.stringtemplate.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>scpexe://antlr.org/home/mavensync/antlr-repo</url>
        </reference>
        <reference type="vcs">
          <url>http://fisheye2.cenqua.com/browse/stringtemplate</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/antlr/antlr@2.7.7?type=jar">
      <group>antlr</group>
      <name>antlr</name>
      <version>2.7.7</version>
      <description>A framework for constructing recognizers, compilers,
    and translators from grammatical descriptions containing
    Java, C#, C++, or Python actions.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f8f1352c52a4c6a500b597596501fc64</hash>
        <hash alg="SHA-1">83cd2cd674a217ade95a4bb83a8a14f351f48bd0</hash>
        <hash alg="SHA-256">88fbda4b912596b9f56e8e12e580cc954bacfb51776ecfddd3e18fc1cf56dc4c</hash>
        <hash alg="SHA-512">311c3115f9f6651d1711c52d1739e25a70f25456cacb9a2cdde7627498c30b13d721133cc75b39462ad18812a82472ef1b3b9d64fab5abb0377c12bf82043a74</hash>
        <hash alg="SHA-384">2e811e531ce30a2a905d093a00de596cf04406413b60422db8252b46125cadf07b71459cf6ac6da575ec030a9bf05e57</hash>
        <hash alg="SHA3-384">bdf019332ae8714ef6a3904bb42bb08c1fe4feacf5e6137274884b0377d4e5b5f7aa9fe8e1ef5ca9b3e15f12320fdb67</hash>
        <hash alg="SHA3-256">babce5c8beb1d5907a7ed6354589e991da7d8d5cbd86c479abfa1e1dfc4d2eb8</hash>
        <hash alg="SHA3-512">3a8ce565280a157dd6e08fb68c317a4c28616099c56bc4992c38cf74a10a54a89e18e7c45190ce8511360798a87adc92f432382f9d9bdde0d56664b50044b517</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/antlr/antlr@2.7.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.antlr.org/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@3.54.0?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>3.54.0</version>
      <description>checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6c37e1dfa8c74da0e2284d4ab6760b44</hash>
        <hash alg="SHA-1">c3ce292a54faccba14e2a9f3077a4dc05e5770a8</hash>
        <hash alg="SHA-256">20b88b0fe12233933f3c88848c276758da1c14bafe5c686ad21e2eb6abc8c4cb</hash>
        <hash alg="SHA-512">294560350e591e8c8f054c3e02f9b92cb7e3460a5078919401889792a8a1ab28788464e217b3c90611e9223d5d3ff36b2ed40de00d2e5d39e9bc6c504377ac3f</hash>
        <hash alg="SHA-384">4aa9e889f5e0f7492e421330a3f21b62f840b5e72c418a00b1f0907e7c01774ed4f9c5e6c1bdf67f0c900e639e1392db</hash>
        <hash alg="SHA3-384">7587ac0354a4a05487426c209bc7713d3269067843eea00799231c2d0b698a4f0ac61e4431b11d1f90571d5c0baf9150</hash>
        <hash alg="SHA3-256">05445c4ad1848a3830b0bd459dcfc33ecbb347572a3e446d89f7ee2ea4968191</hash>
        <hash alg="SHA3-512">ce79ff20b6ce9f517baee86161e85b81c743ede9d4a638ec58cc6e41068cf2ced7f0335a2a6b2a44a8a46e04fd70b4c6891746c15ccb8a18fdd498b8d0e98a84</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@3.54.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://checkerframework.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/typetools/checker-framework.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.3.3?type=jar">
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.3.3</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">eb4aa14a92f3099780ab93d0ad781b3c</hash>
        <hash alg="SHA-1">42aa5155a54a87d70af32d4b0d06bf43779de0e2</hash>
        <hash alg="SHA-256">ec59f1b702d9afc09e8c3929f5c42777dec623a6ea2731ac694332c7d7680f5a</hash>
        <hash alg="SHA-512">48bfbdf0cf1c08dc54a3748f315d40c548eaabc08dfc4347e625a2afb7ae206970c0b74bd7e6cf9356314b5c26d2ab51522fb192cf8d6c6b5a6a610021544501</hash>
        <hash alg="SHA-384">03faabdb6626601026b11069276e6e5a91ff69532fdefe29080d1d06bae5bcd0b24fa9ddcc1f0a3cc262dec0c5f872fe</hash>
        <hash alg="SHA3-384">b2713a1ac39de66ba796466239762c3de498a9e52779f847ba6d066687b3e4d52027f492ce2ecb56463a1d7a42edad87</hash>
        <hash alg="SHA3-256">cc84ad905a4ae01dd3951e0afa2f612fc8c0effe5df5969f2c05aaf0fcad8e24</hash>
        <hash alg="SHA3-512">f146a8105507707983b2a110980471bc86f0068833b538f5e5b8de47fec220a5366d1c5874e9b6f67b829d0dc99a82b44e96f6280e015d8cf29eefa67768db5d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.3.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://nexus.sonatype.org/oss-repository-hosting.html/error_prone_parent/error_prone_annotations</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/error-prone/error_prone_annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.pdfbox/fontbox@3.0.7?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.pdfbox</group>
      <name>fontbox</name>
      <version>3.0.7</version>
      <description>The Apache FontBox library is an open source Java tool to obtain low level information
    from font files. FontBox is a subproject of Apache PDFBox.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fd7e63f326b2e92ced87c15c854bf820</hash>
        <hash alg="SHA-1">48c70ca4297548041b7e05493a2db4780a037cf1</hash>
        <hash alg="SHA-256">8149d9897ab504f7a3f3797d552cd8925ef58149b4de3fb470eb46d747e68f86</hash>
        <hash alg="SHA-512">4b96f514e32b49e01de11ae8bff095f1053f800f36e44061f64d9afbc837bb875117e2340ca1586afa927ab0c4c67ae157906826b50ed60759521750838f00b1</hash>
        <hash alg="SHA-384">efecda469cf8fe4ee8cdc05d31b3b0c60866f823ffb6cef397ab7d34e8e04d9794a83ea577aaf9293c463e536253db2d</hash>
        <hash alg="SHA3-384">2bbfdb3d0a62a1cfe58b53912c66afaa37623446363488b7ea82b2e4096dd4bb1a353d865aba6d81bbcd6a71c36c097e</hash>
        <hash alg="SHA3-256">e0b367ae4c69b35a344880bb3024fff7e3187e85d6da476a03b0812e5c4581b6</hash>
        <hash alg="SHA3-512">c205c93c314ced55b5c4ec9c15ce580618f854a5837ce09801485b873ca78c2fa2ff27f811b6895027f8fb62bbf12c99d49c7e9d474f9f74330ad09358f104b7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.pdfbox/fontbox@3.0.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://pdfbox.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/PDFBOX</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/www-announce/</url>
        </reference>
        <reference type="vcs">
          <url>https://svn.apache.org/viewvc/pdfbox/tags/3.0.7/fontbox</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.pdfbox/pdfbox-io@3.0.7?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.pdfbox</group>
      <name>pdfbox-io</name>
      <version>3.0.7</version>
      <description>The Apache PDFBox library is an open source Java tool for working with PDF documents. 
        This artefact contains IO related classes.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ce78b0210c28f580cbc0550673deace3</hash>
        <hash alg="SHA-1">9ca53467e2ae49a669034c0ac377992dc26e8c20</hash>
        <hash alg="SHA-256">b9a838291978069086efbcd1f62b81b9e4a6016e61dd2c68104ee9f4c2ff997b</hash>
        <hash alg="SHA-512">e720d6c685cc87acb5f70e86fc425ca63a324ab4e9c0400790e4d84e385ee1b89f3d1769ccab4d1ad6705418103f68a66290b7c0be62269fb8058c2ad6cf5c9c</hash>
        <hash alg="SHA-384">9321c186d4f0df47e116ecd51def40c49870012de5af4386e1940525eb7e5cfd24b7de634d9742b1e13ecdf70e9c167d</hash>
        <hash alg="SHA3-384">61f9414d955862e0f91ea2c1a2f04b034a5bbc15e6177d8e7bfe776e2a51f631cdb41da6889b3ae5d337bbe5876948d1</hash>
        <hash alg="SHA3-256">4ed590da377bab6c71ba39056e4a04861e6ae01990bb9c25c3ec3ad0a37f9a40</hash>
        <hash alg="SHA3-512">e36e634e56e66343db8bb62cbd6ab2568c5e19abe83e26152be2eb77249b15afd5ab6f750532d8587a33ff57afacda196bb62c0a4ed592d88e240bf259a8cd1b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.pdfbox/pdfbox-io@3.0.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.apache.org/pdfbox-parent/pdfbox-io/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/PDFBOX</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/www-announce/</url>
        </reference>
        <reference type="vcs">
          <url>https://svn.apache.org/viewvc/pdfbox/tags/3.0.7/io</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.thoughtworks.qdox/qdox@1.12.1?type=jar">
      <group>com.thoughtworks.qdox</group>
      <name>qdox</name>
      <version>1.12.1</version>
      <description>QDox is a high speed, small footprint parser for extracting class/interface/method definitions from source files
    complete with JavaDoc @tags. It is designed to be used by active code generators or documentation tools.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9fb6970f934f8d836ae8e6d133316ab4</hash>
        <hash alg="SHA-1">f7122f6ab1f64bdf9f5970b0e89bfb355e036897</hash>
        <hash alg="SHA-256">21fba22f830e9268f07cf4ab2d99e8181abbdcb0cb91ee0228eb3cb918dcdd1d</hash>
        <hash alg="SHA-512">50557e884bd963f405e25319036a278cfe10ed2bf886d05ccf61f98db90ed78d7a587b07379e120323a4ba7a707cbab612b40da78598a3ce3e86adc53a6a189b</hash>
        <hash alg="SHA-384">2c21bb7a9b41473305a14b97301c45ec78c97ec246171fd5ed7f7408fe562819ddd0f2c65a1fbec9b946ab4884c61327</hash>
        <hash alg="SHA3-384">d49b02953e5f6b8cb4cef0e9993f662b4f2e9de2bcc54632909ddbd6a93dd121414ed9a487061dbf0bb7093139c6bed9</hash>
        <hash alg="SHA3-256">0533b35e8a6055773b7a7a9ccd251caea00018dc5a6be8855e9f55a687a3ebce</hash>
        <hash alg="SHA3-512">1356a413d5ef4016355698806454efccb47949554add6eb353a725127d2f64a7ff6be429d9d63ba363ace73e2cb752ecb3178a1aa316cb76e54e2f92a75cba36</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.thoughtworks.qdox/qdox@1.12.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://qdox.codehaus.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nexus.codehaus.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://jira.codehaus.org/browse/QDOX</url>
        </reference>
        <reference type="mailing-list">
          <url>http://archive.codehaus.org/lists/org.codehaus.qdox.announce</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.qdox.codehaus.org/browse/qdox/tags/qdox-1.12.1</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.bind</group>
      <name>jakarta.xml.bind-api</name>
      <version>4.0.5</version>
      <description>Jakarta XML Binding API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">935053b2c792f34c7ea3a238ea96f3ac</hash>
        <hash alg="SHA-1">161811f36cad3c65991502e80317f2f6703361df</hash>
        <hash alg="SHA-256">5e489b6c874c4119e003ff1403db523ee3a8959ec499f3de29e77245efccf216</hash>
        <hash alg="SHA-512">3f3e522bd716ab6842ba2eed8bd44fc7d859ca5a3798e5adf2447eabde1c5d3b74b6f58d217d6cd772cbb034e4f003d9f9e10fafa15f4e108ea802548d1e5044</hash>
        <hash alg="SHA-384">0030a82d345127efdf52273c7ed5939deb67163821d73ba6050f51d5b6d918539c43a8c1e04594afce16e0b47b4576aa</hash>
        <hash alg="SHA3-384">9161e41f583009e64c236660b561acb1c04e3f46adde5383cb0006a31a71884c6580548ba583530460d04801507447a9</hash>
        <hash alg="SHA3-256">f5490e1ab440817067b53e3c381c7d6eb4fa86d8eeed297f89ae1b7e5f31424a</hash>
        <hash alg="SHA3-512">4f4d18ab8edf47e5debf05fdd52f92f2d18d4089e7d705300830be0964bba93c6ff810e308bad2f5e4875e5588cab171221027c4704315388ca4668b195d25eb</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jakartaee/jaxb-api/jakarta.xml.bind-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/jaxb-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/jaxb-api.git/jakarta.xml.bind-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.activation</group>
      <name>jakarta.activation-api</name>
      <version>2.1.4</version>
      <description>Jakarta Activation API 2.1 Specification</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bc1602eee7bc61a0b86f14bbbb0cc794</hash>
        <hash alg="SHA-1">9e5c2a0d75dde71a0bedc4dbdbe47b78a5dc50f8</hash>
        <hash alg="SHA-256">c9db52100ce6c8aac95cc39075f95720d2e561b11f8051b81c121ad4effd7004</hash>
        <hash alg="SHA-512">cd078772acb5ebf1f90f7c737f372b7e86a5ce31b995ed759526a9eee73fd89f97e506f9a208ba3b73e757cb78830b829733411cf7989680aea2272abba7323b</hash>
        <hash alg="SHA-384">0b9a413939a024f562c15e60b11f85c336620987441fb053645499704960464d01ae83e9989b43ae6cd4f2164eb0cebe</hash>
        <hash alg="SHA3-384">d2fa51a3e18ced20f097ae019982cbd945942103df59327f319c64eeef1c109d6262d1de332fa2b6dfde41c98a9e7b2c</hash>
        <hash alg="SHA3-256">b259d17f48ae1f357a28b9c33b66fbcae50eaa86d61ac3c8cbc5184e7914d2d5</hash>
        <hash alg="SHA3-512">aae6a55fe1fa397b13b1bcb5a05ccc3e4e87049865233482dc09a8ab2af3eb128646394e3ef529609031e7c6c2215c91ffd27de06cd97ca9ae7e07bd4b9595bd</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jakartaee/jaf-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/jaf-api/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/jaf-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>2.0.17</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b6480d114a23683498ac3f746f959d2f</hash>
        <hash alg="SHA-1">d9e58ac9c7779ba3bf8142aff6c830617a7fe60f</hash>
        <hash alg="SHA-256">7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832</hash>
        <hash alg="SHA-512">9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9</hash>
        <hash alg="SHA-384">6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944</hash>
        <hash alg="SHA3-384">9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557</hash>
        <hash alg="SHA3-256">00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e</hash>
        <hash alg="SHA3-512">9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.docx4j/docx4j-core@11.5.12?type=jar">
      <dependency ref="pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.docx4j/docx4j-openxml-objects-pml@11.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.docx4j/docx4j-openxml-objects-sml@11.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.plutext/jaxb-svg11@11.4.0?type=jar"/>
      <dependency ref="pkg:maven/net.engio/mbassador@1.3.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.21.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.21.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar"/>
      <dependency ref="pkg:maven/com.zaxxer/SparseBitSet@1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.11?type=jar"/>
      <dependency ref="pkg:maven/org.docx4j.org.apache/xalan-interpretive@11.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.docx4j.org.apache/xalan-serializer@11.0.0?type=jar"/>
      <dependency ref="pkg:maven/net.arnx/wmf2svg@0.9.11?type=jar"/>
      <dependency ref="pkg:maven/org.antlr/antlr-runtime@3.5.3?type=jar"/>
      <dependency ref="pkg:maven/org.antlr/stringtemplate@3.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.54.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.pdfbox/fontbox@3.0.7?type=jar"/>
      <dependency ref="pkg:maven/com.thoughtworks.qdox/qdox@1.12.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.12?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    <dependency ref="pkg:maven/org.docx4j/docx4j-openxml-objects-pml@11.5.12?type=jar">
      <dependency ref="pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.12?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.docx4j/docx4j-openxml-objects-sml@11.5.12?type=jar">
      <dependency ref="pkg:maven/org.docx4j/docx4j-openxml-objects@11.5.12?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.plutext/jaxb-svg11@11.4.0?type=jar"/>
    <dependency ref="pkg:maven/net.engio/mbassador@1.3.2?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.21.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.21.0?type=jar"/>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.21.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar"/>
    <dependency ref="pkg:maven/com.zaxxer/SparseBitSet@1.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.11?type=jar"/>
    <dependency ref="pkg:maven/org.docx4j.org.apache/xalan-interpretive@11.0.0?type=jar">
      <dependency ref="pkg:maven/org.docx4j.org.apache/xalan-serializer@11.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.docx4j.org.apache/xalan-serializer@11.0.0?type=jar"/>
    <dependency ref="pkg:maven/net.arnx/wmf2svg@0.9.11?type=jar"/>
    <dependency ref="pkg:maven/org.antlr/antlr-runtime@3.5.3?type=jar"/>
    <dependency ref="pkg:maven/org.antlr/stringtemplate@3.2.1?type=jar">
      <dependency ref="pkg:maven/antlr/antlr@2.7.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/antlr/antlr@2.7.7?type=jar"/>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.54.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.3.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.pdfbox/fontbox@3.0.7?type=jar">
      <dependency ref="pkg:maven/org.apache.pdfbox/pdfbox-io@3.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.pdfbox/pdfbox-io@3.0.7?type=jar"/>
    <dependency ref="pkg:maven/com.thoughtworks.qdox/qdox@1.12.1?type=jar"/>
  </dependencies>
</bom>
