<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:c8cde894-00ba-44cf-89d9-80f8bacad181" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2022-09-20T11:32:51Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.1</version>
        <hashes>
          <hash alg="MD5">538c878ebf89b372876e247d056a3fc5</hash>
          <hash alg="SHA-1">4561e50edb47e12a03712b1afce9b20cba32fd28</hash>
          <hash alg="SHA-256">f0ea7b3bcf5c7ba649b8d9807e805385330501881677d47333aebce8305ef4d4</hash>
          <hash alg="SHA-512">a35400ca6411692ae8964fe7030eaba2a83a2fa50e2883def3054191283c3b48e2dcdd68bf80f5a0ede3898cc6b7cb7b998aacd2c1e969320053c43b6ab8d873</hash>
          <hash alg="SHA-384">75c0c03a03c69e82ad1f7b942d6d733da8261c4058174355d6b24ebd88cee34180f2e8484d2b0fedaf459078bdf6e927</hash>
          <hash alg="SHA3-384">98cd312d4dfc104a0a66d65023d0aade423f08951f2a9e0215e703f0c81c4f274d8e11a2db1abc30a558b820d65860c4</hash>
          <hash alg="SHA3-256">0c5fd65013128de457b049a824c4ad11212d668b503613ce19a54d545e5cf82d</hash>
          <hash alg="SHA3-512">72ea0ed8faa3cc4493db96d0223094842e7153890b091ff364040ad3ad89363157fc9d1bd852262124aec83134f0c19aa4fd0fa482031d38a76d74dfd36b7964</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar">
      <publisher>Eclipse Steady</publisher>
      <group>org.eclipse.steady</group>
      <name>lang</name>
      <version>3.2.5</version>
      <description>Framework and base classes for language analysis</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/technology.steady</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/steady/issues</url></reference><reference type="vcs"><url>https://github.com/eclipse/steady/tree/master/lang</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar">
      <group>javax.validation</group>
      <name>validation-api</name>
      <version>2.0.1.Final</version>
      <description>Bean Validation API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5d02c034034a7a16725ceff787e191d6</hash>
        <hash alg="SHA-1">cb855558e6271b1b32e716d24cb85c7f583ce09e</hash>
        <hash alg="SHA-256">9873b46df1833c9ee8f5bc1ff6853375115dadd8897bcb5a0dffb5848835ee6c</hash>
        <hash alg="SHA-512">2f136d337c49a83dc0eff1caae74ba11413269b779257ae0b76864e207abd729b2392ab2ae3a3dc7a6d065d60baef844ad797a11f69589119a827ccee5c20840</hash>
        <hash alg="SHA-384">c0559eff2537f82b11f611546b0b387f8076efdee8e90537b2c9f0f2325cc7686c1fbbf4b00d6217dc33677f4d5382f8</hash>
        <hash alg="SHA3-384">e26cb51beade8cd45a737002c98a400c800928b9a26a702a1833c29e1e0868af355460416d9d813b0830a184a9fefc08</hash>
        <hash alg="SHA3-256">987342d3fd7c3275cdbde0295e91a0dfac15058f73b57341ba40cce62f581195</hash>
        <hash alg="SHA3-512">c8e8c4f83fb4c3d881c7dfda07650b035db00251aa8b8030f00c4a0cf1ed919665a76c44a0da78b1bda118279cbf26646c1b813c1f3c21be2b8099020ffdfd01</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://hibernate.atlassian.net/projects/BVAL/</url></reference><reference type="vcs"><url>https://github.com/beanvalidation/beanvalidation-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api</name>
      <version>2.18.0</version>
      <description>The Apache Log4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">38d29af13312d716f8d1d8fd79736f05</hash>
        <hash alg="SHA-1">c72ad9b1d8d42e4ea7befd8248bf05877af4c63d</hash>
        <hash alg="SHA-256">b977057233153b242ac58cc5b7d3121136b9c34c86c1e191c042ba4a828144c5</hash>
        <hash alg="SHA-512">2d96625cb1ad07d7f30edc488506481a199fab30bdfcdb253af28661ce4a442164af3ddd421ac85c154707d5c91009d3ec91ee31d9c46467865370042ccb2455</hash>
        <hash alg="SHA-384">434791c20db5028fae6310a51d0c3c9950f4ec5eb18049bf9bfeb95a051d753b42fa07ffff53eac7205b3778af4ac3c0</hash>
        <hash alg="SHA3-384">1abde1bb0f560983898656340f033abb412f74d134d4382b5b2697bde0d6c0ce2d191f553e4d82ecad72b5a7ef5dee9a</hash>
        <hash alg="SHA3-256">867bf8133a3de6e76aef49022ff1124c53ada1f6ff9722762d0a42ab6f891297</hash>
        <hash alg="SHA3-512">79f4b3dc31f13fab19192ddc1868ca151936cb31bd6c35d320a1863ddb0b7fb3acdcc2dec5381a664d4b669c637128e7b74b8ac36e8afcf5d2512bd0b8ed63e6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git</url></reference><reference type="website"><url>https://www.apache.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-core</name>
      <version>2.18.0</version>
      <description>The Apache Log4j Implementation</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">8869945da3b66916542b9fdd2e2605f2</hash>
        <hash alg="SHA-1">07c1882ede137548925eadb750615edab2f6e13c</hash>
        <hash alg="SHA-256">ec7a23bfaf4d8ddf3394671561dd4a0f35b69d6fa6918734e3e8bc4066f741c4</hash>
        <hash alg="SHA-512">3f323284793d663bd82811b8a1fb45b6617ac70047fea3410c5403a0b1935e0cf53aa6936cf9986d38936e93c10235eb5a61e1c6ff87fda08c33bb8469a70e0f</hash>
        <hash alg="SHA-384">1d8f02496df1e6c0bc0e169337b3e45812297b15e099d3f244bf59ca7b00e0d0f8f94692ab4fc4531dd889b1e13a0ff9</hash>
        <hash alg="SHA3-384">74194f1125448a29dbd6c3af00f79b5174626801be3e691f270f40e03c4d46bdfc0e0125ca2c338c5b90da75ada82b0c</hash>
        <hash alg="SHA3-256">95e3ac099964e187910e31a65af044b028db586b19c5234b75e86d843d26b3ba</hash>
        <hash alg="SHA3-512">fbad7e2f569dd6e8f073876ced76c9ae2a477f3b8d5d8a5142b1a22017e7f7b51504971ed6d9c7d19867b8f48b3b15d9af54384804ceeb56ccc3391f55d25e6e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git</url></reference><reference type="website"><url>https://www.apache.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar">
      <group>com.github.spotbugs</group>
      <name>spotbugs-annotations</name>
      <version>4.7.2</version>
      <description>Annotations the SpotBugs tool supports</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f9d6498ee19a3e9ace207f1f6d32bd1d</hash>
        <hash alg="SHA-1">3546c0a24a083e7fdfdf5986bef76b19c477a264</hash>
        <hash alg="SHA-256">e2b4c654b2d7897490cf1f22a009ac677be4c92bfc493a0dedb5706f5e489839</hash>
        <hash alg="SHA-512">d306545aae5e8498a26d2a370c2deb1540d01add801240ececf4a3d5e9b3db6d93258c193e8e827c57cafd8d8d02b681998bd5ba14438ca1e1b36f7d1e37dd73</hash>
        <hash alg="SHA-384">82d9d467f1b61829bea927dacd631c82fc4435bfde438d85325f7abd3fdab5d994b0c0f38ef2ad8b35e98211f7a2c4c1</hash>
        <hash alg="SHA3-384">f2d5346126ca0d6f8733234fcc252682c8f510e722fbd146c8b98a3201da779fc887e9cfb92dc830547ab5a068828c2a</hash>
        <hash alg="SHA3-256">804c5188a6f2e3937a72e8db7a42d2530abdc4d025d64f694ef1df7baa377761</hash>
        <hash alg="SHA3-512">2e7a2c66baa33acf400f37617666f3be225a16c7186c1f23bc35ce5c052c33455bbd63fa514d7b39f12c50edba1eb817668b6c59964295ae6a49ff965a63afdd</hash>
      </hashes>
      <licenses>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/spotbugs/spotbugs/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>3.0.2</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd83accb899363c32b07d7a1b2e4ce40</hash>
        <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
        <hash alg="SHA-256">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>
        <hash alg="SHA-512">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>
        <hash alg="SHA-384">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>
        <hash alg="SHA3-384">9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1</hash>
        <hash alg="SHA3-256">223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff</hash>
        <hash alg="SHA3-512">3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://code.google.com/p/jsr-305/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.steady/shared@3.2.5?type=jar">
      <group>org.eclipse.steady</group>
      <name>shared</name>
      <version>3.2.5</version>
      <description>Contains class definitions shared between the different Maven modules.
		They can be classified as follows: Classes for JSON (de)serialization, classes
		supporting service connectivity, utility classes and classes used to ensure
		consistency across modules.</description>
      <hashes>
        <hash alg="MD5">ad31ac9925832062409beaa7e1f757b9</hash>
        <hash alg="SHA-1">b7e25e66a898a5081347f8037dc1916100fd2407</hash>
        <hash alg="SHA-256">4741e2b0d3868baed649656fbd0ee1afe9f5b88fb246b603825f3cf1fc4f7e91</hash>
        <hash alg="SHA-512">f3b4979088d6ccd21a1be907a70354137b11f05dc1031f7ac9fbe3cfa546b261857ac03f38fd1d71644aa118e63c010828aa11d3b858d0519043941eadef20cc</hash>
        <hash alg="SHA-384">094023555256b45ef9e27313b2758f0a369e164830d90545ab28140f55dc3e2723858cc5364cf5ac95dc98cd3eff31fe</hash>
        <hash alg="SHA3-384">caa26575f2da4bcb3bb2156c3d07115f1307c4e975c1b8ba12a804c55297d86773d8c67421a26398903231f4b181ccb2</hash>
        <hash alg="SHA3-256">bd0347239f6568a59bf9c1902f9ae5ed374216da8825279cc3b5519c0629307a</hash>
        <hash alg="SHA3-512">4fa707bb438aa0ebe831d10430eeaab3a37caabdeee39a09e8bc004ee055e7aae496fac741afbd8846f2ed9a0253782acfa672ebf3721a30c2607dff8315b4d5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.steady/shared@3.2.5?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/eclipse/steady/tree/master/shared</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.13.4</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e8f064827ddb8deb06e45d20988bcaa5</hash>
        <hash alg="SHA-1">0cf934c681294b97ef6d80082faeefbe1edadf56</hash>
        <hash alg="SHA-256">4c2e043200edd9ee7ba6fc378bd5c17784a5bf2388e152d208068b51fd0839cf</hash>
        <hash alg="SHA-512">cf54bf5be3a5015a4b2c3ac986bf01f64517df224c8ba67197118d06f7fbe8ad64e39d002df326a72feb5aec8f0bc7f15338e90c4ba0668a167a0f03a81ce47f</hash>
        <hash alg="SHA-384">5fd2723a9f5bae811e71b596180c56355497f87cdd6c9bdc74716224ea1d133b6ed4e5df20b6ec169b3745066019ad94</hash>
        <hash alg="SHA3-384">47217ac4e35397ed519916b26ec780ecbff69de0069afcbf9329a84f52b0e8fc4700e0c7b6bce7b9ddf585df7d944f22</hash>
        <hash alg="SHA3-256">2be4b3203664ef4249d40af8d3ea9516805a573515a8ece27c5e625c0969ed0f</hash>
        <hash alg="SHA3-512">75b4fa4464de9e5efbed460b940ef79b34fc7c477cb61540960f6e56039915a520176d6bf42077453cb049ec184d3b6d88006a4016a02b5de87da907d8c0791a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://github.com/FasterXML/jackson-core</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.13.4</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">03cb7aea126610e4c96ca6d14d75cc55</hash>
        <hash alg="SHA-1">98b0edfa8e4084078f10b7b356c300ded4a71491</hash>
        <hash alg="SHA-256">c9faff420d9e2c7e1e4711dbeebec2506a32c9942027211c5c293d8d87807eb6</hash>
        <hash alg="SHA-512">23f32026b181c6c71efc7789a8420c7d5cbcfb15f7696657e75f9cbe3635d13a88634b5db3c344deb914b719d60e3a9bfc1b63fa23152394e1e70b8e7bcd2116</hash>
        <hash alg="SHA-384">e25e844575891b2f3bcb2fdc67ae9fadf54d2836052c9ea2c045f1375eaa97e4780cd6752bef0ebc658fa17400c55268</hash>
        <hash alg="SHA3-384">e6955877c2c27327f6814f06d681118be2ae1a36bc5ff2e84ad27f213203bf77c347ba18d9abc61d5f1c99b6e81f6c2d</hash>
        <hash alg="SHA3-256">88b12b0643a4791fa5cd0c5e30bc2631903870cf916c8a1b4198c856fd91e5f4</hash>
        <hash alg="SHA3-512">7e86a69bcf7b4c8a6949acce0ec15f33b74d5ac604f23cd631ec16bfdfd70d42499028b9d062648b31d7a187ea4dc98ec296a329f4cfd4952744ed1281fa9d9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://github.com/FasterXML/jackson-databind</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.13.4</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7e982dafcf25c24b365b5088eaf8a0a6</hash>
        <hash alg="SHA-1">858c6cc78e1f08a885b1613e1d817c829df70a6e</hash>
        <hash alg="SHA-256">ac5b27a634942391ca113850ee7db01df1499a240174021263501c05fc653b44</hash>
        <hash alg="SHA-512">788a836b1631dabed472a0387de2ccdf86ab9091b04246d58e257780bb382e6ae068b6df862407c1256b0b83d1f9366813e54e98982f881c3d222a9f4a8e9ebb</hash>
        <hash alg="SHA-384">7ae717dc399ccfe7c2a4831fae5c410d896e0a5afdff710003fa306ae2663a3c21ca000edfec9cdba30b0997c4c66757</hash>
        <hash alg="SHA3-384">fd2b435781f0870b572ce493a7c2e8cbc0cdfec80a24ae9a3d0874c27f84fb527a80afdc30a4f641a8f5389865603f4c</hash>
        <hash alg="SHA3-256">d6a55b712e499803461575b89eb8e2114307c88ba0e7fa56a65eab995b155f3d</hash>
        <hash alg="SHA3-512">295881324b5331e3e9530b26f719020f01f2ffd33ed96cdfad7983c3e4578e1eea0cce9d8ed622a1ec6b7b1b1e60af858b6813d08e4f31a38d1422d9c70a6a5f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://github.com/FasterXML/jackson-annotations</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-configuration/commons-configuration@1.10?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-configuration</group>
      <name>commons-configuration</name>
      <version>1.10</version>
      <description>Tools to assist in the reading of configuration/preferences files in various formats.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b16511ce540fefd53981245f5f21c5f8</hash>
        <hash alg="SHA-1">2b36e4adfb66d966c5aef2d73deb6be716389dc9</hash>
        <hash alg="SHA-256">95d4e6711e88ce78992c82c25bc03c8df9ecf5a357f0de0bec72a26db3399374</hash>
        <hash alg="SHA-512">cc7fdd7d7bd1851b48d10883766fac9d72b0407714b3c653369130e3224bdd19a4cb941fb813dde1e8c7d29bb07a5b1a44d611240ead1717e51a15a31c9630f8</hash>
        <hash alg="SHA-384">71c60449129b1543aea7b4b85d6f16c41dd71468590f49b4420eef8a3ad2a2e82ad097f08cb0c03decc3c69a7ada6e1e</hash>
        <hash alg="SHA3-384">c928eb961ec77ff29ae805564b78107b79bff66273e4061e3ef028908cbfdce047c6ef6220fd76956a44581b5af10145</hash>
        <hash alg="SHA3-256">aedaf478de1a1500159495841e0eea1f40bb96c7348f0e20c1e0375fe4e7860b</hash>
        <hash alg="SHA3-512">d15349092cdc0ac565c2a7b84ab515a884ec2117a0a034e600baf6cba9876173eb8f80ee3c7cca07d0a8db0d094b3a3aef4a76bee8bcb8c8113ad5b445f2136d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-configuration/commons-configuration@1.10?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CONFIGURATION</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/configuration/tags/CONFIGURATION_1_10RC2</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>http://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-lang</group>
      <name>commons-lang</name>
      <version>2.6</version>
      <description>Commons Lang, a package of Java utility classes for the
        classes that are in java.lang's hierarchy, or are considered to be so
        standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4d5c1693079575b362edf41500630bbd</hash>
        <hash alg="SHA-1">0ce1edb914c94ebc388f086c6827e8bdeec71ac2</hash>
        <hash alg="SHA-256">50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c</hash>
        <hash alg="SHA-512">4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42</hash>
        <hash alg="SHA-384">9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90</hash>
        <hash alg="SHA3-384">4bc4eaaf2580ded6d552b96ae5261c936de95f69a1d137c47279c51bf2aa1406ae44f69ccc94486267b8441e53c4bd74</hash>
        <hash alg="SHA3-256">b68d49ef037d428ea0c3e67a7a20f3d68a134bef30a1639ec08d28886b9f5629</hash>
        <hash alg="SHA3-512">2e9ffc0608827cffc0b48b7a0f35d371c66586c99fea2910f7c2a237c7c57d9ae4d65de7c8e018362c2e4f963c2f70a9196cebf35457f1dd0cea6c65c256f673</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-lang/commons-lang@2.6?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LANG</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>http://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.1.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.1.1</version>
      <description>Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <hashes>
        <hash alg="MD5">ed448347fc0104034aa14c8189bf37de</hash>
        <hash alg="SHA-1">5043bfebc3db072ed80fbd362e7caf00e885d8ae</hash>
        <hash alg="SHA-256">ce6f913cad1f0db3aad70186d65c5bc7ffcc9a99e3fe8e0b137312819f7c362f</hash>
        <hash alg="SHA-512">470323a2ee38be1b7ff8c84f1f5a5f8c4ec2ceb6b0649faa7b961f111865877dbe125409f72b1c52c7f18aa89e3469635c49ff4b83f86cc2f2eb2cc5562f9bff</hash>
        <hash alg="SHA-384">264a511a601a07558911ccc5f49ef579aa1b1760bb4091bcbe1a0017c7be64d86f1d0b28ef560819614b252907cdd44a</hash>
        <hash alg="SHA3-384">e61a9dafb4f92a3cfd76fc28ff340eb15bc0fca939a48408fd9032362b8a95ce938e58dd01f7c3d0ff90ac21cacc77df</hash>
        <hash alg="SHA3-256">0799a9105d174ba2f082845e8ca27db236118b00e4a2053ee1fde798b2fbd031</hash>
        <hash alg="SHA3-512">dbdcf933551c6abe834ac4fa5b4833e47895c2573530b74f51daff7291dab60db88946fc34a518f423a68e9c9ce36507345070e56a86fb5a567be685c1e3cded</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.1.1?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LOGGING</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/commons/proper/logging/tags/commons-logging-1.1.1</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-commits/</url></reference><reference type="website"><url>http://www.apache.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>http://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar">
      <group>com.github.package-url</group>
      <name>packageurl-java</name>
      <version>1.4.1</version>
      <description>The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal
        specification for describing a package via a "mostly universal" URL.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f8b3a23e6402d317b612251c83d292e7</hash>
        <hash alg="SHA-1">0a0d1009191c1cf6b04f40d26e4717596f3a90e0</hash>
        <hash alg="SHA-256">8e23280221afd1e6561d433dfb133252cd287167acb0eca5a991667118ff10a2</hash>
        <hash alg="SHA-512">ea5ed91a395e3c8ef18d575d363dc30302986dc5cc8423e97950708cd48dd87e97176619a246d72e8f5b4ff1a7fbb2afb5e9b3c7a11aa7340b540655ba4d4e9b</hash>
        <hash alg="SHA-384">791d86830598ccce6ea59faaa7ece317b84ce1b245194e39cf576f65250b32c8a62c0660478a4d4038040b8650e520b3</hash>
        <hash alg="SHA3-384">c2354f6e79b3feefa44b289a53b9ee05a4db20d75a6a367a4880a2028ec8306fd45c5495962381709b15134136bd3ed6</hash>
        <hash alg="SHA3-256">29888a1b55158593ef90003638a7ea204b0cff1d255f48780caa37e1c52bcfe3</hash>
        <hash alg="SHA3-512">3bb0b2ef76d2dc0cff23f70541091bd30744d1fb0e240aca4c930f01f70314f1f7cf80552d0116b77333a2c3a3025b217fc3aceca2755469f6871983d5e9740a</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://travis-ci.com/package-url/packageurl-java</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/package-url/packageurl-java/issues</url></reference><reference type="vcs"><url>https://github.com/package-url/packageurl-java.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpclient</name>
      <version>4.5.13</version>
      <description>Apache HttpComponents Client</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">40d6b9075fbd28fa10292a45a0db9457</hash>
        <hash alg="SHA-1">e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada</hash>
        <hash alg="SHA-256">6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743</hash>
        <hash alg="SHA-512">3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089</hash>
        <hash alg="SHA-384">093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99</hash>
        <hash alg="SHA3-384">cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d</hash>
        <hash alg="SHA3-256">710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c</hash>
        <hash alg="SHA3-512">276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.apache.org/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCLIENT</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpcore</name>
      <version>4.4.13</version>
      <description>Apache HttpComponents Core (blocking I/O)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e07a248f61c52776a2366c075dcd4963</hash>
        <hash alg="SHA-1">853b96d3afbb7bf8cc303fe27ee96836a10c1834</hash>
        <hash alg="SHA-256">e06e89d40943245fcfa39ec537cdbfce3762aecde8f9c597780d2b00c2b43424</hash>
        <hash alg="SHA-512">23430cde8b9bed33c91474ba49f1143284135df1b25fdcbc37bc3bb7e9549e77b3918eb40250093db652ae200367e87316129b23b4f6987e94939d60f467498d</hash>
        <hash alg="SHA-384">b776d57492478c162d428bdd3139be0fa6c3cf4503355c3a04710ca7bc3ee74d66627f49eb42814fd8f8364dbd17aa91</hash>
        <hash alg="SHA3-384">f6f9e70b76717b705d040f0b33857f0dde89736f2e6d55ea56585235eb1b6d0ce4d5aa18c82050391ac968dcb5ec29e2</hash>
        <hash alg="SHA3-256">721a9fc1bb353ddf3e438bed4306a3fa5b55ffafb474be5dc8715bd23d7a5afa</hash>
        <hash alg="SHA3-512">c78f9d464e4b840e28266658512b1cab0ece1470bef2764deb2dc20ba69b73d526d92a19494ccb87b4408f9235c4294417f2e10ba709469f4bd62d017b9e3cbe</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.apache.org/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCORE</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.2</version>
      <description>Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">040b4b4d8eac886f6b4a2a3bd2f31b00</hash>
        <hash alg="SHA-1">4bfc12adfe4842bf07b657f0369c4cb522955686</hash>
        <hash alg="SHA-256">daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636</hash>
        <hash alg="SHA-512">ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557</hash>
        <hash alg="SHA-384">ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c</hash>
        <hash alg="SHA3-384">628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078</hash>
        <hash alg="SHA3-256">9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807</hash>
        <hash alg="SHA3-512">3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.2?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LOGGING</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/commons/proper/logging/trunk</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>http://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.11?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.11</version>
      <description>The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <hashes>
        <hash alg="MD5">567159b1ae257a43e1391a8f59d24cfe</hash>
        <hash alg="SHA-1">3acb4705652e16236558f0f4f2192cc33c3bd189</hash>
        <hash alg="SHA-256">e599d5318e97aa48f42136a2927e6dfa4e8881dff0e6c8e3109ddbbff51d7b7d</hash>
        <hash alg="SHA-512">d9586162b257386b5871e7e9ae255a38014a9efaeef5148de5e40a3b0200364dad8516bddd554352aa2e5337bec2cc11df88c76c4fdde96a40f3421aa60650d7</hash>
        <hash alg="SHA-384">9ae3d8fd4c38f3af52c76c5f98039109901cb0f70700e6d9999b27cc4b30b188e2688aa4adcf6b846376bc3ca125907a</hash>
        <hash alg="SHA3-384">bd272e22540371e7d834cd897bce9be657293ba9c5584e0d47a4073711dacb524cc59e294e942ffc01613d17ac7d6ac1</hash>
        <hash alg="SHA3-256">90ec34f9701a8b212c65e6167c505ea6417289f910deedcac8517075b8349728</hash>
        <hash alg="SHA3-512">101bc04efae2bd16d7923e61bca922c4a006b0e4b34909e0f8865196cb4df4f4f6269737c17880b4dfd0309cb487b806e88d09c6e1a7dc70237563b3f4312f7f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.11?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CODEC</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/codec/trunk</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar">
      <publisher>Shigeru Chiba, www.javassist.org</publisher>
      <group>org.javassist</group>
      <name>javassist</name>
      <version>3.28.0-GA</version>
      <description>Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple.  It is a class library for editing bytecodes in Java.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1a2dd8c76321cef26cc2669fe70a2557</hash>
        <hash alg="SHA-1">9a958811a88381bb159cc2f5ed79c34a45c4af7a</hash>
        <hash alg="SHA-256">57d0a9e9286f82f4eaa851125186997f811befce0e2060ff0a15a77f5a9dd9a7</hash>
        <hash alg="SHA-512">49d3109104f01efda1ae8a6145fdb91d1b1331587e2981f6cc1a1b991c50af97e8febfea5d9d224a106cab877c1e4850d183eb3c7316b82e62e51b6ca3fc29e8</hash>
        <hash alg="SHA-384">b71fc9564c478edebbf19b4044bb9cfb80996f779685d79f6a779d98ce3823b5aa234b91b9da35317ebf4534e1e65a31</hash>
        <hash alg="SHA3-384">bd7f7f52a05aebf17286e7101cafdcb19eb52f14731ce9ad287c07a14f676a8bbba78238e636d2ff5585a90f02f57b82</hash>
        <hash alg="SHA3-256">bf8cbfa03a6c53bb8aad510a7c6623d5e28f8189295f0dc2a0998993ca8df0d7</hash>
        <hash alg="SHA3-512">30a7c36e4b4089a5586dd0cb0f8cba1260fbed95e221bd623a66b1d07ff9565227d31c0fd0d131cda9d97483441f08e619aa8bbc758c0df66f3345da7b5adf68</hash>
      </hashes>
      <licenses>
        <license>
          <id>MPL-1.1</id>
        </license>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://jira.jboss.org/jira/browse/JASSIST/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-cli/commons-cli@1.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-cli</group>
      <name>commons-cli</name>
      <version>1.4</version>
      <description>Apache Commons CLI provides a simple API for presenting, processing and validating a command line interface.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c966d7e03507c834d5b09b848560174e</hash>
        <hash alg="SHA-1">c51c00206bb913cd8612b24abd9fa98ae89719b1</hash>
        <hash alg="SHA-256">fd3c7c9545a9cdb2051d1f9155c4f76b1e4ac5a57304404a6eedb578ffba7328</hash>
        <hash alg="SHA-512">fa769a08a118141831cd4eaf2ce4f3f65855b8aeee86fbf3e07b4c619facf801f8b55c14c5e56a154cd14f438a8f120bb59a20c1b6be04979501e362f252ca48</hash>
        <hash alg="SHA-384">aa516a360ed41568a618c45df5288daa75c2d2ddb9a9af61324962f2cf534834bb0fb51bf13710709a771f09992febc5</hash>
        <hash alg="SHA3-384">cff9bf72b706076f84b27e705c9f56c4f89ddeeb32672346ec37735534e006f631f0a1a9eecf883f475696376cceca91</hash>
        <hash alg="SHA3-256">ae001ddbe856dfe4395be480cd710615e6759ab122eee9fa909f6bb883b752d2</hash>
        <hash alg="SHA3-512">f4659c0b58616c7f32f0a947b3d94ab5533ca4315e10f009fd2f6092e56942b5c8653f5a0eaef2e3908ffc43363f31fcb53686d1ac40f1b18c7bd305119c8037</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-cli/commons-cli@1.4?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CLI</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/cli/trunk/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-beanutils</group>
      <name>commons-beanutils</name>
      <version>1.9.4</version>
      <description>Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">07dc532ee316fe1f2f0323e9bd2f8df4</hash>
        <hash alg="SHA-1">d52b9abcd97f38c81342bb7e7ae1eee9b73cba51</hash>
        <hash alg="SHA-256">7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a</hash>
        <hash alg="SHA-512">7762b348caecead49038a38a89754ff7d9be6199324315495ba47cf24f52c06faadf9306d925c8fe47c587589a939c82e491e1c730267fdf354243a68c0f96ff</hash>
        <hash alg="SHA-384">dcd3845917b8fb189cf4034b0d7c6d266ec7110f85ffbd2711cdea9eb94b4fa3e1cee9120b484c6a120b82769230ed3a</hash>
        <hash alg="SHA3-384">dfdb8845989be083de807184910124ad7e7e372959b34686cd5f5020f193a2997831ead497b0a5a0233f031aecdf55f6</hash>
        <hash alg="SHA3-256">127a81068335d6ca47f5f5e12d849dc1bc5300b2ad8d3f9b64ca30ff2a76d479</hash>
        <hash alg="SHA3-512">f67405d0a7667adf7cd35cd7416c54e1759380cdb9c8f179a10175058e40292808e17e69d48df4d4d6b5e268c314127cf3ab87af6920a271bb2e6e0df963940d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/BEANUTILS</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/beanutils/tags/BEANUTILS_1_9_3_RC3</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.21</version>
      <description>Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2a713d10331bc4e13459a3dc0463f16f</hash>
        <hash alg="SHA-1">4ec95b60d4e86b5c95a0e919cb172a0af98011ef</hash>
        <hash alg="SHA-256">6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a</hash>
        <hash alg="SHA-512">c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471</hash>
        <hash alg="SHA-384">da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef</hash>
        <hash alg="SHA3-384">6d3dc0198dd523a49fa94e054841aece853577b5c3ea1029fc288ad9ff580ab1b65ea99ddbe58c42125054e8c43be461</hash>
        <hash alg="SHA3-256">37d4a014b50393793d35c70431bd8a1842c197d854c6f174dfa946b9edc2b841</hash>
        <hash alg="SHA3-512">61609f60746406a7cb1ef3f979488beca6674fde208c9025d3fdee115de4767e8a4a1ee38f5bf79ac0104505ddb3558f1feeba5e318d6545647120ac60db6b89</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.21?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar">
      <publisher>ANTLR</publisher>
      <group>org.antlr</group>
      <name>antlr4-runtime</name>
      <version>4.9.3</version>
      <description>The ANTLR 4 Runtime</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">718f199bafa6574ffa1111fa3e10276a</hash>
        <hash alg="SHA-1">81befc16ebedb8b8aea3e4c0835dd5ca7e8523a8</hash>
        <hash alg="SHA-256">131a6594969bc4f321d652ea2a33bc0e378ca312685ef87791b2c60b29d01ea5</hash>
        <hash alg="SHA-512">2c3763a8fbc7af110df5d6bb57692759b23e8bf961a53694c69bde4cd9d8c3a8eaa55cf376ce34c6c4e2035a99d7abf08c6ffa3b75d18a6d93a9c1ca95927ea8</hash>
        <hash alg="SHA-384">62a62dab4a27733a810b97fe5544eb1b5b25d2df83ea8d93802cb0e6fd1b4b3ca5a130c51aa9198deefc30cd0f062841</hash>
        <hash alg="SHA3-384">e2919d471a5b4fa318cd34d4a9fa5a9e1fa4ed37e0ee34c72031f950c447c16df828cbe96635e525859153080b97510b</hash>
        <hash alg="SHA3-256">70c29f56fa10bfccfd47623ca6e9d3625e1b81da7b0e57269def1d6f84c5cd6e</hash>
        <hash alg="SHA3-512">1a80c6cc4e5cd8e1455717e6d9fc3ab7937eb23f907e4189358f4b2f3eb14475689c02a8258419f6956feaf6da0c0c5cdcfb9300f91efef2f5bfbabac092386c</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.antlr.org</url></reference><reference type="issue-tracker"><url>https://github.com/antlr/antlr4/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion</url></reference><reference type="vcs"><url>https://github.com/antlr/antlr4/tree/master</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.gson/gson@2.9.0?type=jar">
      <group>com.google.code.gson</group>
      <name>gson</name>
      <version>2.9.0</version>
      <description>Gson JSON library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">53fa3e6753e90d931d62cb89580fde2f</hash>
        <hash alg="SHA-1">8a1167e089096758b49f9b34066ef98b2f4b37aa</hash>
        <hash alg="SHA-256">c96d60551331a196dac54b745aa642cd078ef89b6f267146b705f2c2cbef052d</hash>
        <hash alg="SHA-512">13ff22a60ee6a72ba0c4e8fe3702b8f3f6be6b67ed4279079a9843f57ad0ca125d4ecc1564ac4e736eab10fb6254d2c011b2c08c514d708be7f8091332ed2c2c</hash>
        <hash alg="SHA-384">fde5b61066a8cdd711874ed42f20cb914e4193f1477456c431fb0ca32d86324414e92b0b2c5696f56d0b9d69521d8dee</hash>
        <hash alg="SHA3-384">314156bb766c2f792317763322a819ef968e5ecc7f1a236ab0bb383426d1bf396e18099edb16f85e572b42c85a6c89ba</hash>
        <hash alg="SHA3-256">5e550f5f719c5f5c4ad04fbe6cd0d7868d6bf0e4184f386e4896e72c4839de3e</hash>
        <hash alg="SHA3-512">a3db5a0129c42598b5ded96cdf75d69c75d4a6b317746c9b7fbf238b2ca78cfb48fb0023ae1a4178bc8da3727ceb0bad6930f8f24624e0be6dbbde00adbb0624</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.gson/gson@2.9.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/google/gson/issues</url></reference><reference type="vcs"><url>https://github.com/google/gson/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.velocity</group>
      <name>velocity-engine-core</name>
      <version>2.3</version>
      <description>Apache Velocity is a general purpose template engine.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e761e6088b946b42289c5d676a515581</hash>
        <hash alg="SHA-1">e2133b723d0e42be74880d34de6bf6538ea7f915</hash>
        <hash alg="SHA-256">b086cee8fd8183e240b4afcf54fe38ec33dd8eb0da414636e5bf7aa4d9856629</hash>
        <hash alg="SHA-512">ec8ccd36d6cefd4325f39d6c215f4177900b7c0fb1e4e96b3c0d9391c033df4d5fb83b7899530f32738afa78c193d4dae700cd5c674954a34e7cf627a4fa1204</hash>
        <hash alg="SHA-384">5aa3f60e17efb01e2bae1d1169da36a55d7b3ede1d90b1f3e1d3984d2b78fa4bbbba2772ac404e9dae7b37812df11f13</hash>
        <hash alg="SHA3-384">5bc7a76a774653896a0b789726a581de3fbcfa40875945e514f5d8c2e972aeb43ffb2ce5c0da6d4a65b2ef442fc56afc</hash>
        <hash alg="SHA3-256">6ff993b508c05170c3dbd65f6080edf5cdb8b8fd2fa7b94f7d64f20a79d3de9c</hash>
        <hash alg="SHA3-512">c44791f0b9e6b3d28717ca56582e2c55bff208aa5bc7bc2cc91003afde0ec0111a55d585c9f09717747ee7e78a688e894b7962fb55a56eaf57413a9c365c567b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=velocity-engine.git</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?general@velocity.apache.org</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.11?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.11</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <hashes>
        <hash alg="MD5">c592f49f703f9b3ab25556559b1ff379</hash>
        <hash alg="SHA-1">68e9a6adf7cf8eb7e9d31bbc554c7c75eeaac568</hash>
        <hash alg="SHA-256">4ee380259c068d1dbe9e84ab52186f2acd65de067ec09beff731fca1697fdb16</hash>
        <hash alg="SHA-512">c1f6b5cb9ac47cfb612423a71b347568f3697cf88018b5808678be5234c50b22888db23cb833b7d8d458d39707ab9e4d839107d1d3306de2e4e422010c95180f</hash>
        <hash alg="SHA-384">80e7831b2b08150b5d05d53b29f1904b298e9194fd02c61989755da04fa2f20e44f6a0f29d13bfde33ce1dbefc7afc52</hash>
        <hash alg="SHA3-384">a62ff933793a247d9dea0b975995bfc0ecf8c6d2fcf4e38fae09b49bcd75428acaca8bc1fa46202a5e9ab6762bd352d5</hash>
        <hash alg="SHA3-256">e2b825a32979ce00595cb3f7dd5cf407cb179fd93f7786a061bf1c13762c4779</hash>
        <hash alg="SHA3-512">833272210e60e151749bb86ed2ac29b1799974f925f1eb392fbbc6a11e1fc8de1bb2a57ef86777c0095ea13834af7774286b5364b1d24000622a9ece96bedc7f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.11?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.30</version>
      <description>The slf4j API</description>
      <hashes>
        <hash alg="MD5">f8be00da99bc4ab64c79ab1e2be7cb7c</hash>
        <hash alg="SHA-1">b5a4b6d16ab13e34a88fae84c35cd5d68cac922c</hash>
        <hash alg="SHA-256">cdba07964d1bb40a0761485c6b1e8c2f8fd9eb1d19c53928ac0d7f9510105c57</hash>
        <hash alg="SHA-512">e5435852569dda596ba46138af8ee9c4ecba8a7a43f4f1e7897aeb4430523a0f037088a7b63877df5734578f19d331f03d7b0f32d5ae6c425df211947b3e6173</hash>
        <hash alg="SHA-384">d8061c2f86f33b813cb86d3d54c615d26aa89afb43cabf8d828ff6a3f4f8e63d4a3b27355033f67ba60c2cdf2558d9de</hash>
        <hash alg="SHA3-384">9f0fcb3bab20dce3b4cd094145976ce7c9da8702c891ff6f3882072c5a0acc763aeb11c446ef08a80e1bec695b11cb60</hash>
        <hash alg="SHA3-256">7fd51c94b174d462a8c7ce103ea7b1858e2c0943da8d21b4407f71a250377c8e</hash>
        <hash alg="SHA3-512">a51d2d7d68a41e0ef1430c90d5b4f182d34be2233b92ad6fc32c1def5504b5089afcbda3349fd401df5d8accdbb0571096e91b2badadcec275bcf3bb0cacc7f7</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>javax.xml.bind</group>
      <name>jaxb-api</name>
      <version>2.3.1</version>
      <description>JAXB (JSR 222) API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bcf270d320f645ad19f5edb60091e87f</hash>
        <hash alg="SHA-1">8531ad5ac454cc2deb9d4d32c40c4d7451939b5d</hash>
        <hash alg="SHA-256">88b955a0df57880a26a74708bc34f74dcaf8ebf4e78843a28b50eae945732b06</hash>
        <hash alg="SHA-512">93a47b245ab830d664a48c9d14e86198a38809ce94f72ca66b3d68746ae1d7b902f6fef2d1ac1a92c01701549ae80a07db69bd822ffd831a95d8dbffad435790</hash>
        <hash alg="SHA-384">1eb2d7f307bda8cbf6a4ab5b2b97d830d33ca48ad94eb4bb1cbce860c54fca96285dbcb1ce9b164dbf37d4475f9a198f</hash>
        <hash alg="SHA3-384">8df7409d3f60888f3a80f4d49af66c2cab6dc9f00e79c87c17703faad19d8ba6c8fc96ad897434170ce2686952921cdd</hash>
        <hash alg="SHA3-256">41338683257d5ecead579ccc137bdef7bc4fea685d039a3d894e1d6730425e1d</hash>
        <hash alg="SHA3-512">3371a96171f69876b0e6b8354674d252680e6d52c509a2645b1a0b0d7f9e176274bde6c89edb40986264733ffb6794cb7b2cba417666b1e82075bd4fd51197b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.oracle.com/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/jaxb-spec/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/jaxb-spec.git</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar">
      <publisher>Oracle</publisher>
      <group>javax.activation</group>
      <name>javax.activation-api</name>
      <version>1.2.0</version>
      <description>${project.name}</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">5e50e56bcf4a3ef3bc758f69f7643c3b</hash>
        <hash alg="SHA-1">85262acf3ca9816f9537ca47d5adeabaead7cb16</hash>
        <hash alg="SHA-256">43fdef0b5b6ceb31b0424b208b930c74ab58fac2ceeb7b3f6fd3aeb8b5ca4393</hash>
        <hash alg="SHA-512">8ee0db43ae402f0079a836ef2bff5d15160e3ff9d585c3283f4cf474be4edd2fcc8714d8f032efd72cae77ec5f6d304fc24fa094d9cdba5cf72966cc964af6c9</hash>
        <hash alg="SHA-384">d38a6af7ed00f13de8b46d49b9592af9b67adf3df47ddae5e4672f989f3f39101d446a77d1c11319acf8ff0a5b4feedf</hash>
        <hash alg="SHA3-384">cfee76de5976d5994758a06113368092f09b0729d753b99969d6a5ec32919428bd7c270c98cbbc682ff8ebcf2b93fd8d</hash>
        <hash alg="SHA3-256">aff48d0f28d8a99690c5a84c3fffdb3775452d5387e5698f4c9028c92a3b4888</hash>
        <hash alg="SHA3-512">0507ece74b3147de60a830071bd434569c82e03f414a2b7f0d8a225dda36720d2e2194799cdc04def1909fdec21059b67c518bb9162f7f605764d542194e721d</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.oracle.com</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/activation/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/activation</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.steady/lang-java@3.2.5?type=jar">
      <group>org.eclipse.steady</group>
      <name>lang-java</name>
      <version>3.2.5</version>
      <purl>pkg:maven/org.eclipse.steady/lang-java@3.2.5?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bitbucket.mstrobel/procyon-compilertools@0.5.36?type=jar">
      <group>org.bitbucket.mstrobel</group>
      <name>procyon-compilertools</name>
      <version>0.5.36</version>
      <description>Procyon</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3d9dd40aa03a8e9e601c5d4ac62df9a7</hash>
        <hash alg="SHA-1">14492dac5adad2ec563d0a491a593f9237fc8851</hash>
        <hash alg="SHA-256">9f737863b5b577746d7594b45187870bf8184ddb3657ac71817ddc950cf6bff5</hash>
        <hash alg="SHA-512">734cef113f582f9fa189bfce0cd5545cf51acbe51aa2a8b9d7c9fe0ab31e646e2665aa5192edc1f08b593dc2ffaef6d14ea582ca0caced5e520a9c0f14a4684a</hash>
        <hash alg="SHA-384">655af091a84d1f55d3231f06438ae03788f3bafb16bdd7b953679782806e515cf17f980d70fc9c94daa3463e9f2eb3e2</hash>
        <hash alg="SHA3-384">a6d43198b7c5483246d6e5652517edb8d36a75a3351dbdaa72936922ad41681bf65599ac5845d7a2a05a089226948afd</hash>
        <hash alg="SHA3-256">8bd30c5e0ecd79669ce6f0205e0843444e3fbe025528c0faba1e25c9d3f179ae</hash>
        <hash alg="SHA3-512">2d4bf533b77a2b97fddadc9a82d492fa41de6e400da462ce8c43f33eff4a6f52030e628bded38a9b49f6b5d80b555a3a414439d4bdd9ae7636bd8f8e1c9ee866</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.bitbucket.mstrobel/procyon-compilertools@0.5.36?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://bitbucket.org/mstrobel/procyon/issues</url></reference><reference type="vcs"><url>https://bitbucket.org/mstrobel/procyon</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bitbucket.mstrobel/procyon-core@0.5.36?type=jar">
      <group>org.bitbucket.mstrobel</group>
      <name>procyon-core</name>
      <version>0.5.36</version>
      <description>Procyon</description>
      <hashes>
        <hash alg="MD5">f796c4b755f7b3f2b84ff8f26781abf2</hash>
        <hash alg="SHA-1">4f05cad04f40e6233e546b33b8498e60568142b9</hash>
        <hash alg="SHA-256">5123b7db09bea2176fd9ec09e3cab05c728e4f3151fc47dabb0b5d7c8e964896</hash>
        <hash alg="SHA-512">f0ee26e9e19e855578a3d69fdb1d2078ee707cd9f832845fd5defaa587ba8a188fa9302a0c922baad7fd22d66c89c71bfc80633bf43d2383f78d24118683d22d</hash>
        <hash alg="SHA-384">aae8159d080a3a72ecfb5f0eb40f761b79c9627dbc3e59a66125b2aa996cd33c1638ccc2c89cf604a635196982ace8e5</hash>
        <hash alg="SHA3-384">5380beeed3e40ad0caa9637a11972f52e0de71fe3226a58b22a9b2a251e5f586e026cfeafd3ed56c1f9943a7067573cc</hash>
        <hash alg="SHA3-256">6868cbda5b47a9c7658bd005a487f3c4f1c332ee9ea6207caf7878e77a8db7de</hash>
        <hash alg="SHA3-512">f5db5c0f5810ccfda419eebf74036574e235fcf18cd3a021836409d622fb042b5851cc287a7b5a8d4e8dffd629ae6d4cb421135fc7ab230f32626097bef4b4ca</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.bitbucket.mstrobel/procyon-core@0.5.36?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://bitbucket.org/mstrobel/procyon/issues</url></reference><reference type="vcs"><url>https://bitbucket.org/mstrobel/procyon</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/ch.uzh.ifi.seal/changedistiller@0.0.4?type=jar">
      <publisher>Software Architecture and Evolution Lab, Department of Informatics, UZH</publisher>
      <group>ch.uzh.ifi.seal</group>
      <name>changedistiller</name>
      <version>0.0.4</version>
      <description>Fine-grained source code change extractor</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">337fe70072fc60408baa49d221f16ff1</hash>
        <hash alg="SHA-1">96312300e01199cb6a1b0fa44be357738eaf2b0f</hash>
        <hash alg="SHA-256">a8d66b2c4f9bef28f31eaac0ff856d904ca726f6f824f8f2486cfa57a2029663</hash>
        <hash alg="SHA-512">7f07bfaf939b3c1bdec8456cd603b310a2cce4b11f745e02ea409174802a5b4469d13dedb04d5223056b9c8d5472b8320b03b17736456154b696eefd71901421</hash>
        <hash alg="SHA-384">351406f18d4bd876e53505b87040dcb78a7faec033e74d918a800bc583b8c462713726e401fe859fdeeaab47b83d432a</hash>
        <hash alg="SHA3-384">cedd74d043073d7b46af4ca2c296b4fb4ed97498be80e66a35a328e3d19c277cf14b9b31d59e22820b2a78d0450fa542</hash>
        <hash alg="SHA3-256">3a2256eee74b209dd73c0971760cb87c637f18a7ff61e6b380259ab25ea14bbf</hash>
        <hash alg="SHA3-512">e39fb8c71216e3d4efb3864d64dddfbba12bed8cb53fa3f2080dd1e4a89015ff0ef11a7fbcc75fbac3e9d5b9b2bb6b9c055cd60096a56fd90762a100b54a4335</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/ch.uzh.ifi.seal/changedistiller@0.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://seal.ifi.uzh.ch</url></reference><reference type="build-system"><url>https://seal-team.ifi.uzh.ch/jenkins/job/changedistiller/</url></reference><reference type="issue-tracker"><url>https://bitbucket.org/sealuzh/tools-changedistiller/issues/</url></reference><reference type="vcs"><url>https://bitbucket.org/sealuzh/tools-changedistiller/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.inject.extensions/guice-assistedinject@4.2.3?type=jar">
      <publisher>Google, Inc.</publisher>
      <group>com.google.inject.extensions</group>
      <name>guice-assistedinject</name>
      <version>4.2.3</version>
      <description>Guice is a lightweight dependency injection framework for Java 6 and above</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">acb899a13864c3e0994f3342b7fdc604</hash>
        <hash alg="SHA-1">acbfddc556ee9496293ed1df250cc378f331d854</hash>
        <hash alg="SHA-256">f27810a4b60663fa2d06b8423eda402fa9f8553bfbfde81bf0f0f1f2876b1385</hash>
        <hash alg="SHA-512">4c66a210eedb335c37dc8e484aa06c40aee52ceade3a9de9693298a21931ad93f838f0097bbe6086f9d263d74bfa5cdffd140f8f95bddc1d65192990b400a0ad</hash>
        <hash alg="SHA-384">1dacdc09908d8065681af142661ca1ab099410637e486efbabae79f54ca78620f7b00afe718fe72e7b5834553f7af83d</hash>
        <hash alg="SHA3-384">dc202e9a9d9e57b5778c7198ec9a18ec321b4093052f3289ff5d8a876e2d137ea12509b2764efaaa2a62d955b8f56ccc</hash>
        <hash alg="SHA3-256">bd1a95aadf69577bc3891c92a2c414c143dfef29606532c72d3f3533e4565ce2</hash>
        <hash alg="SHA3-512">023b815da05a0cbbd0dcabba487dfa049d4e7427b12aa29460a6c859e64635d3885befbae1c9372c7108941cbf7ec84fd80ed0c55dd3d2ba484fa75300dd1166</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.inject.extensions/guice-assistedinject@4.2.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.google.com</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guice</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guice/issues/</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/google-guice/topics</url></reference><reference type="vcs"><url>https://github.com/google/guice</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.inject/guice@4.2.3?type=jar">
      <publisher>Google, Inc.</publisher>
      <group>com.google.inject</group>
      <name>guice</name>
      <version>4.2.3</version>
      <description>Guice is a lightweight dependency injection framework for Java 6 and above</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4209f9e543a157db0f194688760409c9</hash>
        <hash alg="SHA-1">2ea992d6d7bdcac7a43111a95d182a4c42eb5ff7</hash>
        <hash alg="SHA-256">a21e50ffbb67e7adc5b46cf7b9e1a480f1e0f04fd4201ddb1c65da91290601af</hash>
        <hash alg="SHA-512">1e811c276d3d953d7e2e6cc2bd33af16645f87e864713db0d70fc2dc7110483c8f40525f2f0f403344e5653bb8375ccdec9fda0c0ba6c42114ac482cba50960d</hash>
        <hash alg="SHA-384">7e5decbfc09816e1c3d3f5fadce2fd9df9999cad9c30a8af1eb133dd9d1fee15a6153783d18704efc7f538ba4dc48dc3</hash>
        <hash alg="SHA3-384">df25f6a1e14c9fedff262d4f867a3489e592f8216334630d600e7598034448242e7f4ff75c8fcef2c08f287918697cf5</hash>
        <hash alg="SHA3-256">73c2a852e4a353b30877e77b4514f0c21c1eecb484558c60783e4c566c9b128e</hash>
        <hash alg="SHA3-512">84fabf13bbd424d2c65ed9d211e45be224788c1fee5c461c0fe40c8a25989f503238094bc14b8e453583bf6b4d3f3152ae900393304d1b9ff07efaa45afc156c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.inject/guice@4.2.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.google.com</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guice</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guice/issues/</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/google-guice/topics</url></reference><reference type="vcs"><url>https://github.com/google/guice</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar">
      <group>javax.inject</group>
      <name>javax.inject</name>
      <version>1</version>
      <description>The javax.inject API</description>
      <hashes>
        <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash>
        <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash>
        <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash>
        <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash>
        <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash>
        <hash alg="SHA3-384">fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d</hash>
        <hash alg="SHA3-256">5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6</hash>
        <hash alg="SHA3-512">fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://code.google.com/p/atinject/source/checkout</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar">
      <group>aopalliance</group>
      <name>aopalliance</name>
      <version>1.0</version>
      <description>AOP Alliance</description>
      <hashes>
        <hash alg="MD5">04177054e180d09e3998808efa0401c7</hash>
        <hash alg="SHA-1">0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8</hash>
        <hash alg="SHA-256">0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08</hash>
        <hash alg="SHA-512">3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1</hash>
        <hash alg="SHA-384">4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783</hash>
        <hash alg="SHA3-384">2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1</hash>
        <hash alg="SHA3-256">d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0</hash>
        <hash alg="SHA3-512">830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
        </license>
      </licenses>
      <purl>pkg:maven/aopalliance/aopalliance@1.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@27.1-jre?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>27.1-jre</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, google's collections, io classes, and much
    much more.</description>
      <hashes>
        <hash alg="MD5">1a986c6fa05685f173ad9340b6ab6454</hash>
        <hash alg="SHA-1">e47b59c893079b87743cdcfb6f17ca95c08c592c</hash>
        <hash alg="SHA-256">4a5aa70cc968a4d137e599ad37553e5cfeed2265e8c193476d7119036c536fe7</hash>
        <hash alg="SHA-512">5c32a58148c3b91577cd6d335d61a1994041a2a5c77a240303ba6e786c895336400f6fd449eab0802594bf47c17985c5587ab87c3c4b628bfc1d7090ddc0b006</hash>
        <hash alg="SHA-384">6502453d9c1a46ffd35d7ffd848f665cedd19a9a169c2835ac38482ca7d19826b4021ad3c10dee06512099fec04d7153</hash>
        <hash alg="SHA3-384">e1c1d024464ba3797569ba45375b6f84f5d81a5d5970b7cb43529e565d2668d283ace61ad86e839703e0726dea5ccb74</hash>
        <hash alg="SHA3-256">e3a4c9886f312974a9274575c7c8315bc9215736b437513297d06a85143ec2f7</hash>
        <hash alg="SHA3-512">c90c478a94dbbaa16fcb11815c2c727feb33221773fe94914aab25f07744d24e060be6f90e52955c51b40d5f4bd09fed0ca531555d581c8acb2dd95c9a052c5c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@27.1-jre?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar">
      <group>com.google.guava</group>
      <name>failureaccess</name>
      <version>1.0.1</version>
      <description>Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes is conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).</description>
      <hashes>
        <hash alg="MD5">091883993ef5bfa91da01dcc8fc52236</hash>
        <hash alg="SHA-1">1dcf1de382a0bf95a3d8b0849546c88bac1292c9</hash>
        <hash alg="SHA-256">a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26</hash>
        <hash alg="SHA-512">f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae</hash>
        <hash alg="SHA-384">67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f</hash>
        <hash alg="SHA3-384">1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101</hash>
        <hash alg="SHA3-256">ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0</hash>
        <hash alg="SHA3-512">52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar">
      <group>com.google.guava</group>
      <name>listenablefuture</name>
      <version>9999.0-empty-to-avoid-conflict-with-guava</version>
      <description>An empty artifact that Guava depends on to signal that it is providing
    ListenableFuture -- but is also available in a second "version" that
    contains com.google.common.util.concurrent.ListenableFuture class, without
    any other Guava classes. The idea is:

    - If users want only ListenableFuture, they depend on listenablefuture-1.0.

    - If users want all of Guava, they depend on guava, which, as of Guava
    27.0, depends on
    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
    version number is enough for some build systems (notably, Gradle) to select
    that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
    conflict with the copy of ListenableFuture in guava itself. If users are
    using an older version of Guava or a build system other than Gradle, they
    may see class conflicts. If so, they can solve them by manually excluding
    the listenablefuture artifact or manually forcing their build systems to
    use 9999.0-....</description>
      <hashes>
        <hash alg="MD5">d094c22570d65e132c19cea5d352e381</hash>
        <hash alg="SHA-1">b421526c5f297295adef1c886e5246c39d4ac629</hash>
        <hash alg="SHA-256">b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99</hash>
        <hash alg="SHA-512">c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f</hash>
        <hash alg="SHA-384">caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5</hash>
        <hash alg="SHA3-384">e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f</hash>
        <hash alg="SHA3-256">1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f</hash>
        <hash alg="SHA3-512">6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@2.5.2?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>2.5.2</version>
      <description>Checker Qual is the set of annotations (qualifiers) and supporting classes
        used by the Checker Framework to type check Java source code.  Please
        see artifact:
        org.checkerframework:checker</description>
      <hashes>
        <hash alg="MD5">04acc78b24bbd365423da357da003cf0</hash>
        <hash alg="SHA-1">cea74543d5904a30861a61b4643a5f2bb372efc4</hash>
        <hash alg="SHA-256">64b02691c8b9d4e7700f8ee2e742dce7ea2c6e81e662b7522c9ee3bf568c040a</hash>
        <hash alg="SHA-512">fb32e3893f9ebc956ef99066b219a8fc8049b47b80a7253cd89b7faadf0a2fa14d60b52dd5c2f4aaeb1db0359f49fec9e29d3616bd314ec8c82db1c657be8cd2</hash>
        <hash alg="SHA-384">62f90d15efb90c3691a577ca58c4b48209e294fda2cb9cf0873af5beb4f79dc4b33958474189d824853b768d2a19add9</hash>
        <hash alg="SHA3-384">506dd2e0c27cd480f0cb8775a3d9ba486d299ab6385c3c8354b94552531a47ccd379c2e68a63889d80474c287df657ea</hash>
        <hash alg="SHA3-256">381f414c86b36e9e843565b70cff4aa5ed4aea5f265bacb330343e46015b5135</hash>
        <hash alg="SHA3-512">b9bdbc3632eb85185408682e1107b886a374b21c77117d75cbecfb812b1c486daad89bd9461512c2b7bf853c82a4bd225d45846909934291dc75349ceb369e22</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@2.5.2?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/typetools/checker-framework.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.2.0?type=jar">
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.2.0</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <hashes>
        <hash alg="MD5">416757b9e6ba0563368ab59e668b3225</hash>
        <hash alg="SHA-1">88e3c593e9b3586e1c6177f89267da6fc6986f0c</hash>
        <hash alg="SHA-256">6ebd22ca1b9d8ec06d41de8d64e0596981d9607b42035f9ed374f9de271a481a</hash>
        <hash alg="SHA-512">8f5f13fac4c40d680a1f062c609aa598e7585684af37d695357738935fc0683ddcb94c880dddd03e78b1db071c2e5cebd054a061f8f24322c5ffa43aca34a859</hash>
        <hash alg="SHA-384">df58adbafe449fa2e5ed4dbd498ab7a80456f100430bcba2083e2362c0818449ccd63a64c6ee3703373eeeb4c6fa8da7</hash>
        <hash alg="SHA3-384">a65aa130a3dbe1d7042cd1d2352a443a14b87ed99392700bb3f59e7cb3083d7824afdbb3cf9ee1c9f2995231b371c17a</hash>
        <hash alg="SHA3-256">06741fae4020e4cb57c8f3277eb5c8e7d0b9caeefe337df2c1e3ca20c6fd9487</hash>
        <hash alg="SHA3-512">52285027d66e6ae3189d3d308d4dde0dcdf203b9073873411dd284d9fcf1f2abe7ffe3168ff0814db4a672d4dacdd27150009b0f8e5bc2f48e0f663e4ecb5953</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.2.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/google/error-prone</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar">
      <group>com.google.j2objc</group>
      <name>j2objc-annotations</name>
      <version>1.1</version>
      <description>A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.</description>
      <hashes>
        <hash alg="MD5">49ae3204bb0bb9b2ac77062641f4a6d7</hash>
        <hash alg="SHA-1">ed28ded51a8b1c6b112568def5f4b455e6809019</hash>
        <hash alg="SHA-256">2994a7eb78f2710bd3d3bfb639b2c94e219cedac0d4d084d516e78c16dddecf6</hash>
        <hash alg="SHA-512">a4a0b58ffc2d9f9b516f571bcd0ac14e4d3eec15aacd6320a4a1a12045acce8c6081e8ce922c4e882221cedb2cc266399ab468487ae9a08124d65edc07ae30f0</hash>
        <hash alg="SHA-384">8942363710e7473635a2c77ff82db8af1915cb6ac8429851b4acfa04f059183f8e3444dedff75a7da02698f2ee22a181</hash>
        <hash alg="SHA3-384">a9906146d76704f64b1a1aad3d80be86e0d08a987fdb63d4d8d0399937e7e94076d9878a14593fb4465f3a5fccec0df5</hash>
        <hash alg="SHA3-256">275370eeb5f02c15358168ea134c4eab1afed8d27750a8a326b9f9f506dfc9f2</hash>
        <hash alg="SHA3-512">d9e2a3943373e1eab933b45f49997b24e01466eb99a177c40f21c7107c9f21ebb135e14d191b0a5b699e3985d20de8e87662e92c0bf59e5e054d3da85fd777dd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://svn.sonatype.org/spice/tags/oss-parent-7</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17?type=jar">
      <publisher>MojoHaus</publisher>
      <group>org.codehaus.mojo</group>
      <name>animal-sniffer-annotations</name>
      <version>1.17</version>
      <description>Animal Sniffer Parent POM.</description>
      <hashes>
        <hash alg="MD5">7ca108b790cf6ab5dbf5422cc79f0d89</hash>
        <hash alg="SHA-1">f97ce6decaea32b36101e37979f8b647f00681fb</hash>
        <hash alg="SHA-256">92654f493ecfec52082e76354f0ebf87648dc3d5cec2e3c3cdb947c016747a53</hash>
        <hash alg="SHA-512">94d0335cdf94aa547ad6c0c7e44b8e3bda736ce19d941dd0faa3a45390e5ab2d122022ff4e07bb9aaedd41ffbd9500f324e0a9e42f4c5441bce0774f44872f45</hash>
        <hash alg="SHA-384">58c3caa2ed13416384c519aa52b26c8b93cb43ca6921027c8ac9f321d77979a01634e42de4dd645edc687c266ac58748</hash>
        <hash alg="SHA3-384">6dc341f4b80b80da2751d9284ca61852333863a36373aed33a59b80c3771d3113fe4ac550923a282b1c4d3bd616ad8e7</hash>
        <hash alg="SHA3-256">022761cb42cb64b957756b985165ed9f7d3978c4670f770599aed938b100a46e</hash>
        <hash alg="SHA3-512">730314b9682777eb64897e6033db857d9924bb749c473fe2111e03b9c1ed2788359c983a07b0e262552b3390104239ac1df42cffc3d0053b14955d1a36ee3244</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://travis-ci.org/mojohaus/animal-sniffer</url></reference><reference type="issue-tracker"><url>https://github.com/mojohaus/animal-sniffer/issues</url></reference><reference type="vcs"><url>https://github.com/mojohaus/animal-sniffer</url></reference><reference type="website"><url>http://www.mojohaus.org</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jdt.core.compiler/ecj@4.6.1?type=jar">
      <group>org.eclipse.jdt.core.compiler</group>
      <name>ecj</name>
      <version>4.6.1</version>
      <description>Eclipse JDT Core Batch Compiler</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">127e660140c0b17ef651295287102555</hash>
        <hash alg="SHA-1">5555607add54eb79c5a0729134e663fe2e6300c2</hash>
        <hash alg="SHA-256">9cddda75f4a1b4469e73f44e7b61a3e897d0f657df4797f9106ffe88c4eeade0</hash>
        <hash alg="SHA-512">b406977208bb0ee9461089c7356b1c3a13b3487c11542d0a131049ba155b34aaf77a85cb0aff697d801fbf16b0f8469158f0e83cff30a5575ae90195839a44fd</hash>
        <hash alg="SHA-384">b90ec909392cc5edadb93199fdba6e577881e6525d5c1c8248b66a6116d6e7830956871d375679c8786c38fb8b2676e0</hash>
        <hash alg="SHA3-384">1e8b6348c0745c6f35f39ad0acb554c94aa3db2bdaa49a9627323b259e815e79b0a430903d25eecf373f027ff6905893</hash>
        <hash alg="SHA3-256">ece30e4b3bacc3f669dcc362b260af6a8fbe2ccb9c2cb9cf86f3494c4d4c8b86</hash>
        <hash alg="SHA3-512">1ecdba85ff89adbadf5ca3e2d1120322d3cc39639f56634c7b17c19d5a4d6bda5df4ebbe954af347b5282f439f2aeddcf6966d5fa0fe8dd174309716ce7f9fca</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jdt.core.compiler/ecj@4.6.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://dev.eclipse.org/viewcvs/index.cgi/org.eclipse.jdt.core/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.12.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">19fe50567358922bdad277959ea69545</hash>
        <hash alg="SHA-1">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>
        <hash alg="SHA-256">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>
        <hash alg="SHA-512">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>
        <hash alg="SHA-384">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>
        <hash alg="SHA3-384">8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def</hash>
        <hash alg="SHA3-256">18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c</hash>
        <hash alg="SHA3-512">fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.11.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3b4b7ccfaeceeac240b804839ee1a1ca</hash>
        <hash alg="SHA-1">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>
        <hash alg="SHA-256">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>
        <hash alg="SHA-512">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>
        <hash alg="SHA-384">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>
        <hash alg="SHA3-384">80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d</hash>
        <hash alg="SHA3-256">5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c</hash>
        <hash alg="SHA3-512">7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.21?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.21</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c9be56284a92dcb2576679282eff80bf</hash>
        <hash alg="SHA-1">139535a69a4239db087de9bab0bee568bf8e0b70</hash>
        <hash alg="SHA-256">1d5aeb6bd98b0fdd151269eae941c05f6468a791ea0f1e68d8e7fe518af3e7df</hash>
        <hash alg="SHA-512">50024056475f4a4d0e2169c765ad1d8bf256ebef4cd0768f7e2b62833771a8ebb1ceab9bb47f5e6b582001a6099292598b7033496e8236f2a4fff4a2a5fffe00</hash>
        <hash alg="SHA-384">70c444a1a034b797742a7cb0ab5e88478370831f569ed66a87d77cc60b2387ac6de466585c90697e4d86af374457839c</hash>
        <hash alg="SHA3-384">2f93b26cec52b7813f2fc2e83f7b15cab3d1a2dbb870ed7f3e619eb1c9c930eb5e229f93a1a74889864ba46a863354f5</hash>
        <hash alg="SHA3-256">664155ed0e93b5c47afc2685c824543c723cceabe66db5ac36aca465df39acd0</hash>
        <hash alg="SHA3-512">56a7903974dad1396cc95c7c56a6f075a792df6924aa542f9c6a365ef74e95b3a18b86253b1ffc69cb0a4df5ff2005cfc2f8dfa8f7a7daee7c14e85db416184f</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.21?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.steady/lang-java-reach@3.2.5?type=jar">
      <group>org.eclipse.steady</group>
      <name>lang-java-reach</name>
      <version>3.2.5</version>
      <purl>pkg:maven/org.eclipse.steady/lang-java-reach@3.2.5?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/com.ibm.wala/com.ibm.wala.core@1.4.3?type=jar">
      <group>com.ibm.wala</group>
      <name>com.ibm.wala.core</name>
      <version>1.4.3</version>
      <description>Core WALA analysis libraries</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8515a552f88d7a2976e99efa3f950ed6</hash>
        <hash alg="SHA-1">60cd6d68dcdd9e9fb84b23717f7e61089b2fe925</hash>
        <hash alg="SHA-256">262eb3ea8c0dc76578587e5761bb3dd29185bc14f5a9663155479cc1bba96dd0</hash>
        <hash alg="SHA-512">4e5de93aec1deae640b6cff074cf89e2aaae4a309d3f21429f357526bdd2db9b0d317943f0af938984bc2cd9def6f0493461c8b692c6a61cb19eaef3fbe86b73</hash>
        <hash alg="SHA-384">858afdd29f63aa3ffbbafffeea301ca0bdf7982689d161e7d9aee94b82fb3267bfec482a888ddc2f6234acb7619572f5</hash>
        <hash alg="SHA3-384">4b92182dacf6da09dc1fbd2035142977195863da701858442453bc8b5f593d2bb09b6409c07b147907426f2e629d5fe4</hash>
        <hash alg="SHA3-256">6e1a55fe79b451b2605dd6774d36553b4522a0eed6c1bc514fe4cc81ad69cbca</hash>
        <hash alg="SHA3-512">86bf3b99f7f7e130c4a2edc0e9381d6732787734bc3196ed2add4838f21f3ce19e5264c7add5544b432aceccfae39024d019366c0a379420dcbf58876c7c2558</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.ibm.wala/com.ibm.wala.core@1.4.3?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/com.ibm.wala/com.ibm.wala.util@1.4.3?type=jar">
      <group>com.ibm.wala</group>
      <name>com.ibm.wala.util</name>
      <version>1.4.3</version>
      <description>Utility library included with the T. J. Watson
  Libraries for Analysis (WALA).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1a47f9f8198e6451c1f233c4b91adf6e</hash>
        <hash alg="SHA-1">d6e16b869e0d7b072b74443ef3806a1845b5eee9</hash>
        <hash alg="SHA-256">c2c1526c208f7efac0eb2641163493a65e4740327ed2bd81ba070e5679b911db</hash>
        <hash alg="SHA-512">f445df5477232cdda81853af64efd3dfe0b6765390e865bd72a7ec674fd9e4df8c56ffd0ec49773a779b841fae321af76144538031bdea18e7c648ab07d63ce5</hash>
        <hash alg="SHA-384">eff0bb3fd3daf4217af8ab6cd097b2ecf27978bac642966072d949de482116d4f9cbb32ac7bdca70079f63a9a67fe8c8</hash>
        <hash alg="SHA3-384">7ab3dbbd1752f761fb01f94ad5f70737950d46537eb5ce5c48f1af1b853d6e325c4b687e967c648fd37e1a06613aab2a</hash>
        <hash alg="SHA3-256">718a518f6c11f3689c69dd8284f6cfac3b2fadf2efbb61f6813a9b1d559788a5</hash>
        <hash alg="SHA3-512">5043a1f14422a21cf376a244d0af8a3e2af1c7497c773688f8a033693641106d2a60b990fccce65578e5eae81c11502d90e8b6103faa52b827e0e7974b6954f1</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.ibm.wala/com.ibm.wala.util@1.4.3?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/com.ibm.wala/com.ibm.wala.shrike@1.4.3?type=jar">
      <group>com.ibm.wala</group>
      <name>com.ibm.wala.shrike</name>
      <version>1.4.3</version>
      <description>WALA Shrike library for bytecode reading and instrumentation</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">cd4e627005f49b2b175c4a4488b3a2d6</hash>
        <hash alg="SHA-1">7db1a2333202adeb6f454e1c0642467262eb8282</hash>
        <hash alg="SHA-256">49de6ec88c24c36be523ad40e3caf2340d0a263bdf0b7d513560718f00791942</hash>
        <hash alg="SHA-512">8c3f6e3dc399ddb0336e48f4a24a5f08aeaa45ade4eb04b4712253aa54ea37369cca55257a0bc8c87a0176b9e74d0d0d856621d8893f7f7084f4ada99f364dd4</hash>
        <hash alg="SHA-384">04cdf8f733907efed7d0562fc3b244e7b2571834d3b3c901ce180165228d27243b0fbc83f19dc736d2d82349f460780b</hash>
        <hash alg="SHA3-384">e849507937c6ead2bb62526c1b4f85910f78a037f4c311c2ff4116120c9765eb7f9dddbb031ffe0c74fa8ec3b3ff4245</hash>
        <hash alg="SHA3-256">a1390d915c61ee5c53c32f7d970f97827c94e2c8b793fe397c361bd13a4f034f</hash>
        <hash alg="SHA3-512">f8466ad6d6fc5b8df235506313cf209c059b6e3ec4486bd52b0e093cba3f15d960568572c6b641730de804ef69d658776281d322a4ba7a0c66bdf40db98966b3</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.ibm.wala/com.ibm.wala.shrike@1.4.3?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.steady/lang-java-reach-wala@3.2.5?type=jar">
      <group>org.eclipse.steady</group>
      <name>lang-java-reach-wala</name>
      <version>3.2.5</version>
      <purl>pkg:maven/org.eclipse.steady/lang-java-reach-wala@3.2.5?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.steady/lang-java-reach-soot@3.2.5?type=jar">
      <group>org.eclipse.steady</group>
      <name>lang-java-reach-soot</name>
      <version>3.2.5</version>
      <purl>pkg:maven/org.eclipse.steady/lang-java-reach-soot@3.2.5?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/ca.mcgill.sable/soot@4.1.0?type=jar">
      <publisher>Sable</publisher>
      <group>ca.mcgill.sable</group>
      <name>soot</name>
      <version>4.1.0</version>
      <description>A Java Optimization Framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1518cd8d896459853d074a1de5f51046</hash>
        <hash alg="SHA-1">aef5d705862a93daa568c33182ff3fbdc7ee8c16</hash>
        <hash alg="SHA-256">72a83c14a2ba2a82ab9b86c70c41e8e06325de5f98caba276217cde8588f8b46</hash>
        <hash alg="SHA-512">7976118ffb65a52eee50b6c015f4f41644e36c9229a6037c39a62444d8c37909f2a4ab4dae004c1f4568aaf33cc2c4a62ffc663b67250c25ef96ab78df55f74f</hash>
        <hash alg="SHA-384">b829a937260f37fb7bf146b43bdb0ec08b8f084fe7e79d573f165f1b3b4360b734eb99a278d352868ca0ed347c170998</hash>
        <hash alg="SHA3-384">9edf61ca7eee373d915b28a5f96443da884e4498eea0da131bc65782993104f106e6e5bf782ae171a40b2e0ca1d76dcf</hash>
        <hash alg="SHA3-256">f0bd5cc859459b604462617631d48f305b68ba9e4ba4bf85e8c67ac01d604e82</hash>
        <hash alg="SHA3-512">63e84e4d0e99be426c66381dfdc1525d1289a86c3e4099d1bad491c607d6bbd19d160c9fc1b4469ef34512174102877e5fa918c871ed7a00874e3270dccec821</hash>
      </hashes>
      <licenses>
        <license>
          <name>GNU LESSER GENERAL PUBLIC LICENSE 2.1</name>
          <url>https://www.gnu.org/licenses/lgpl-2.1.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/ca.mcgill.sable/soot@4.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.sable.mcgill.ca/</url></reference><reference type="vcs"><url>https://github.com/Sable/soot/tree/master</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.smali/dexlib2@2.3.4?type=jar">
      <group>org.smali</group>
      <name>dexlib2</name>
      <version>2.3.4</version>
      <description>dexlib2 is a library for reading/modifying/writing Android dex files</description>
      <hashes>
        <hash alg="MD5">ec27df1158c3f007b6d7634d4f24ba1a</hash>
        <hash alg="SHA-1">9a8c80d8404f68922b905b06ce1145a76d5a7fac</hash>
        <hash alg="SHA-256">b7b45e790da22950b16177a668193d026b8f611c46f7b941340a61cc8cbe8b3b</hash>
        <hash alg="SHA-512">5327a6f3dfb2fca74a5eb73786b35228a55b3f6dfa19d6ace819df50d745f27a1318e0f65416b8e85c75f007d0ab86952f837a4dd330b8e516395e13c0ea56aa</hash>
        <hash alg="SHA-384">b01d1910429c5768018c65f9df4d14cb960d422fae13d3ea80b8b99ed0caf6d03a9587e21440caedbe050899792b9116</hash>
        <hash alg="SHA3-384">f0d86f034e429923fc320e12402df64b1bbffed87cb3a3caeb35a8daff141680ab2cd105bfac183b7b8537c0bc0671fb</hash>
        <hash alg="SHA3-256">906b141741366bf85f41f695c6b43bc9d0aa0bc651d079e729a0fb7a2b5792d1</hash>
        <hash alg="SHA3-512">2d001f093f9e6cc3b2bdcfd2056a1a3583ad7e364ee6cf812125a6991656efa9414c215f51d8280546fdc3dc84999de5a17a0d554a344503847e1e708eb93793</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.smali/dexlib2@2.3.4?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/JesusFreke/smali/tree/master/dexlib2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm@7.1?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm</name>
      <version>7.1</version>
      <description>ASM, a very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">04fc92647ce25b41121683674a50dfdf</hash>
        <hash alg="SHA-1">fa29aa438674ff19d5e1386d2c3527a0267f291e</hash>
        <hash alg="SHA-256">4ab2fa2b6d2cc9ccb1eaa05ea329c407b47b13ed2915f62f8c4b8cc96258d4de</hash>
        <hash alg="SHA-512">7eba7097109389f48fa9142bf22d225f5d3104d68013d3b8e0a6d4054a8cd0ef64614372bdcb38987d68adb6d33a3804e98ddf112ba84dbb09d448ce702dacc4</hash>
        <hash alg="SHA-384">0be9cd29939b809320f8984fc938bb909b8dce253fdce624b35bc58cf904049ad9e5f6d9b62b07cc7aa7308b86403282</hash>
        <hash alg="SHA3-384">069be10d23f8e1c9f64a15edffeca54afc48f72ceb7032bd5e700895ecab51510649a40941248a1975fd2b1d2ba97c35</hash>
        <hash alg="SHA3-256">1325013f5a4a6b82d3e250e091cebab4dfcefb5fef44d40cd68d750c2f967da5</hash>
        <hash alg="SHA3-512">9df72eca1487a2dd7581df7a1625b61983396c1faac93ffd3b150dba6798341a1e9aeea374161ef019b4dd55b9968b42ce5d396392f8aa91cebd4da4365c9cb6</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm@7.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.ow2.org/</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm-tree@7.1?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm-tree</name>
      <version>7.1</version>
      <description>Tree API of ASM, a very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">de9019ffee1e642e122b529f58ddd74b</hash>
        <hash alg="SHA-1">a3662cf1c1d592893ffe08727f78db35392fa302</hash>
        <hash alg="SHA-256">c0e82b220b0a52c71c7ca2a58c99a2530696c7b58b173052b9d48fe3efb10073</hash>
        <hash alg="SHA-512">7c285e6de13ced1fd6110c616f9f38120d5d37da9e39be1b6fc16224595f54f645c675313f75ed819ae27e66d84e9bc378a6fb42df2f4dd2819ed745767a79ac</hash>
        <hash alg="SHA-384">d5b5e8b7c4645242f871f9b03d90f1475315f5ecc4371a0de0df8acaae5487e2588c438bbf79a064340fbb81c2ab508f</hash>
        <hash alg="SHA3-384">dc6b53474e8e2799cd799ed54cf5d162d5292de8860b929b4e4d74d84eb889af6afe4718019f56c08ef59f4dd1e1b077</hash>
        <hash alg="SHA3-256">f1c8dd9dfdc39164514426aeb9707126f31bc5234def29fa1b8bfdf0e561ec63</hash>
        <hash alg="SHA3-512">7daa7514b1451e2b5276a082797ba28ae2604dded1bae939f74b85be4162505610ab4fddde2bae31fb036f752ffac849f35f8bad574133d1cfafb034499e690b</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm-tree@7.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.ow2.org/</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm-util@7.1?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm-util</name>
      <version>7.1</version>
      <description>Utilities for ASM, a very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">5777b00daedeaf5987b92ad35d2a8cb2</hash>
        <hash alg="SHA-1">5b0b0f8cdb6c90582302ffcf5c20447206122f48</hash>
        <hash alg="SHA-256">a24485517596ae1003dcf2329c044a2a861e5c25d4476a695ccaacf560c74d1a</hash>
        <hash alg="SHA-512">f8f693c0efdedb244ec09d0fd1e32e2c3dd392c464468abbad1d730c80fb2fdac889719c57911d5eeccaa9e20ea4fbb47452fa24b6afe31b07e7bbdf70f25466</hash>
        <hash alg="SHA-384">f0316bbcc87b542ad4daea5b257c6b5500a5ef516249ee593370738f8316be8f83dd0ab12a18ece11bc2cb637c03f591</hash>
        <hash alg="SHA3-384">5ec349cc5d8faccff15fd8b21a912cfc24116cd525d9403019c46bebf331c012dc5e0477b80a78720a9abcb0f727d063</hash>
        <hash alg="SHA3-256">c93583f02046404f6aad114f3bc75dc734c2ebb560183d9a59d40fdb2313cc28</hash>
        <hash alg="SHA3-512">f41ac7084f3723c4ff44770bd79892c037970d04fa5126459460598aa63ad2129fb737ce6ee488c1d922508272e664757e506c5541068351b0f014d8500e36d0</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm-util@7.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.ow2.org/</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm-analysis@7.1?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm-analysis</name>
      <version>7.1</version>
      <description>Static code analysis API of ASM, a very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">7f66f9d85c5bf11f6bd94e249392c86f</hash>
        <hash alg="SHA-1">379e0250f7a4a42c66c5e94e14d4c4491b3c2ed3</hash>
        <hash alg="SHA-256">4612c0511a63db2a2570f07ad1959e19ed8eb703e4114da945cb85682519a55c</hash>
        <hash alg="SHA-512">d74fd51f49a8278545eaaaaf808692d69f7140fa73f4cf1eec01a21d5d2a378356a5d74fadc2f6983ee023cdf6e06851f9f37a084be547120300ac97d9cc6bba</hash>
        <hash alg="SHA-384">609c937964b2c0e8c82345fa89e80d26a4a17cb36fe9536ef876d568d37cd943a9848be18cc9b04b9038a8c1119f98d5</hash>
        <hash alg="SHA3-384">d7b185834756496cede9bf69e63abff8b2771301a79985bed79dc479c4aabbde6dbdda0be71a1f9ac5dfb5396a5cd7a9</hash>
        <hash alg="SHA3-256">87f5da2ef52ef0d26678bb7d86c45cbd69850221a4ac65ffaac282c4ff45fa81</hash>
        <hash alg="SHA3-512">ae003ade54f7320dae00420e6266f056123cb0757b852933293783c88c3fe68e518b08519b760ca52053f62eaed57eeca6856bbe1d12d54f33174a305457f5a8</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm-analysis@7.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.ow2.org/</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm-commons@7.1?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm-commons</name>
      <version>7.1</version>
      <description>Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">a53524cb592585ce48f2de0ada82b885</hash>
        <hash alg="SHA-1">431dc677cf5c56660c1c9004870de1ed1ea7ce6c</hash>
        <hash alg="SHA-256">e5590489d8f1984d85bfeabd3b17374c59c28ae09d48ec4a0ebbd01959ecd358</hash>
        <hash alg="SHA-512">2879ae5e7b796f0777b4730fb3f21b8d42cbdbf3a090acadf2ce52082f1ea030059b0067d9a3b4d2c4b4680519a8ee9b2cf1563901931645245a973b9f60b1c2</hash>
        <hash alg="SHA-384">17a11634e5eb73dcb345f21fbf2d029a813b440a9e822471f142a1a2f2dd55834795859002300a207a1478c1998326b2</hash>
        <hash alg="SHA3-384">4723920c0c47757ca7fedfb060bedfe207f92cbfc7722e7d4612f690a019459dacbd7ae376a11cf4e0acce5b817cfdfc</hash>
        <hash alg="SHA3-256">63785b924b0a4b150008cb72baf7c192f1556edc9bbd13b0b4f86c99837db2f9</hash>
        <hash alg="SHA3-512">24bb7c1612347ffeabdbff52109c1fa6c206d99c6529a49af455df0bc24449b8e74886216095f74b14942685a1af45ec7597e38c22d878cea1bc02c411013b96</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm-commons@7.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.ow2.org/</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/xmlpull/xmlpull@1.1.3.4d_b4_min?type=jar">
      <group>xmlpull</group>
      <name>xmlpull</name>
      <version>1.1.3.4d_b4_min</version>
      <hashes>
        <hash alg="MD5">65b83a177c60e69440a8e4f44f51eb97</hash>
        <hash alg="SHA-1">6dcdbef481ff8fbac336a47048048b2b31855015</hash>
        <hash alg="SHA-256">b09c1108a561b4fa92afb105c49f66554b744b0f821c1ac9b92f9fb7c3acb17d</hash>
        <hash alg="SHA-512">0548e666561eda35aa9d052f57e8c13da56b0c445911d434642617fc3b464bae7f65c3e299eb9ec4b1a404f3c945899d3c0963d3c2a32d5a9a41de0010ff7845</hash>
        <hash alg="SHA-384">67a6e0d65e1e243d6f39b11830be1561a37a217aa134ddf33dea19b492313604b7ccd86e0712f79b218a6d04829ac56a</hash>
        <hash alg="SHA3-384">c1086e07906645672205ac8c04ed179614f9edb4e5743bb02922541002707dbad21578ac3f50b3ce0d86b99c01b48c98</hash>
        <hash alg="SHA3-256">f798c67619258aa66b4b1196223fdfe7c7991e1927f3dc9d0622cbfe142bf076</hash>
        <hash alg="SHA3-512">3476872c48e38356b1d31bea09cd8a46c4736227d8bf6cd8949499400e9c7a869201b31222e81d01f32fdff055c5e7442c7400d6dcb45185092b1ebaa6d580ec</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
          <url>http://www.xmlpull.org/v1/download/unpacked/LICENSE.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/xmlpull/xmlpull@1.1.3.4d_b4_min?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/de.upb.cs.swt/axml@2.0.0?type=jar">
      <publisher>Secure Software Engineering Group - University of Paderborn</publisher>
      <group>de.upb.cs.swt</group>
      <name>axml</name>
      <version>2.0.0</version>
      <description>The axml components for reading binary Android XML files forked from a not further maintained
        repository created by Bob Pan</description>
      <hashes>
        <hash alg="MD5">2cf30274755c29883d7caa9005a11fae</hash>
        <hash alg="SHA-1">2dccd674060b3756c4bb8e085334bb1ca266be08</hash>
        <hash alg="SHA-256">76f0cd142ca974d28ed09276aea9ac9e8f63e9d8502fdc511d6f02615fb875da</hash>
        <hash alg="SHA-512">7c7bb4fa77c38cb05f3d0a2fe308dec76d1d8ca3aae94bf2075665d23660f531caa12666b986c9f0fca722408dc6b6b3abbf9ab95ce5e66e9045809f6b6af41e</hash>
        <hash alg="SHA-384">c446d73676d1ec36a85cc969bb595cd913d36914f0856787c1704dffbca80c2f2f9daac30aa6d22dda8c5ee963c78070</hash>
        <hash alg="SHA3-384">2d0ea7d0bfe46a1fe06f183bb767c07736dd36a516994076539adfbfb12aae61783e609333da570bc83b13e04e116d8b</hash>
        <hash alg="SHA3-256">5ee9141e979c42109f0899bc55224b26c6152cf122ec56c0bf2a84a563685684</hash>
        <hash alg="SHA3-512">cdb658859498abb76ff3af1fc09b9c27051e7cab86921f8726d74ac54c584f5e55b4adf6ae930311271e518a37d1f91f876b042ae4dea01d6f38a42732c1fb98</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/de.upb.cs.swt/axml@2.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.hni.uni-paderborn.de/en/software-engineering/</url></reference><reference type="vcs"><url>https://github.com/Sable/axml</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/ca.mcgill.sable/polyglot@2006?type=jar">
      <publisher>Sable</publisher>
      <group>ca.mcgill.sable</group>
      <name>polyglot</name>
      <version>2006</version>
      <description>polyglot</description>
      <hashes>
        <hash alg="MD5">e0e85c25cc81f4279a9e608e49c0048f</hash>
        <hash alg="SHA-1">f0e528051faa260d83f53d58275954d973231ce7</hash>
        <hash alg="SHA-256">d145d53b44264b24b588f649e6c95a6d8934079ba491146e4289f4ac1a631773</hash>
        <hash alg="SHA-512">bfb8955990886df5a4a9e0b590dcd6e6113ffab3156d796db35feea7121b0e5a2887dd68c4945c0b198b5b918ab8893d7d4c5ec7df01f53eea4d1b3dfaf09caa</hash>
        <hash alg="SHA-384">9c67c8fcd76b3534ac796afb379131f113c9c84d13b3bed860a34dd93800d56b93752dcb3ed988ca94b24aa24b1901df</hash>
        <hash alg="SHA3-384">1a605c7b06df0ac2cec06ea22c3683dfca2951ced8f5620fc35229a5153178f8b3e947a6ab86e8e75c567f3d131d0e94</hash>
        <hash alg="SHA3-256">dfadb9ff96fc9280b3f07f731e2d93b08df077bc6d94c8300aeb64f5fbc20d61</hash>
        <hash alg="SHA3-512">4e265c2758c259989cd901df10df4b53e10487145f577daab77853df486bea1ddd94f3798a9dc778d7830e3573786eb037622d7b2ef993fcc8aa2be82d8de77f</hash>
      </hashes>
      <licenses>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
      </licenses>
      <purl>pkg:maven/ca.mcgill.sable/polyglot@2006?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.sable.mcgill.ca/</url></reference><reference type="vcs"><url>https://github.com/Sable/polyglot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/de.upb.cs.swt/heros@1.2.0?type=jar">
      <publisher>Secure Software Engineering Group - University of Paderborn</publisher>
      <group>de.upb.cs.swt</group>
      <name>heros</name>
      <version>1.2.0</version>
      <description>Heros is a generic implementation of an IFDS/IDE Solver that can be plugged into existing, Java-based
        program analysis frameworks. A reference connector exists for the Soot framework.</description>
      <hashes>
        <hash alg="MD5">08d69842f7122be5f6bce6c4ae7792ed</hash>
        <hash alg="SHA-1">675778f9cf26035925fcb0f14b059d4b485819c0</hash>
        <hash alg="SHA-256">516aa6011d84f348746a918d375f3c02d18076fc9a760305e1bf708725e71e90</hash>
        <hash alg="SHA-512">f316fa0a6da6026b4513f206d0317fb4ce1b0a01982f968dc16907755210c651a211d171edf29f82f74a33ae67af3d9a789669965b5b73f8864234ee1613ea1a</hash>
        <hash alg="SHA-384">24780a203bc4d4a1064a23463cc4e93c8dde67d4369da1004ac149eee2af88f3dc760b00dd87242c0c03f26317af87b1</hash>
        <hash alg="SHA3-384">9f6f85e0c219c26236cb229a1f774c44c719e180a2191e2287d1c24de7498443449f09f11b91ff40a99ac52792b96cfa</hash>
        <hash alg="SHA3-256">b79c9e077827f3f66bfce22bee671c6b47662184832c54e96bd2b80de3d8d627</hash>
        <hash alg="SHA3-512">83ae6e7f92b724f029332c6ab8e0ec7450037333c31520f60df3bea35a9d010486ea9cb8fcac81fb3ddfe3c85bfeb3964054cc825535dba49d48c917be8830db</hash>
      </hashes>
      <licenses>
        <license>
          <name>GNU LESSER GENERAL PUBLIC LICENSE 2.1</name>
          <url>https://www.gnu.org/licenses/lgpl-2.1.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/de.upb.cs.swt/heros@1.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.hni.uni-paderborn.de/en/software-engineering/</url></reference><reference type="vcs"><url>https://github.com/Sable/heros/tree/master</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.functionaljava/functionaljava@4.2?type=jar">
      <publisher>Functional Java</publisher>
      <group>org.functionaljava</group>
      <name>functionaljava</name>
      <version>4.2</version>
      <description>Functional Java is an open source library that supports closures for the Java programming language</description>
      <hashes>
        <hash alg="MD5">44bbc1184c2ff1c26c8e8ffba2fad2a5</hash>
        <hash alg="SHA-1">f26bdd90a8d6b6faeb38ab2ba4c39580c1eb989f</hash>
        <hash alg="SHA-256">d8cfc6ed3071e818d1273c1b243edb4c96c0e10eacf6bed80724aa2987ebdcc5</hash>
        <hash alg="SHA-512">6320bd705d3954081d428b5b6488181f62243efebdb14440ac2658bcf8facec8ddc7022cdf6d5a7210dc2e0cf8565f1f3b4ced0261b78d049580f63d64a3e5e0</hash>
        <hash alg="SHA-384">8668e4bb5b1f260027e88be50e1601ab75cefc8b2f955d0ae25431df013f5bab09a2306e1a66bd6b423cbeff095bb8fa</hash>
        <hash alg="SHA3-384">1fb2f49861c43ee4ea29037520b185be10607ab898f4359337bad685f96a16b0138d5c6e1bb2289da5d8fe177e7e8838</hash>
        <hash alg="SHA3-256">19c125a501af1c7bdc38c1fbfc480903f4f7bcd34ec567a3ddf47b15fc778c8c</hash>
        <hash alg="SHA3-512">2798b567a8e8e1884206f13b9dca41489d4492e3c1f4fb1d5d70bfd050ffa643ebc7a22f214d1316782219431dd7c308a0a7b2501e0e2124046d9c90b5c26545</hash>
      </hashes>
      <licenses>
        <license>
          <name>The BSD3 License</name>
          <url>https://github.com/functionaljava/functionaljava/blob/master/etc/LICENCE</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.functionaljava/functionaljava@4.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://functionaljava.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.5?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.5</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3b1ececad9ebc3fbad2953ccf4a070ca</hash>
        <hash alg="SHA-1">6b262da268f8ad9eff941b25503a9198f0a0ac93</hash>
        <hash alg="SHA-256">fe30825245d2336c859dc38d60c0fc5f3668dbf29cd586828d2b5667ec355b91</hash>
        <hash alg="SHA-512">fe8885069fbe999485e25fa5e019486f9661bdb99834df2ca2888981f47bd4a7685f83859a315f8e7dd208b7dd29717e2d108e6d8366755e6d971cac4cf9e437</hash>
        <hash alg="SHA-384">41e16b4c59b038e0963b8c2c02a860ecbed984ad66ad9f2c46e0ed80e870a73c422c2760cf3e089cdd65012437bfb8ef</hash>
        <hash alg="SHA3-384">10fb8f440ec47794ba7bbbbeedcee0b5f102bac18f8bda89e4a6b714c0982a69fe8db9a43b85f68eb5437171c32f1c84</hash>
        <hash alg="SHA3-256">499f1d3b92c2b39fc2fdf25dab2db8b629a0fcf0445f7a86f86ab223bbab5766</hash>
        <hash alg="SHA3-512">5e813a54d7c8bf977d8f2f13227ec0a1acf5454895e1cb5c115afab8b65fa7d3d35362d2209e78baa39996de8c334fd2799cc0b80e70aaae4af55fde9f07e1c1</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/ceki/slf4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar">
      <publisher>GlassFish Community</publisher>
      <group>javax.annotation</group>
      <name>javax.annotation-api</name>
      <version>1.3.2</version>
      <description>Common Annotations for the JavaTM Platform API</description>
      <hashes>
        <hash alg="MD5">2ab1973eefffaa2aeec47d50b9e40b9d</hash>
        <hash alg="SHA-1">934c04d3cfef185a8008e7bf34331b79730a9d43</hash>
        <hash alg="SHA-256">e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b</hash>
        <hash alg="SHA-512">679cf44c3b9d635b43ed122a555d570292c3f0937c33871c40438a1a53e2058c80578694ec9466eac9e280e19bfb7a95b261594cc4c1161c85dc97df6235e553</hash>
        <hash alg="SHA-384">fc0058495e54efb6e05a34e3ff422e7c8347bcc77d6d9b87e9253424968dee6ef6a215c318d7e54f8705276be81f0682</hash>
        <hash alg="SHA3-384">ed6464b715de6ced0d9981a3f28140824946a4b7a02ffaff6116c833bb36e8f77a6282ce63c0d82cfe841d4fd6916891</hash>
        <hash alg="SHA3-256">ecfc9bef24ae28cf94c6775ecf6e2086d90a25d8d5476a4f6bb24001601b6cd0</hash>
        <hash alg="SHA3-512">f2b333527faedf504f60aa70a3d491972fa76f7e61e6351027f74613f41001157656824fe312b6e1df6dc4979704fe2a745b618d5368a97fe0bf8749739de9e2</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://javaee.github.io/glassfish</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/javax.annotation/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/javax.annotation</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.xml.bind/jaxb-api@2.4.0-b180725.0427?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>javax.xml.bind</group>
      <name>jaxb-api</name>
      <version>2.4.0-b180725.0427</version>
      <description>JAXB (JSR 222) API</description>
      <hashes>
        <hash alg="MD5">ebc2c217121173faeef5c300d26503a9</hash>
        <hash alg="SHA-1">7400ad346870308bcc46bb60f3c553af3e331b4d</hash>
        <hash alg="SHA-256">59ed20be31b88bb8a16ca760ab50082665a680380cbb4bbcf366eeef7f6b39a1</hash>
        <hash alg="SHA-512">169f93ca28e081458c1b19ac3edbcfe68d977c0181a9843acf5dcb0c05186a602e2e2f9d08c47df3b11b96f25d64a29c0ca41982f176f26e282d0f2f8464d61e</hash>
        <hash alg="SHA-384">b61749f02f543d22688b44359380b87b70fe8e2f0b0ed9311849f313a4b53801030d2dd76d5b129c09cb3786ed6b67d2</hash>
        <hash alg="SHA3-384">47e737930787125501559ef66dba4408ed8b1f4bc0940e60bf24f104b9d3810b225a4edba3e25ffeaa62b11f06f82d20</hash>
        <hash alg="SHA3-256">d574ba946747cf67fc75bc18eaf3327ec2aaccd6c522c47348ccc014dd39bc90</hash>
        <hash alg="SHA3-512">6d79c6098ba8f5398d8cb98f1e6f7f41889f7093c313bdf9c08866c88a3d6b0ea41f3bd08b274e303654ce40bb5d23fa83523eb23a246c6acbb9ca68de2afc17</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.xml.bind/jaxb-api@2.4.0-b180725.0427?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.oracle.com/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/jaxb-spec/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/jaxb-spec.git</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.4.0-b180830.0438?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>jaxb-runtime</name>
      <version>2.4.0-b180830.0438</version>
      <description>JAXB (JSR 222) Reference Implementation</description>
      <hashes>
        <hash alg="MD5">44285523aa85797f4634fcfaa5083db8</hash>
        <hash alg="SHA-1">2a0705ce8aa988b691c70e8bdcc1613050a148a2</hash>
        <hash alg="SHA-256">dec58bd4828227afffe5cdec56ce3b668a8e0ff7c4217999598eec68a8665ae2</hash>
        <hash alg="SHA-512">e290c772dea08b442c6fb6ef5c86e9287c2ef27527581a312315c514bd433452c1b699969c14bb9e4d87f7937f79bf772c2f4bd8c0c93b094ff3e1d13dce72ff</hash>
        <hash alg="SHA-384">8ecff1331a383c24ef7e75d2b849120dcc8a55492de031c8c11995be3dc3b31f286d7ba1f236d115295cd4e02cc79fbc</hash>
        <hash alg="SHA3-384">4423492d8a8abd552c457c151fbe3317f8fe2fdd5f7b0ce8c9db7a3b33311e43d5e8dbd7619209a3ad39a9cf458a59b7</hash>
        <hash alg="SHA3-256">85c348fe162118b98eea7ee5859efaaaefca3c60b8223567a95086c9e49e5ff7</hash>
        <hash alg="SHA3-512">288d4eab9d54f62df432c5dae75161c60a7db2c04a93819772eb1099538036f7b8327ce4611871610951a4723e335b7e0cf580bc9457389a58aa0522cb00d61d</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
          <url>http://glassfish.java.net/public/CDDL+GPL_1_1.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.4.0-b180830.0438?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.oracle.com/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/JAXB</url></reference><reference type="mailing-list"><url>http://java.net/projects/jaxb/lists/users/archive</url></reference><reference type="vcs"><url>http://java.net/projects/jaxb/sources/v2/show</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/txw2@2.4.0-b180830.0438?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>txw2</name>
      <version>2.4.0-b180830.0438</version>
      <description>TXW is a library that allows you to write XML documents.</description>
      <hashes>
        <hash alg="MD5">fc3c5b2147a96531196e6d0c69b3dca4</hash>
        <hash alg="SHA-1">31bae7fb5924472b3243b265b47cb741da715419</hash>
        <hash alg="SHA-256">def433e60b3e1fb84950ea57e09ba1664aabc017ffa67c2a4ff7a0557753ba01</hash>
        <hash alg="SHA-512">8eff8a0d4c73ce1e5e2ed1f15ebb6f8db8252f49111542fb5dace3f00007254b2173c5e5d8d9c6a9d9d1b3da28667e9f649f0a4f95d394bd0ede33c7c63328a9</hash>
        <hash alg="SHA-384">009fbfeda32b3ab28e8667ed7a1e9bfd106ddf5b0b137e6a5b89ff97a0cf74310756f2e33969af5c05b7957d5e007a5a</hash>
        <hash alg="SHA3-384">aa615fac96136294736b0f4547e90ee96361c2e324720e9e33486739e42493eef8f24519e1d6c3f56a9c6fe08875c6d8</hash>
        <hash alg="SHA3-256">d7a1315a927428a7d185502a6f0f23dd57ad82787abf11ab7f46e6c48e28dbde</hash>
        <hash alg="SHA3-512">d12e60a0f534b64ab77b88cefe57767d99e94e44ac8c26c0fe9c62338233f24de74441d5331be52b4fe903ab9c098a877f41b015db1a4fdca9e68f0cb4b48cda</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
          <url>http://glassfish.java.net/public/CDDL+GPL_1_1.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/txw2@2.4.0-b180830.0438?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.oracle.com/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/JAXB</url></reference><reference type="mailing-list"><url>http://java.net/projects/jaxb/lists/users/archive</url></reference><reference type="vcs"><url>http://java.net/projects/jaxb/sources/v2/show</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.7?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>com.sun.istack</group>
      <name>istack-commons-runtime</name>
      <version>3.0.7</version>
      <description>istack common utility code</description>
      <hashes>
        <hash alg="MD5">83e9617b86023b91bd54f65c09838f4b</hash>
        <hash alg="SHA-1">c197c86ceec7318b1284bffb49b54226ca774003</hash>
        <hash alg="SHA-256">6443e10ba2e259fb821d9b6becf10db5316285fc30c53cec9d7b19a3877e7fdf</hash>
        <hash alg="SHA-512">1fbb4d883725319028fd3b558086a29ffd0fd0006b56eca627ddda23b1155e287af29860038d92d4c475975f4d1f4ac8249ac55b88852869623485171934b31a</hash>
        <hash alg="SHA-384">59c1249a26ec6052bca487c453af2da7d159841c1e20da0acb98bdec292656d9b17bf655c3c69fe87c00f1834808db55</hash>
        <hash alg="SHA3-384">5d12aa1ebe44172b1b63c6ec2452c19131970c1f00846f3f05f243a4a082bd43f753451c226464db616caf4867a574e3</hash>
        <hash alg="SHA3-256">bd12121bad35eb802e4bb7519b976d2cf46c2b9e5081388d1589f779d1afa165</hash>
        <hash alg="SHA3-512">29f5a8853221522e5ffe21d03e4ca603f70ae6c28df5f78efd76e4ef25f23a47aff64ba22fe2f037347d4970d8f589b9ee84ad367e222c948d4956d84b96260a</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.istack/istack-commons-runtime@3.0.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.oracle.com/</url></reference><reference type="vcs"><url>https://github.com/javaee/jaxb-istack-commons</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jvnet.staxex/stax-ex@1.8?type=jar">
      <group>org.jvnet.staxex</group>
      <name>stax-ex</name>
      <version>1.8</version>
      <description>Extensions to JSR-173 StAX API.</description>
      <hashes>
        <hash alg="MD5">a0ebfdbc6b5a34b174a1d1f732d1bdda</hash>
        <hash alg="SHA-1">8cc35f73da321c29973191f2cf143d29d26a1df7</hash>
        <hash alg="SHA-256">95b05d9590af4154c6513b9c5dc1fb2e55b539972ba0a9ef28e9a0c01d83ad77</hash>
        <hash alg="SHA-512">ebabd330a2d7c109105fa55c4236fc2f2d52668e70b17b8fc36b8ac9f524aa2c67040e75371267d8e9523d94dee0ce064e76584c9f206687e89b9f3b2a387f03</hash>
        <hash alg="SHA-384">990e24d22d5881e2996c1ca257d9bc30194e2e09d798c197e062e80675f920765ffcc00bce91c0307833e8fb1d2a4e28</hash>
        <hash alg="SHA3-384">345eeb08734becd7695b7671345deeb5f2b3257d03dbf147209c8efb3b3c53e2f031a7830513d14203b139cb7ed97044</hash>
        <hash alg="SHA3-256">3b5a013f0ee704db2635e06eedf4d9af48276d7c5d18e9e90e7f66e4effdb76b</hash>
        <hash alg="SHA3-512">357af43a8a49ec2e72d4f5c6b941777848cf29684c6e8169f18035d1d3a331c30e56ba7d18d67b492396b762fe1a5308d2f104d3c6d4d9a8ce85448214534c6a</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.jvnet.staxex/stax-ex@1.8?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/javaee/metro-stax-ex</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.xml.fastinfoset/FastInfoset@1.2.15?type=jar">
      <publisher>Oracle Corpration</publisher>
      <group>com.sun.xml.fastinfoset</group>
      <name>FastInfoset</name>
      <version>1.2.15</version>
      <description>Open Source implementation of the Fast Infoset Standard for Binary XML (http://www.itu.int/ITU-T/asn1/).</description>
      <hashes>
        <hash alg="MD5">57f3894ad7e069ae740b277d92d10fa0</hash>
        <hash alg="SHA-1">bb7b7ec0379982b97c62cd17465cb6d9155f68e8</hash>
        <hash alg="SHA-256">785861db11ca1bd0d1956682b974ad73eb19cd3e01a4b3fa82d62eca97210aec</hash>
        <hash alg="SHA-512">95950422534fe074f993d9e9dac2eef3bac16d5843e12f63b05cf6779dc30752f87e065df918fc41fd8b8ef89d86b44a4861cadcb808a1c62d93a25fc2cf4ce2</hash>
        <hash alg="SHA-384">9cfafbf8b080e28786bbb10b001f187222d3e71a104e745df8c2ceb32c7aa87fa96769aa3523586eab4ce12509049551</hash>
        <hash alg="SHA3-384">c434e7daae3c5f52558602844563984a69d42933ad5f7d599ed047150eb596774a74ea28da9852e3d1533a861a77b704</hash>
        <hash alg="SHA3-256">633e8afaa8d30d1f537624cdf3fa33985bd2f09a4de65b330d9c0585bd2a8720</hash>
        <hash alg="SHA3-512">2c4271dd94d7dea713fedfebd9ffd190a3f6571f45a501700bc132b57b0344f740e114a05e78404e102e445d577dd0d783d76761cc9c83356c5d7435deaabcc3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.xml.fastinfoset/FastInfoset@1.2.15?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.oracle.com</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/FI</url></reference><reference type="vcs"><url>https://github.com/javaee/metro-fi</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/de.fraunhofer.sit.sse.flowdroid/soot-infoflow@2.10.0?type=jar">
      <publisher>Fraunhofer SIT</publisher>
      <group>de.fraunhofer.sit.sse.flowdroid</group>
      <name>soot-infoflow</name>
      <version>2.10.0</version>
      <description>Soot extending data flow tracking components for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">16ddecc07aab480b7e52787d9080e6b9</hash>
        <hash alg="SHA-1">8bf5dda1f5e9c2822a2d36fd283f8ade0032f2a8</hash>
        <hash alg="SHA-256">5a726eae2793b53265f7e15fbc3a0be7d1ca386e61fb7141edec4fd461480808</hash>
        <hash alg="SHA-512">e3b66b213e0eee72a2bbaaa2ef53424e29cd4745dacba95577f2dec298e45a8524c6638deb0f6c09555592a45c5b0bb3c7a035d04c0c16f5a800a189146f811b</hash>
        <hash alg="SHA-384">a342d2e72d0b43e3aa78e6314fb31e48d9af35b0b9f2c1b6792e5a135f6870e8ee6c567182e8bb375fe3ed7716a2f5e4</hash>
        <hash alg="SHA3-384">7a7874a086061dbd7ec2f958cae87c4f7ce7a5a8765b11c4ff004b0c8e1fd09bce7a8e59ff027589d4ae2c4e760423ac</hash>
        <hash alg="SHA3-256">7e112c86abd2a460c3f25dc52a8673d025b28fd6560affb5e3c300551a8e87fc</hash>
        <hash alg="SHA3-512">53e811a8dd285b8842c54de5785c82b9b394167dbcb73de60525e5b670b7f0a6c2e3b79033c71af877cadc3568654cf2d09dbdb8034b1841ca2c55cde7e72dca</hash>
      </hashes>
      <licenses>
        <license>
          <name>GNU LESSER GENERAL PUBLIC LICENSE 2.1</name>
          <url>https://www.gnu.org/licenses/lgpl-2.1.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/de.fraunhofer.sit.sse.flowdroid/soot-infoflow@2.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.sit.fraunhofer.de/</url></reference><reference type="vcs"><url>https://github.com/secure-software-engineering/FlowDroid/tree/develop</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.soot-oss/soot@4.3.0?type=jar">
      <publisher>Soot OSS</publisher>
      <group>org.soot-oss</group>
      <name>soot</name>
      <version>4.3.0</version>
      <description>A Java Optimization Framework</description>
      <hashes>
        <hash alg="MD5">c611564ef405b283146118160e68c949</hash>
        <hash alg="SHA-1">1c1d2a6728e12e0f54c0d056c0778d0b1ed04941</hash>
        <hash alg="SHA-256">ee7a4b8bbc41b4c09a11b51b61500208cb424eb4ba0b736ce083c00dec57dd5c</hash>
        <hash alg="SHA-512">76f471fb62f2a3d045ab148441f9389e779120d5707af152b313d728aeaa2cda70dc335a57115670862fd2976dcbe538de6beb5579904f31b1008ea138778453</hash>
        <hash alg="SHA-384">8675f4b09026396384c02962986f4ed0be19bb0063ad3ffc92a5de1971bfe4fb871d8a4be9c0a61948ab3bc6e63217b8</hash>
        <hash alg="SHA3-384">552a96f337fbade9b68bfec94604e7c5c33bd488b515cbd27ed44fd8088404844cf753cc3152f18f6599d080602221b2</hash>
        <hash alg="SHA3-256">e4d70a0c86302534245a0b30ee2c0acf6c8b420dd90aac0603b6abfaf2ed61a5</hash>
        <hash alg="SHA3-512">88180a191e63b284798c669ae183a141b07e595c608255a6e3f0770d2306f1539f13ea7cffd26a2506ff2af3e0b3023cc4a2c3c342d696300318571fdcb74c8f</hash>
      </hashes>
      <licenses>
        <license>
          <name>GNU LESSER GENERAL PUBLIC LICENSE 2.1</name>
          <url>https://www.gnu.org/licenses/lgpl-2.1.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.soot-oss/soot@4.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://soot-oss.org/</url></reference><reference type="vcs"><url>https://github.com/soot-oss/soot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.sf.trove4j/trove4j@3.0.3?type=jar">
      <group>net.sf.trove4j</group>
      <name>trove4j</name>
      <version>3.0.3</version>
      <description>The Trove library provides high speed regular and primitive
        collections for Java.</description>
      <hashes>
        <hash alg="MD5">8fc4d4e0129244f9fd39650c5f30feb2</hash>
        <hash alg="SHA-1">42ccaf4761f0dfdfa805c9e340d99a755907e2dd</hash>
        <hash alg="SHA-256">3c8616203d61a12a7e3487e8b34f3c198c2b5ba9e90da0c7ea32d99cd4958012</hash>
        <hash alg="SHA-512">a53815fd52c43ca069f8526e2d1041c881ae833ef64272989c54ea6491c529a7bb830f88a1c8dd016aed158f961b8f404e76f510a384ce89df4edf44c87647b5</hash>
        <hash alg="SHA-384">293c0364a06bd5edca0e45af6ec39bfef183d3af73063b6f60f055d5cf504f5a6be528d581ad7404ed1448c2d2d92672</hash>
        <hash alg="SHA3-384">41b0b5319dad736bf012a401c6bcc58328f9cffe14ef552ac475469468d6659dffe660738598060abf02f19a05b8c17a</hash>
        <hash alg="SHA3-256">701e5478dadaeb35b23916635070f5f551468000c70f88daa4d62197d0449102</hash>
        <hash alg="SHA3-512">e62c6b1feb9eff3ecfebcf76b9ce32f0059672e3b0e8ca2224c827fa83070658b552bbc57d49a0020ca30b46c6272580c85726f5f46f85e5b532f90643ebc9e8</hash>
      </hashes>
      <licenses>
        <license>
          <name>GNU Lesser General Public License 2.1</name>
          <url>http://www.gnu.org/licenses/lgpl-2.1.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.sf.trove4j/trove4j@3.0.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://trove4j.svn.sourceforge.net/svnroot/trove4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@30.1.1-jre?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>30.1.1-jre</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">05374f163d0a4141db672fff9df95b12</hash>
        <hash alg="SHA-1">87e0fd1df874ea3cbe577702fe6f17068b790fd8</hash>
        <hash alg="SHA-256">44ce229ce26d880bf3afc362bbfcec34d7e6903d195bbb1db9f3b6e0d9834f06</hash>
        <hash alg="SHA-512">025cdd70db7d896d57cc04a8a735ded609b393e8d56af23d454198b64a263147ab0d68fbdffabcb926b143433fccdc022f76aaed658b9448c5ce85f07c42140f</hash>
        <hash alg="SHA-384">5a7d9c9792f0912bf49ecc97fabbce703408e2009f84a827ca3ff3bc5a3e171f2759821a75da155b4e45e5ad87893053</hash>
        <hash alg="SHA3-384">f9870f5a878e7c21c70973b8c6269c7f11a81543c2318c4542e1f471276483d74694d3a80892e71eff34599c3dce8e12</hash>
        <hash alg="SHA3-256">6178c64bce389dd1a93d9c34fe5dc75e91d5af0c1f0d1956b0466e807ad6fa3c</hash>
        <hash alg="SHA3-512">06a197858dbccd9ae008a50224a1e94e2bb71197dde13ea9b95c014001bfd4730da2faca306103848666df5b696df28954f365645d19b38bb3b75244b0bf14ca</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@30.1.1-jre?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@3.8.0?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>3.8.0</version>
      <description>Checker Qual is the set of annotations (qualifiers) and supporting classes
        used by the Checker Framework to type check Java source code.

        Please
        see artifact:
        org.checkerframework:checker</description>
      <hashes>
        <hash alg="MD5">b9822b33f72326c74abded69b7c717cc</hash>
        <hash alg="SHA-1">6b83e4a33220272c3a08991498ba9dc09519f190</hash>
        <hash alg="SHA-256">c88c2e6a5fdaeb9f26fcf879264042de8a9ee9d376e2477838feaabcfa44dda6</hash>
        <hash alg="SHA-512">742f5442d72b37cb7d2e8e069dbe03545e5e21f1cba51254fc62beea3ed688446cbb5c4e505670c4c4e3f12b35fe9292ec501bd799319c6f0dfc129495bc90c9</hash>
        <hash alg="SHA-384">a81585e7d06d9d385a1eb39b819f850de5ced8086be99b5e558a2698557320376caf61c73449b233cc809a20f05a2b5d</hash>
        <hash alg="SHA3-384">8e705ba81122587a44bdeb9a9d26e9e0f1d848af3c77151eb43473953b8370ccb84988cd30c9b658f151466827ccf528</hash>
        <hash alg="SHA3-256">6d690908e08540b0aaa4daf1073fe73ea3094e875e62c240ecb2db01941c6cd6</hash>
        <hash alg="SHA3-512">e65188d34d2762b0323a910e29f15fd46536e0774fda0c44fe7ae42b25197f68018121e7990b54c9b3e8f0c98cde83efd33391930be07c40bcb5de2a40a98d7d</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@3.8.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/typetools/checker-framework.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.5.1?type=jar">
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.5.1</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <hashes>
        <hash alg="MD5">2bf3239388cf5c817cd83ecb692b045f</hash>
        <hash alg="SHA-1">562d366678b89ce5d6b6b82c1a073880341e3fba</hash>
        <hash alg="SHA-256">ff80626baaf12a09342befd4e84cba9d50662f5fcd7f7a9b3490a6b7cf87e66c</hash>
        <hash alg="SHA-512">24d512c97bbea2b972addff6bb28b9e7edae62249dfb6693835f077fe239395bb15ce82ad58d4ee42d8c4891a0e62b51398450ad6c9dec473173eacb6c6bcd3a</hash>
        <hash alg="SHA-384">f6d6abc35181b26b4dc66ceafd20f0712f881d9ff4043f39c82bb37ac22dcc7c7850fcc6e125d480f657f1c06b343e9a</hash>
        <hash alg="SHA3-384">f57c681d2afd44aed3a7cf261fe31c4a163da413b6222d27711f8becee2eb45531134ced8cc4b321037c5f447dde823b</hash>
        <hash alg="SHA3-256">90157e4740d1094a2fb153c2ae3d290c4a8ac62831d72f61c199ff3a2a586fce</hash>
        <hash alg="SHA3-512">3820fc8036692cdff0b51c8d679c240aa14fb8b49a635d6de679006959a8b8226ff9cb73e5b2f107c77bdf78a5bb8caa206cea1fe539389ff9c502d3d514be9b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.5.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/google/error-prone</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar">
      <group>com.google.j2objc</group>
      <name>j2objc-annotations</name>
      <version>1.3</version>
      <description>A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.</description>
      <hashes>
        <hash alg="MD5">5fa4ec4ec0c5aa70af8a7d4922df1931</hash>
        <hash alg="SHA-1">ba035118bc8bac37d7eff77700720999acd9986d</hash>
        <hash alg="SHA-256">21af30c92267bd6122c0e0b4d20cccb6641a37eaf956c6540ec471d584e64a7b</hash>
        <hash alg="SHA-512">51ea975179f809cb260751d11a513881b643bf016d15949bcb63b57d3c8868a2197e0620ccbaa5739e032797ec6faa3aa6d64606e999fce32930314780ca4115</hash>
        <hash alg="SHA-384">d2a54e4bb17793a98f85fb8f91138cd3b3d311385b7fb2c09d05c3112d42218a6da29154ba184f00031919548022aa71</hash>
        <hash alg="SHA3-384">8ba512ee47d36d5712335849e8f0fae21498c983c48fc2b4749ac7dfb4eeddf75dd51d21366667f90d6414db032a7b5b</hash>
        <hash alg="SHA3-256">e97bbe4e1ac9f9785ad0b81fd29fc9c6b0d9e37acc6da6d0b31ce9e6da072664</hash>
        <hash alg="SHA3-512">864bc6181c8ad8372e0a05ec3b0bdebc876571692331d3519e19df54a21ef333e992fe5c4e84759f010cf0657f9ea1c435bea8f103735ec3dc9dd31493e7d4a6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://svn.sonatype.org/spice/tags/oss-parent-7</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.steady/lang-python@3.2.5?type=jar">
      <group>org.eclipse.steady</group>
      <name>lang-python</name>
      <version>3.2.5</version>
      <purl>pkg:maven/org.eclipse.steady/lang-python@3.2.5?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.steady/repo-client@3.2.5?type=jar">
      <group>org.eclipse.steady</group>
      <name>repo-client</name>
      <version>3.2.5</version>
      <purl>pkg:maven/org.eclipse.steady/repo-client@3.2.5?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.tmatesoft.svnkit/svnkit@1.9.3?type=jar">
      <publisher>TMate Software</publisher>
      <group>org.tmatesoft.svnkit</group>
      <name>svnkit</name>
      <version>1.9.3</version>
      <description>Java(tm) library to manage Subversion working copies and repositories</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fe12b57f5c35612d39c9ea6e25ee5530</hash>
        <hash alg="SHA-1">58ef49dcf3e565f8008442842812f13faa50981c</hash>
        <hash alg="SHA-256">18d501b481363595dc376fa4c4c81bd02e980e67269a7de35ccc7fe18e408fe7</hash>
        <hash alg="SHA-512">de981eccc343f73e5e93d143114b9128ef4ac337a5a2f23353668bd1658ba15ef2b592779bce6e905015f48056976c6a4ca5c4058e3d2e97abbe1ee624a32298</hash>
        <hash alg="SHA-384">c3aeee81b720089fde2096dd387aa57882e6dd6ee4f1471a1dcc608c9bdd6dc5b3cfcb5a65a5d99df6b961fbf71e763a</hash>
        <hash alg="SHA3-384">b475d01a27d1fe69dc5fea1f03814a1f51892267fd3dbc6c8207049fc1c36278a05c5287c2b0b2778306795c210631a1</hash>
        <hash alg="SHA3-256">0c16a2aa3b0a320cc47010169f119670f977039aff9357f92d8a7d4b0944092f</hash>
        <hash alg="SHA3-512">017cd9377d716e474e90072699072f52d1f41da6b842c83125d87ed8c884eaac43c22306dc782f9b6ffd6c9088a668a12af5441c581431c6ee58d74c27f5d3e6</hash>
      </hashes>
      <licenses>
        <license>
          <id>TMate</id>
          <url>http://svnkit.com/license.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.tmatesoft.svnkit/svnkit@1.9.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://svnkit.com/</url></reference><reference type="vcs"><url>https://svn.tmatesoft.com/repos/svnkit</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/de.regnis.q.sequence/sequence-library@1.0.3?type=jar">
      <group>de.regnis.q.sequence</group>
      <name>sequence-library</name>
      <version>1.0.3</version>
      <description>Textual Diff and Merge Library</description>
      <hashes>
        <hash alg="MD5">0c7450d250b594fcbc6bc170dbe2a98e</hash>
        <hash alg="SHA-1">3bcf12fa805a735bb26369cd66c5933767c026de</hash>
        <hash alg="SHA-256">cb876d3b370b227ed9852a5a874427dce24a0df3e2f7409a11edfbcc5c4243a8</hash>
        <hash alg="SHA-512">eeaa2ec7160de4c15f3fd03fdbde459a55703a9585084b75d4fab17e0f1049f40fce243f8ad7d0a6aa7e901c2409af485cce914ca60bd247922fb737402bed56</hash>
        <hash alg="SHA-384">ac19e261a762457973c8b91d17663ce6178510e0c44b928fc4dcb0f7bbf34973ce966f9faa8a9f2a8076df68779d1044</hash>
        <hash alg="SHA3-384">a28c3625398bd6c797acdc9ee0d56b9b12815e08e1d17697d9390e8e331b54e00d984cb3a84de5fc83d0a12bd6492100</hash>
        <hash alg="SHA3-256">c882d4821339a90a524a8f93876404544278b0ac4c79961b51506bb5ff113d9c</hash>
        <hash alg="SHA3-512">e3835ab4bfb4dd6d2542d7f2d4cff7bf1da6295c84a0edaa531e71f673140c1906effff3e3cc33c6b8410459ab6ca752a9822a2eb2be62b52cf1743232f77124</hash>
      </hashes>
      <licenses>
        <license>
          <name>Sequence Library License</name>
          <url>http://www.svnkit.com/SEQUENCE-LICENSE.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/de.regnis.q.sequence/sequence-library@1.0.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://svn.svnkit.com/repos/3rdparty/de.regnigs.q.sequence</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.tmatesoft.sqljet/sqljet@1.1.11?type=jar">
      <publisher>TMate Software</publisher>
      <group>org.tmatesoft.sqljet</group>
      <name>sqljet</name>
      <version>1.1.11</version>
      <description>Java(tm) library to manage sqlite databases</description>
      <hashes>
        <hash alg="MD5">920464becd225d7419807aaf67cbc26a</hash>
        <hash alg="SHA-1">68c946d051fa4aa9d3f2a793c556c35fcfba0be3</hash>
        <hash alg="SHA-256">bbfdd44fe8e00165431aee31bb8988534ea7ba4869076c621d9ee87d097edab6</hash>
        <hash alg="SHA-512">932e6c1bba9ae586c7b05d2560a0621f344ba0a5e479a14d61d063053d6f686c733f3f2509685f242b973d866f881fbb6f3b1ccaf068b689514c89da91076a60</hash>
        <hash alg="SHA-384">840b7d9dc692ef73964d9ad9102f06bf88689a983426c2318ef7ecd8f0014c34a20411a6e71f0a24187f2fe4206aa481</hash>
        <hash alg="SHA3-384">2786fd68f167a8477588560162093878eaabc1fe8dcf7d267c62aed8efdea8a57e963b8a485433f8977cddf690e9cc05</hash>
        <hash alg="SHA3-256">23df1c45e54feffbb83b85708a20f0e1125aa3004fda56b3258a0ead75f16d2c</hash>
        <hash alg="SHA3-512">4eda01920156de3b89499a7f6166691ef55df67ef53863e2eda547b6084c732cc5e35059e49ee61b1a7aff844a55dda473cbea1fc0abc20413591bd4a36672b2</hash>
      </hashes>
      <licenses>
        <license>
          <name>GNU General Public License (GPL)</name>
          <url>https://sqljet.com/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.tmatesoft.sqljet/sqljet@1.1.11?type=jar</purl>
      <externalReferences><reference type="website"><url>https://sqljet.com/</url></reference><reference type="vcs"><url>https://svn.tmatesoft.com/repos/sqljet</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.antlr/antlr-runtime@3.4?type=jar">
      <group>org.antlr</group>
      <name>antlr-runtime</name>
      <version>3.4</version>
      <description>A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing Java, C#, C++, or Python actions.</description>
      <hashes>
        <hash alg="MD5">0e0318be407e51fdf7ba6777eabfdf73</hash>
        <hash alg="SHA-1">8f011408269a8e42b8548687e137d8eeb56df4b4</hash>
        <hash alg="SHA-256">5b7cf53b7b30b034023f58030c8147c433f2bee0fe7dec8fae6bebf3708c5a63</hash>
        <hash alg="SHA-512">1786aff2df4664483adcb319e64be7b69b643ac9508c3f11796b5aa45b9072b46f53f0a21b2ff7291162afe81506de16161746273e4532ebad75adbd81203f0d</hash>
        <hash alg="SHA-384">6ee2dcd3cf8366fe6ee18fb87aebe2d162b232c89e0aab417f97fed368cdf652d27db518dc5e71aa2a4aadda2e7f4c7a</hash>
        <hash alg="SHA3-384">db284c93203cbbec1b22b482a45c70c68e858a90e73b23fae66c1bc53231b0f61c5576fcf51ea0d3a30070428d7dd865</hash>
        <hash alg="SHA3-256">3f6cf631e9f792a41128400f8690266d915c0588ef85073a6cae73624a155b10</hash>
        <hash alg="SHA3-512">13d1f73c44e807b36946c21cfd506e91e8cbdf685b770cbc0dcb4e55ec28b5bc91bd90eb7f24ebfd13386a47eccf552dd2a1ab277fccabafdb7a9b40aa9d4fc5</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.antlr/antlr-runtime@3.4?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://fisheye2.cenqua.com/browse/antlr</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.java.dev.jna/jna@4.1.0?type=jar">
      <group>net.java.dev.jna</group>
      <name>jna</name>
      <version>4.1.0</version>
      <description>Java Native Access</description>
      <hashes>
        <hash alg="MD5">b0e08c9936dc52aa40439c71fcad6297</hash>
        <hash alg="SHA-1">1c12d070e602efd8021891cdd7fd18bc129372d4</hash>
        <hash alg="SHA-256">1aa37e9ea6baa0ee152d89509f758f0847eac66ec179b955cafe0919e540a92e</hash>
        <hash alg="SHA-512">ea1b400cf25c6032160553f19baedb21103341f1c4236fbecf5f8462cc4db06f3459d7812ed0ad07a0b9faa3b576f8fa6edbd9ed64f9486b85e5bf982c21775e</hash>
        <hash alg="SHA-384">5224672e925785b80737e084f4e4fb7005327c45b6ddf698a5d5bb687fff63b56efa8d8d283707b922443590b3529a3f</hash>
        <hash alg="SHA3-384">dfd9e7ddb6a0929f004910056c445d84ac496f229d0606aca08682ea594ee8bcc83d46961b8adec11c06bca272c116a7</hash>
        <hash alg="SHA3-256">0db5f48ff7e2de2c987491eeaf33a7cf1716081b8716548fb49178a9ac7090b3</hash>
        <hash alg="SHA3-512">c62abaa20d16ff933afed6a3277325ef74d6d774e17c32b6884b3f9893ac05bc3ab2c5ffbab7cdf1e3b8947c9cd00314321a58809a09d4893e2430cca928928e</hash>
      </hashes>
      <licenses>
        <license>
          <name>LGPL, version 2.1</name>
          <url>http://www.gnu.org/licenses/licenses.html</url>
        </license>
        <license>
          <name>ASL, version 2</name>
          <url>http://www.apache.org/licenses/</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.java.dev.jna/jna@4.1.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/twall/jna</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.java.dev.jna/jna-platform@4.1.0?type=jar">
      <group>net.java.dev.jna</group>
      <name>jna-platform</name>
      <version>4.1.0</version>
      <description>Java Native Access Platform</description>
      <hashes>
        <hash alg="MD5">533e404eda70bbf8e40de134ffeec95b</hash>
        <hash alg="SHA-1">23457ad1cf75c2c16763330de5565a0e67b4bc0a</hash>
        <hash alg="SHA-256">f91ba7c0f26c34f04bf57d2ae30d4b19f906e7bb1de90eb3e1f4fdbf45d0c541</hash>
        <hash alg="SHA-512">8ab09d04fd7e86b505f917e0a2b11d2c2e9f3a3e923a9fb94ad7e0bf6715f1923e02d8f3927f9580ab9f39f9fa213176013c3bcd977c2d1ef6461e2610571455</hash>
        <hash alg="SHA-384">a221c3fecdb184a285468a2674646644952f6765a404db2f8c59038c71d816bea98f48aba5c2dd9115e4f64ff7a71d7e</hash>
        <hash alg="SHA3-384">fc29373b43a5462f1c0366b0c5d0f8e8aed683499bdccbc1e1acab01c5fb77a1a443b456793afa36c6b9297e6d65c953</hash>
        <hash alg="SHA3-256">55e5e2c9254185eccb2baa5b94dd15d33ec89990c387769bf560f1dbb443119d</hash>
        <hash alg="SHA3-512">8b34ec69172aa635b6ab1223d4de3d5f4ac957062b65d980b23b2625fe49d13535509ab691a4046a8ba1cef317992f472f2db493204a47ee865e64137e7fc036</hash>
      </hashes>
      <licenses>
        <license>
          <name>LGPL, version 2.1</name>
          <url>http://www.gnu.org/licenses/licenses.html</url>
        </license>
        <license>
          <name>ASL, version 2</name>
          <url>http://www.apache.org/licenses/</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.java.dev.jna/jna-platform@4.1.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/twall/jna</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.trilead/trilead-ssh2@1.0.0-build221?type=jar">
      <group>com.trilead</group>
      <name>trilead-ssh2</name>
      <version>1.0.0-build221</version>
      <description>Pure Java SSH-2 Library</description>
      <hashes>
        <hash alg="MD5">0216689db62589e318219f1a746fd8fd</hash>
        <hash alg="SHA-1">c14d6fbab5e4ac1eb355f92e91b4c2c28a17e9b9</hash>
        <hash alg="SHA-256">b8ece3a1d49859687701738007b76261672f969cb02ca0c05110981678342a78</hash>
        <hash alg="SHA-512">9b946e775c7958ad3e6fcfa9463b34a93680bc1884073fc9e602a353082474907c6d78fbaf4bd078d305893140b26c1b1b52745e64bf7868aab7a77d54ae6997</hash>
        <hash alg="SHA-384">2594f238b9a946632413edce09d8c54bee3ad3bb3676666d6763bd8cf483d67eb2177e12267d46a1137cc1cf70c6e350</hash>
        <hash alg="SHA3-384">088bf5e7f861d4f3e04b4c760ad49e1ce3ef9b28104bdb69256d0af294cbe5bcc5095b3f5e3b75722418c82da76418fa</hash>
        <hash alg="SHA3-256">c58141c2cc2db5880b68bc5a7c5026950c633f25654a786ee1a65b1f9641eea9</hash>
        <hash alg="SHA3-512">fc9ae08a0daa2f050f6304473af3b0a7528a2aec6edce16c7469158083ec071ffc5d9bbd98cfacd675e5262df030a0f3789aba10e12e18682f303545041c9dc0</hash>
      </hashes>
      <licenses>
        <license>
          <name>Trilead Library License (BSD-Like)</name>
          <url>http://svn.tmatesoft.com/repos/3rdparty/com.trileads.ssh2/trunk/LICENSE.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.trilead/trilead-ssh2@1.0.0-build221?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://svn.tmatesoft.com/repos/3rdparty/com.trilead.ssh2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.jcraft/jsch.agentproxy.connector-factory@0.0.7?type=jar">
      <publisher>JCraft,Inc.</publisher>
      <group>com.jcraft</group>
      <name>jsch.agentproxy.connector-factory</name>
      <version>0.0.7</version>
      <description>a proxy to ssh-agent and Pageant in Java</description>
      <hashes>
        <hash alg="MD5">50885bf953879373de768314dcf222a7</hash>
        <hash alg="SHA-1">780e0312287dd4e4f3601d401a073a081e403f2d</hash>
        <hash alg="SHA-256">b576930d6a822761123365358d90281351d88cec2dd845912873c1696184d6cb</hash>
        <hash alg="SHA-512">69f5a9c53f867a7d17aa4ec3877a39a7cd9ea99d535f538963e8366bfed5c398d5c0110922ffff12f2495b64a67b5de9368f3c4bd92e988abc8a56d3266d6339</hash>
        <hash alg="SHA-384">d903bb7e0084c1c81fea018952ff0903688baea262559fe3f6996a0dad15fffab21b36432dc337bba957e575794470ad</hash>
        <hash alg="SHA3-384">190bf2eb4d4f4767e2ac5f054501aae5b3b3737716d3527305d33efae69e74655128cdd7454c62d824c3ca36bf57bfb7</hash>
        <hash alg="SHA3-256">b66334e9e7f89008b164a8c3b7d35511e7270f2084b1d7272dfc20f2c09d4670</hash>
        <hash alg="SHA3-512">55ceecc1b5cef6990b52edffbbd9dbc7e7b5c96f111955a1235bbe54f6f0d7f8ae8708aef36d7ceee965b6bbb41121e28df70056a980696f9443e71e8ca62de1</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.jcraft/jsch.agentproxy.connector-factory@0.0.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jcraft.com/</url></reference><reference type="vcs"><url>http://github.com/ymnk/jsch-agent-proxy/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.jcraft/jsch.agentproxy.core@0.0.7?type=jar">
      <publisher>JCraft,Inc.</publisher>
      <group>com.jcraft</group>
      <name>jsch.agentproxy.core</name>
      <version>0.0.7</version>
      <description>a proxy to ssh-agent and Pageant in Java</description>
      <hashes>
        <hash alg="MD5">0d4248a640962d82159b4e9c4bb48c76</hash>
        <hash alg="SHA-1">9bcf818dc9e5247b01b1b18671a12caac293ae40</hash>
        <hash alg="SHA-256">c5cb21fed78fd2c581e40276e428b6407e4801edb0baa1f7ef0c1025d06a3a7f</hash>
        <hash alg="SHA-512">65061ae678cd28fe17993504c14ba51d729c0e696c469745c48bc0f1475eb9309f6cb1a8ce957ed2b16bb34c0957dd5357e432cc1d463e700c74985bccdc6169</hash>
        <hash alg="SHA-384">dfb7efb6feb7f0d1c887e3b327e133efd1ab1916c78ab7b5050a544c0658b54c2a0815dadef05072e68b5e1465a82793</hash>
        <hash alg="SHA3-384">d932b1d332490285d3c51fe14b3f464d364d18711ce19e69ec0c88522879d71a3bd4faeda14dc8c76015b2bd8579fa64</hash>
        <hash alg="SHA3-256">afe1e9213bacc41c245450470c3e80375115d311eacc33eb249e373545079811</hash>
        <hash alg="SHA3-512">cb6afc131972e8b8d1df2e22e1ce190f500906766a29d7ca63aeb4d49b1282534646b3793bd909c7bf7314b2692dbc1ae11aa4c34da5d3844a971a103df5a475</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.jcraft/jsch.agentproxy.core@0.0.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jcraft.com/</url></reference><reference type="vcs"><url>http://github.com/ymnk/jsch-agent-proxy/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.jcraft/jsch.agentproxy.usocket-jna@0.0.7?type=jar">
      <publisher>JCraft,Inc.</publisher>
      <group>com.jcraft</group>
      <name>jsch.agentproxy.usocket-jna</name>
      <version>0.0.7</version>
      <description>a proxy to ssh-agent and Pageant in Java</description>
      <hashes>
        <hash alg="MD5">154b2f744a11226fd8abd92baef84523</hash>
        <hash alg="SHA-1">98cf51ca8d7882c203729ffa48e9b7be4c50b835</hash>
        <hash alg="SHA-256">57b8169c4877a4820a57df9ec5e5306d195d633d90672d3cc05ea876ba6d4999</hash>
        <hash alg="SHA-512">b9b51cc6fb03c1ac4ead14846dbe89f30853ad9fe7a3d463620de20035aa86d7b4642a0f2d2053c46d51dc830795720595d30bed13ebd78abc4ae285c5c2d571</hash>
        <hash alg="SHA-384">bc04e31ee2ddd07fd7ee2dbce52cb18669b015692a8dbdf86a142f4f471aef3446d0060df82cc094a41880b4d283e12b</hash>
        <hash alg="SHA3-384">1681d1efe1eb2f0fe94d6a9f3ae96efcc57f6201ebfb97e07fb03d968df47a295fa130a224d03ba835828964f2be77d3</hash>
        <hash alg="SHA3-256">a35eae779984dcca21bb770c0fbb7b2b3dbca1be116e456d97b96e65124149e0</hash>
        <hash alg="SHA3-512">8f1c2b0fae8dc249afd9187233be501977aca2f0e58808961959f696051f2badc02f93ba4b9abb7216fed147da94bfe71febcbd9e25ba10bdd4fb1766e15f45a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.jcraft/jsch.agentproxy.usocket-jna@0.0.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jcraft.com/</url></reference><reference type="vcs"><url>http://github.com/ymnk/jsch-agent-proxy/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.java.dev.jna/platform@3.4.0?type=jar">
      <group>net.java.dev.jna</group>
      <name>platform</name>
      <version>3.4.0</version>
      <description>Java Native Access Platform</description>
      <hashes>
        <hash alg="MD5">c5057d6dc3a531708e4a91249fadda3f</hash>
        <hash alg="SHA-1">e3f70017be8100d3d6923f50b3d2ee17714e9c13</hash>
        <hash alg="SHA-256">ea89d5090c8303ba4e9a0056e6d8a20429f3e021411e950bfd9eba3b6e6cf15c</hash>
        <hash alg="SHA-512">a89db5e82b44181d1b76ab9a7c1a0156f0511374a0d2c374ed815d4941f8566da0864e14492c85041938286dc2b27b8b0ed32188fa30e2e6286bc6f15339f7d3</hash>
        <hash alg="SHA-384">f7112e2d67595f8554a0aa72fadab872281afedfc7fd0013590300a48feb38dbc270d497dd15b92f6c73d0d9a286a89d</hash>
        <hash alg="SHA3-384">9f02e57719d009fad600d60ac09e8c7f8ac2e8a9801fba565c9965c5d1525bbfc9add02d6b68bc8dc77694ed692607e6</hash>
        <hash alg="SHA3-256">ef7e3c22120bb98ae347aceb982e23fc8cb58cb1cbf1fe2ce206865b52a0d826</hash>
        <hash alg="SHA3-512">3a3fa2439540a43f99b87c16772191ff54845e8c74c0f189f55ffd22f895ab06c7cf2e7966596ec90b4c7c58e7c33be796327f9d40b8c38d2991b39dd57f16f0</hash>
      </hashes>
      <licenses>
        <license>
          <name>LGPL, version 2.1</name>
          <url>http://creativecommons.org/licenses/LGPL/2.1/</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.java.dev.jna/platform@3.4.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/twall/jna</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.jcraft/jsch.agentproxy.usocket-nc@0.0.7?type=jar">
      <publisher>JCraft,Inc.</publisher>
      <group>com.jcraft</group>
      <name>jsch.agentproxy.usocket-nc</name>
      <version>0.0.7</version>
      <description>a proxy to ssh-agent and Pageant in Java</description>
      <hashes>
        <hash alg="MD5">b67c8e11e8792fd5a96c08a2e50bddb6</hash>
        <hash alg="SHA-1">aff6f0f3a68f9731580d7c48075fdf177532dfe6</hash>
        <hash alg="SHA-256">231294f658fb855c0c8d070fc1c654d2b82772acc092e8d5ba53e9ae717a7096</hash>
        <hash alg="SHA-512">580854025c7c5299a0911df7829c5e61046877228e2b9d3d1d0e785660c9b41314a5fb66000785680a027917af3278d61ac3c3d477fe4cbdcdcb88eccb0a8145</hash>
        <hash alg="SHA-384">f7eff42d13e414ad421b0d0c9f568ae6e7483e2454226ff6240ed32bf54d81789b7f403d06cdf329329d2f1e805601be</hash>
        <hash alg="SHA3-384">f17ebf34669858876286f1b2d574670f266b2c96b189c2b9100cba62e09fd6321b1a28b91f047167660fc4e8c9476c22</hash>
        <hash alg="SHA3-256">c9c8efcae5a468fb3bb22957dcccbcbdd401c158fb6b655e6bf95c59f3e877bb</hash>
        <hash alg="SHA3-512">d9a4141a279f38ab69f239dc723d114bc81367f3f33b94565bf022007874cb6f66060e87c444b23e333aeb555356f1307e4d1c62769d8d284d61da3eb8b61951</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.jcraft/jsch.agentproxy.usocket-nc@0.0.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jcraft.com/</url></reference><reference type="vcs"><url>http://github.com/ymnk/jsch-agent-proxy/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.jcraft/jsch.agentproxy.sshagent@0.0.7?type=jar">
      <publisher>JCraft,Inc.</publisher>
      <group>com.jcraft</group>
      <name>jsch.agentproxy.sshagent</name>
      <version>0.0.7</version>
      <description>a proxy to ssh-agent and Pageant in Java</description>
      <hashes>
        <hash alg="MD5">5c4483e01a032a784be2f0b2ccb983ea</hash>
        <hash alg="SHA-1">5c09a3d2a0562de53cf616794f43f51a3c0a496c</hash>
        <hash alg="SHA-256">fd03fdeb40312846a0827cce1b2f93773d0d1ccc134bdb953dfac2d2cd44b321</hash>
        <hash alg="SHA-512">ce29ea8889a04b4e4ee3321db3859cf935e0d508c3725033d470560f12a37641502a6645e8f2e89f64026f3ebd3b601a9cd9b528361af2da31fda2fe519aa8c8</hash>
        <hash alg="SHA-384">e439a78eed8766a03d6e2657f4b82f8518fe5dc0b3d25d8a1a43f83e5e1842315d5d69e87b70d0f5c214544aef28d5a5</hash>
        <hash alg="SHA3-384">0a262e500b86cc63ea5bcec13aee3577f332efe45614bb41ab54905374b9c110aa65d31490b278735940689697a36e3b</hash>
        <hash alg="SHA3-256">abeb1212cdfea5c4c8357d095685876e33848ffe9b4c4b66f8efce0d97000266</hash>
        <hash alg="SHA3-512">59399bcde768a9ff992bd5c6c7fa94e54dca5f37cc88a635c94b5c2fbb78b1e9baaf0081e5813ac850645fc4b25fe1b9861242a70c3f30a9a9b0cd353cdf574a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.jcraft/jsch.agentproxy.sshagent@0.0.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jcraft.com/</url></reference><reference type="vcs"><url>http://github.com/ymnk/jsch-agent-proxy/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.jcraft/jsch.agentproxy.pageant@0.0.7?type=jar">
      <publisher>JCraft,Inc.</publisher>
      <group>com.jcraft</group>
      <name>jsch.agentproxy.pageant</name>
      <version>0.0.7</version>
      <description>a proxy to ssh-agent and Pageant in Java</description>
      <hashes>
        <hash alg="MD5">200f22f9b2845e11eaa5f6a8bad51feb</hash>
        <hash alg="SHA-1">b40c0d9b10d79a0683ca93e3f70360b3d8045b62</hash>
        <hash alg="SHA-256">609b7b9d00b29021397544652b649045209c41165790612b2b0df6f74c8dfb27</hash>
        <hash alg="SHA-512">a19ef8c0823e8fbb6d1eef41dfc124c810523235deff7d31bc7db4140751ded187d04a705e5cc68ab8ebc447795f88ef751cb79ee05d797d18f639b487e0a01a</hash>
        <hash alg="SHA-384">faddf23d9b119b906286a6513541f5fb0f8b7e5625e443b622dd8b57df102393a44e68d5e05b4e937cec3a705ec59378</hash>
        <hash alg="SHA3-384">cb0b598e9f98b3d1d34c0b781fa997addf1d26958f2dd3e0cb310a48ec4d91a75bdedc53792dd42825406a6aebb56ffc</hash>
        <hash alg="SHA3-256">2f0d0ae5db0c40d950dbbb60e2a297dc37268467b30da33de83ec25b7b784126</hash>
        <hash alg="SHA3-512">9ff7c45071745fcc484c85fd36031499866156614e24cc015c4536c0b0dd1b1c80f914bf79428e1dcf99cfdcc08c86a5acb4e89700c0fea9aa4d2047a9a452d4</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.jcraft/jsch.agentproxy.pageant@0.0.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jcraft.com/</url></reference><reference type="vcs"><url>http://github.com/ymnk/jsch-agent-proxy/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.jcraft/jsch.agentproxy.svnkit-trilead-ssh2@0.0.7?type=jar">
      <publisher>JCraft,Inc.</publisher>
      <group>com.jcraft</group>
      <name>jsch.agentproxy.svnkit-trilead-ssh2</name>
      <version>0.0.7</version>
      <description>a proxy to ssh-agent and Pageant in Java</description>
      <hashes>
        <hash alg="MD5">3f5cb0506577bb2c3dd1488079cd789f</hash>
        <hash alg="SHA-1">95015f649026507428aa2f37baba69ba8a86dc67</hash>
        <hash alg="SHA-256">d0f54fa650ef7130046dd752c1cf46b2dd1f1009632cf82ad0a2dc6e7dde0f57</hash>
        <hash alg="SHA-512">c93b941c919be45f0e4f62d6020ba33fed860b941e760aef8fb8c41465ac4d90a486b710c8be464d318ae2fc42fc62253ef08778bb0d7fde5a37d292181cf0ce</hash>
        <hash alg="SHA-384">2033840432c52c68f4e72256bffe4689f8b3dfa0858b3baacbb7ba44af7ffc05804a09f2a1bd571c9665d04408fad275</hash>
        <hash alg="SHA3-384">3b68fddbadca49d00948ec5289624167bee4ae73e24e9a92ffd6d0108ccb5df5425187ef15a5a4d64d51d3ef6c47886b</hash>
        <hash alg="SHA3-256">9ddb2fd0695cc39632e1d386f4ab1bd3ef2bdfe7f3e0e4d81b22f3196b761173</hash>
        <hash alg="SHA3-512">8b1783a6f28f7a166d2ba8d5f7b3c12d6bb15b0b2ce21012fff2991efee73e9c6b2a456fc6dc827938ccda7406e3e65791b519fca4cb2b911f05a4c3d4121add</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.jcraft/jsch.agentproxy.svnkit-trilead-ssh2@0.0.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jcraft.com/</url></reference><reference type="vcs"><url>http://github.com/ymnk/jsch-agent-proxy/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jgit/org.eclipse.jgit@4.11.7.201903122105-r?type=jar">
      <publisher>Eclipse JGit Project</publisher>
      <group>org.eclipse.jgit</group>
      <name>org.eclipse.jgit</name>
      <version>4.11.7.201903122105-r</version>
      <description>Repository access and algorithms</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">baf665a45cccd9600301ecff68830990</hash>
        <hash alg="SHA-1">9dcc2516b5eac5aa2d412d776b17ecfbdb411cc3</hash>
        <hash alg="SHA-256">9a5caa0e467e448796643bfc3a5e3deb09140905f5a640810876d7df706a2a98</hash>
        <hash alg="SHA-512">0ff9044343525998dce8934085f5fc4b3ce321295e3c75082f63deb21525b3c541ac7d80a731cf63c74a81cb308fdc4eb9202a00a9783c7083d3b4428ccae191</hash>
        <hash alg="SHA-384">195b5d83cdb1f3918f3d447430ebc3393b05ef5c1827fd12f5dc80d073e1253626cefe74c5f4330ad7a7d63777075dbb</hash>
        <hash alg="SHA3-384">f716e528a82bd66822580bc8b797ae5ecc56e274b04783f67003f82b9d0a88053336cb38cc33101912be3aabcf41f931</hash>
        <hash alg="SHA3-256">741c1291bd71004872cb9f7c26e76bfa9df6c57244f60f0b7798a5541c8d1209</hash>
        <hash alg="SHA3-512">2c5a450728b0b45f8855a82475cae68c0cf535b9a6dda58fc4590a2d20d64e0db108c1e140ca9570ebc4423e775f3bebecb8728790e44da4ea396555d47c42d3</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jgit/org.eclipse.jgit@4.11.7.201903122105-r?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/jgit</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/jgit/</url></reference><reference type="distribution"><url>https://repo.eclipse.org/content/repositories/jgit-releases/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/jgit-dev</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/jgit/jgit.git/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.jcraft/jsch@0.1.54?type=jar">
      <publisher>JCraft,Inc.</publisher>
      <group>com.jcraft</group>
      <name>jsch</name>
      <version>0.1.54</version>
      <description>JSch is a pure Java implementation of SSH2</description>
      <hashes>
        <hash alg="MD5">56a6c6fc5819e21c665355b39b9097d8</hash>
        <hash alg="SHA-1">da3584329a263616e277e15462b387addd1b208d</hash>
        <hash alg="SHA-256">92eb273a3316762478fdd4fe03a0ce1842c56f496c9c12fe1235db80450e1fdb</hash>
        <hash alg="SHA-512">97ec6de64f4870ee3c84f883bd3664562bfd600ca9f3364966e7dbee7e4e8520647c03f9f81d6808e330052ca1333e37f497d6252cd26fe721a90f573cbe2036</hash>
        <hash alg="SHA-384">f18a28efc1b7869c57f679ada330a889f748f782dbe2dfc403aa55ef65de76fdfb779541dc7b59ace118cc8dbfc49e9f</hash>
        <hash alg="SHA3-384">5a55e9af0daa852cba4e8bad1028baadcc3c7963e63f523a829e9e783934d5fa335f0bbcf4cc0a582bd8c9ce63810cfb</hash>
        <hash alg="SHA3-256">87625beb207f951fa4dfa826a7276ab886fa45a2971319a0da8701984a36ccec</hash>
        <hash alg="SHA3-512">1f9a0621a9f004714dce44790b67f48f7d6e02550e12789ed65ebe961d4bf8de148d6955dcf76972fc2605cced7cdc33e7b9b71d9f3a8db0b4f8dd075992b91d</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.jcraft/jsch@0.1.54?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jcraft.com/</url></reference><reference type="vcs"><url>http://git.jcraft.com/jsch.git</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.jcraft/jzlib@1.1.1?type=jar">
      <publisher>JCraft,Inc.</publisher>
      <group>com.jcraft</group>
      <name>jzlib</name>
      <version>1.1.1</version>
      <description>JZlib is a re-implementation of zlib in pure Java</description>
      <hashes>
        <hash alg="MD5">553b605c56ec6f508ab46ed026e21622</hash>
        <hash alg="SHA-1">a1551373315ffc2f96130a0e5704f74e151777ba</hash>
        <hash alg="SHA-256">5cb1e9f9cf0be011487545694ff0a178237c6bfcbb21c97865cdc52c60b9347a</hash>
        <hash alg="SHA-512">223af0806a19fd25e2496c980b9824b7612528013eab9e7e21161acfe81a6f808d3d65148bdaa794c9ab73c518f6b49aa7a69107c9bc0d66d6f8e78c39964f8f</hash>
        <hash alg="SHA-384">1ba64c0b6f58c5c7eb1b72f2fd773cb1e3fc68d8342ef05b5a4c059d5acca7a901cd8f8e0f11eebfa2d8903ec0e4d739</hash>
        <hash alg="SHA3-384">9553412a7f5fdf143afbef4df2997f572d2937d9e6484308527d3239c8a2708382266fb146ba342067f54dc14d630fc4</hash>
        <hash alg="SHA3-256">2a156f13e0e371d1990f2a740c05133dd31b259c8b4a2592198ade970288940c</hash>
        <hash alg="SHA3-512">a02ad837904a671ce4029d80d34644a736da9e1063e1df347fc2685cb3904c23adcd18d3dd3ce84b1ad0369eeffce3a405c684fefc3beae06aec2674ec2c3534</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.jcraft/jzlib@1.1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jcraft.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.googlecode.javaewah/JavaEWAH@1.1.6?type=jar">
      <group>com.googlecode.javaewah</group>
      <name>JavaEWAH</name>
      <version>1.1.6</version>
      <description>The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression.
  JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme.
  The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.</description>
      <hashes>
        <hash alg="MD5">ad90237fa8e47defd9fdac73e68608fd</hash>
        <hash alg="SHA-1">94ad16d728b374d65bd897625f3fbb3da223a2b6</hash>
        <hash alg="SHA-256">f78d44a1e3877f1ce748b4a85df5171e5e8e9a5c3c6f63bb9003db6f84cce952</hash>
        <hash alg="SHA-512">fea689d1e29761ce90c860ee3650c4167ae9e5ecaa316247bdafac5833bce48d2b3e04e633b426e3ab7ef3a5c9c7fd150ffa0c21afdcae9c945cb2bb85f8a82f</hash>
        <hash alg="SHA-384">29bb6137d8fe88d77da372eb92e8ea746594ce407765317d5b3ed30fc28fb88bc0c103d7d61285e536a6412c94223441</hash>
        <hash alg="SHA3-384">09dcd5b653672743c56c88af38837884890ceb35b231baa3e5db908833a69b7ce5f110206f2e64d12212320e29796973</hash>
        <hash alg="SHA3-256">479933fb6e93f4c00b3ca0ffdc1a3e42b94694b4cbcc9a4b57b0d210221c344f</hash>
        <hash alg="SHA3-512">56170a27378da13f8b591f80251f21e1c3c2d0bf9cc1bed1d3c024f2b8978f1a439761dd73e51bd281087adec75a1ad5195aae943f044d71bcec380b86450d8e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.googlecode.javaewah/JavaEWAH@1.1.6?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/lemire/javaewah/issues</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.2?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.2</version>
      <description>The slf4j API</description>
      <hashes>
        <hash alg="MD5">21216c2ee1bf4f097a51e49418527100</hash>
        <hash alg="SHA-1">0081d61b7f33ebeab314e07de0cc596f8e858d97</hash>
        <hash alg="SHA-256">3bae789b401333b2a1d1603b7fa573e19908628191707203f6eb708cdee2c052</hash>
        <hash alg="SHA-512">bfe12c722ed57faa3e26fef214d95b9bdd2192742901920954979926d51e7b1bf0f61ea538f858328f4d6a306affecdcef9d52452530cd2fe5c03552350c0ea0</hash>
        <hash alg="SHA-384">71781e6afb1b0b3de37efa280c4d06cd53c1a9ef8d4dac24c77f591f9316fd93dec2606409e7762cdb9f4440f525c218</hash>
        <hash alg="SHA3-384">8a4975d4d3ad1a850d18a61de00c1146a426571fa6f6b1341c5ed2f36763f442ced826417fb6f9ef718448b8fba171d8</hash>
        <hash alg="SHA3-256">b16b52c7e7922225546047213ae79173211d0d949671588cd013e426b845702f</hash>
        <hash alg="SHA3-512">fa3fe0802b7724d8afc7d312b631090d8c94991f0fc17044433cb374dcc1e83a2968ff6ebb245094f97a71ef63edac3b1751ff1bcd4442d8eeed1b3fd92c410c</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/ceki/slf4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.steady/patch-analyzer@3.2.5?type=jar">
      <group>org.eclipse.steady</group>
      <name>patch-analyzer</name>
      <version>3.2.5</version>
      <purl>pkg:maven/org.eclipse.steady/patch-analyzer@3.2.5?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.steady/patch-lib-analyzer@3.2.5?type=jar">
      <group>org.eclipse.steady</group>
      <name>patch-lib-analyzer</name>
      <version>3.2.5</version>
      <purl>pkg:maven/org.eclipse.steady/patch-lib-analyzer@3.2.5?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.steady/kb-importer@3.2.5?type=jar">
      <group>org.eclipse.steady</group>
      <name>kb-importer</name>
      <version>3.2.5</version>
      <purl>pkg:maven/org.eclipse.steady/kb-importer@3.2.5?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/com.jayway.jsonpath/json-path@2.7.0?type=jar">
      <group>com.jayway.jsonpath</group>
      <name>json-path</name>
      <version>2.7.0</version>
      <description>Java port of Stefan Goessner JsonPath.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2db2100b179bd83518fef0b563433a15</hash>
        <hash alg="SHA-1">f9d7d9659f2694e61142046ff8a216c047f263e8</hash>
        <hash alg="SHA-256">de82f0e4602eea0187df36779ae8cfc1653b6d920125674af4d365d0bca59508</hash>
        <hash alg="SHA-512">1f2b97f22607a2032f9c618eeb0c9f78aa3f99e94c902326d9f7e84903d603bcad293d2f566b7cc999c1aa6c9d607ef7509314e504fe9290b2b93913631790de</hash>
        <hash alg="SHA-384">e5d79e4ad4bec36a1bf1c7fd9aaa820fb3473e9cdbe55791e5e909a835ee595c47957e4e0033195d46968ed103c95355</hash>
        <hash alg="SHA3-384">387b0d8e9a9b776a43b21e24260956b22b01f70b624ddd8c26ad383781398e416fef938d210113805a1788f3b3127841</hash>
        <hash alg="SHA3-256">ba2605ba7fa4ca243837889be020d9a3151fdbb6197420d849a705744e5a634c</hash>
        <hash alg="SHA3-512">12f7c20f8ae51508f36efa2ca141fa7dd305d5bf90dfa37f01f8505c4ab925b60e87f05eca8be57263552bde597efe068040204281a5ead472b94e6b11ad0629</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.jayway.jsonpath/json-path@2.7.0?type=jar</purl>
      <externalReferences/>
    </component>
    <component type="library" bom-ref="pkg:maven/net.minidev/json-smart@2.4.7?type=jar">
      <publisher>Chemouni Uriel</publisher>
      <group>net.minidev</group>
      <name>json-smart</name>
      <version>2.4.7</version>
      <description>JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f04005088df03f6efac608a7a5d53cd1</hash>
        <hash alg="SHA-1">8d7f4c1530c07c54930935f3da85f48b83b3c109</hash>
        <hash alg="SHA-256">28c17ed16ac22e6845743fd1e84321edf5d7735fc216e44ee269d106bf3d8146</hash>
        <hash alg="SHA-512">03e9e1ee9a44ea15044b588b06a956ac150a37b63c161bf9b08a60539f5c90efc7718deb24fd084f503b68092516aac3349dbb74049777ea4c6619ac26090a1d</hash>
        <hash alg="SHA-384">98fde2ff0ad963262f9a9b42aed678b4d3fdc90ccb4bc25f4ca936ba7e2186af6477f06a3554bc5d8e0efe8851e13649</hash>
        <hash alg="SHA3-384">c35c95619c5ecd50fb10524e5b586668dc3cd373135b133c7edfb8ecfaf6b529eade283d64dafc25b24617bd3c509043</hash>
        <hash alg="SHA3-256">74f712690732f92214901da8877de6edc207d0f68105c21e58ebff69d90b31f2</hash>
        <hash alg="SHA3-512">cd7364f1244b7928b88ff158560a28374f5e9c3bac96206fb852def44ebcff64ffeda63f6a90204646a9a076c5f4aa8f338ac21a8b0801fff86a735d7dfe6d84</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.minidev/json-smart@2.4.7?type=jar</purl>
      <externalReferences><reference type="website"><url>https://urielch.github.io/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netplex/json-smart-v2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.minidev/accessors-smart@2.4.7?type=jar">
      <publisher>Chemouni Uriel</publisher>
      <group>net.minidev</group>
      <name>accessors-smart</name>
      <version>2.4.7</version>
      <description>Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.</description>
      <hashes>
        <hash alg="MD5">53cb6c796eb91346af5edb178c42b39b</hash>
        <hash alg="SHA-1">3970cfc505e6657ca60f3aa57c849f6043000d7a</hash>
        <hash alg="SHA-256">ef5103429f101f7e3ff62f3a182342720439eaea43d2eed3119bba770bb202a9</hash>
        <hash alg="SHA-512">6daaf2fe1b278599d6d0bbd3f157096f8bccf3d25616099c128139ce164b29461860eb2786f3d3728937a0d0505df73f1c9673b0766f946c50878e5f60305736</hash>
        <hash alg="SHA-384">bb0e03f5855bc2949f43bb98bc39e4713421612daf89f951d7affcc081e0ae0acb2fe0cb0d189e34ed65178fff5b3a2e</hash>
        <hash alg="SHA3-384">08d26f6dcce42a6f8bb5b1d1478d8f7cce0b2b423cb8b8792d9bde23019f6dea5d90bfb17f980bcf316271626c12e723</hash>
        <hash alg="SHA3-256">2052bad14a640f3a455cf2350df1d9b583cb7e99826d958df6d67d8e391995cb</hash>
        <hash alg="SHA3-512">a5945f8d187a46aa3ea3754974d98f6aace29ff89d7f3c828c8f7e3395adc68786a8f7e874cf1e140433a3e60cd3e3f907af43fc29043461f10018aee60e881a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.minidev/accessors-smart@2.4.7?type=jar</purl>
      <externalReferences><reference type="website"><url>https://urielch.github.io/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netplex/json-smart-v2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm@9.1?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm</name>
      <version>9.1</version>
      <description>ASM, a very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">54b9f5d15e4877a4ea4cf9ec48e07afa</hash>
        <hash alg="SHA-1">a99500cf6eea30535eeac6be73899d048f8d12a8</hash>
        <hash alg="SHA-256">cda4de455fab48ff0bcb7c48b4639447d4de859a7afc30a094a986f0936beba2</hash>
        <hash alg="SHA-512">0a586544f3053ec8425d252b6f7e3e6772f010eb81d75020b4fd4759a561a4534dab4f805ffd18130594d1abbeb1ad7116b9d3a1e2e643d427e12bb866655954</hash>
        <hash alg="SHA-384">9f936b2ffa1f1fccfea3c53b5206a6d94fa193aa12a0cdec2f0baf98f0cb2a0b699e99291c60be44fab6b39a1f6f2e10</hash>
        <hash alg="SHA3-384">142b7dc3b521f681f41e8467cf292ba87ed6bfb88d57372bf6d9cc3e3042cc49fd735b367d2336ff43a3ccb64b5bc87e</hash>
        <hash alg="SHA3-256">be955c19490cbd305f4168b6ead4116659ef6fbdf96954d2c124ae8d3f4c4739</hash>
        <hash alg="SHA3-512">fa07cc8156842f8c18e286517fd751b3e2d51be13e2e8181f1b75a6c1f98715eb3ef583cbda01ca95ca0806ffc9817d4d9ab327dca6a16152c367a319e128fed</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm@9.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.ow2.org/</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.33</version>
      <description>The slf4j API</description>
      <hashes>
        <hash alg="MD5">de8684fca5e9042d0120cb3306e8278f</hash>
        <hash alg="SHA-1">d375aa1b98d34d5ddf73a3f19eaad66e98975b12</hash>
        <hash alg="SHA-256">336811855ee97fcd8413343dc42f4d26362502860e8a9193e4db305e3e8ef80a</hash>
        <hash alg="SHA-512">ccde4a938e90d683288f84375224ecd9b46aca20de7544c6300c82ef07780d25306239ea9c5565c3ff58038c9d5becc85c846df3c1809585ae33b20a32e6b8d9</hash>
        <hash alg="SHA-384">dd31ce1f4fa4c7a892388422b4694d8a51bac05e4f2789eb7be734cdb2738f9f796eb951cfe989834ec78a65d5d762b5</hash>
        <hash alg="SHA3-384">75d1aa5e386f2c71c598cda5b995ff5fd496e4003489d58d217be1951d24f5444c8de2fe7bf7a7ce9c40d6cfc0ee01b2</hash>
        <hash alg="SHA3-256">ef2ec74302de597f6eec560b04a8de12a331302cbd5b9c178c237c3b683426a5</hash>
        <hash alg="SHA3-512">4528a2981a1107261f6798c628075e9ac724060a72338e0ca8786b27162b17e358a96711b3d0cc673dff85d36fa9eb6eba907e15697b4c40a5236f140fb6a6f2</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.steady/cli-scanner@3.2.5?type=jar">
      <group>org.eclipse.steady</group>
      <name>cli-scanner</name>
      <version>3.2.5</version>
      <purl>pkg:maven/org.eclipse.steady/cli-scanner@3.2.5?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.steady/plugin-maven@3.2.5?type=maven-plugin">
      <group>org.eclipse.steady</group>
      <name>plugin-maven</name>
      <version>3.2.5</version>
      <purl>pkg:maven/org.eclipse.steady/plugin-maven@3.2.5?type=maven-plugin</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-core@3.8.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-core</name>
      <version>3.8.4</version>
      <description>Maven Core classes.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a48e7160f4b6769d5c23ce2d93a6bf26</hash>
        <hash alg="SHA-1">cb11bac5ed848b900c2533d42ae8f23a73e6a015</hash>
        <hash alg="SHA-256">2415e64ffbc3ff4e7265268f651623342c7b0a9e0a77c5c54b4e82d1522f3189</hash>
        <hash alg="SHA-512">228665bba3dfe2423e4738756a3fc6e5128170ca074c905fc46ee328b8726237b9839db481785078624325d7a951a096bf0dc75f632b5f30268f2cc457871e13</hash>
        <hash alg="SHA-384">a8807af072544314e0c8deae853db81c22dae000b31b39a60e2b87c264d178c28d00aea42ccdfa31bc263026a98cd1fa</hash>
        <hash alg="SHA3-384">1eb40d24c2adff1ff0813cebfce41c4a5ec18179ba89baaa2d1ce4a0a2920a93130daee91888c23b222939d702a54f5d</hash>
        <hash alg="SHA3-256">034d6ec07ba4380b567f48e68b33bf98298502a2a4bb48ca9c75937a00e3a043</hash>
        <hash alg="SHA3-512">0928d612d271811547f8c9d97802ff537fe4aa549ef8133c4045ad1be259f37decbec0bec8f47fbd00c8ca1a60606b9121d75d1ed140e787a03ce6ebf8534e4d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-core@3.8.4?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://builds.apache.org/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="website"><url>https://www.apache.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model@3.8.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-model</name>
      <version>3.8.4</version>
      <description>Model for Maven POM (Project Object Model)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5c12178e3109a060c91cf231bc798d67</hash>
        <hash alg="SHA-1">71057054ea1e5e341b2196804a426e3243f6cb2e</hash>
        <hash alg="SHA-256">91ec0d6d564a12483e1569b0ef72ff3d9e921c5ba07201fa7ab9c7694db8844a</hash>
        <hash alg="SHA-512">64b96a0f8779efe75103afd1ec685a9e50e810fd51c5afb5e6839fd875365cb61e534818a6ec1119520541e960f63692172d8bdae3d8e63a583558296f9ecb4d</hash>
        <hash alg="SHA-384">fee89278bab1c5353bef293396f9fe9679325bada7e77e7faa1f44623d6b6b106713bdf355051508080133bcd4c62756</hash>
        <hash alg="SHA3-384">ef0acdd04c208d57d9845e4be8be2a5227801594dd0e599c860d68a132507241ebd306ceb210b386361a731befdaf55b</hash>
        <hash alg="SHA3-256">9a6a2392032c3690e1e10a529f60585d98420de62d381f132c39c45894c5f8f5</hash>
        <hash alg="SHA3-512">4485c81a61f050834c06e2f88c1af505f2f88b88c5afda2c0f7f4af6a45282c85a746b0bdd56b23ed61d8e99f070575751bbd1967df9c6c2c6a6ffa035cf434a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-model@3.8.4?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://builds.apache.org/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="website"><url>https://www.apache.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings@3.8.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-settings</name>
      <version>3.8.4</version>
      <description>Maven Settings model.</description>
      <hashes>
        <hash alg="MD5">751088d39fb1c71564058e23ef59240c</hash>
        <hash alg="SHA-1">ece24ec40b7d73e755f2ebd22bf8471b6c0b8fbd</hash>
        <hash alg="SHA-256">4f12ed49761c4b486c171996643d8d80246286ab14489a736ce0dd06e6bc6886</hash>
        <hash alg="SHA-512">3e0d2652164dbdbadccd60aba6ee2d6ca41d4065080f29f5f1654ea4884d28b054703a8a64a01cf8c6ccfa02cf8af29cab161514d8e852abcb1b3411aba74be7</hash>
        <hash alg="SHA-384">011151e44b3c8b5fca21b776c3558e7605bbf0ec211697f7ba6baa40fc697a882659887f4dcd91c10130c1353a7f6117</hash>
        <hash alg="SHA3-384">623a1a2e3a479a25ab26ceff4dfea94a6efb98e287e64c3187006d2ee3f417ba61317a318196d48a4939e1dca7d6f65b</hash>
        <hash alg="SHA3-256">2bd6e5f0c25db477c82ec44c2b629e3f5f0fa6fd5d4da87e15415f64513b8aa8</hash>
        <hash alg="SHA3-512">08dc94dc2fe2cc3f8f63f19bf21989f9a2ad3d1fd6039ef6754b9f66d60b952e22f37b38ac2068f9f2dae17c6c89dc6573d6278821c249babe44bf03a891849a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-settings@3.8.4?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://builds.apache.org/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="website"><url>https://www.apache.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings-builder@3.8.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-settings-builder</name>
      <version>3.8.4</version>
      <description>The effective settings builder, with inheritance and password decryption.</description>
      <hashes>
        <hash alg="MD5">37ac108b65138015e749d8ef90c1a729</hash>
        <hash alg="SHA-1">50bf143b0e338a26651970860e3067dd94cf31aa</hash>
        <hash alg="SHA-256">7e72b48fcb3c88a146425e3bd1265c3bc4ac546852fe4bbab61064f1dd1835b7</hash>
        <hash alg="SHA-512">233ebc32f26209a0f0615d8737becd396dc4d3f1ce349dbe793b437db1c64ac8c54ce055c636bbcbee7b489d0be7188b7fec0a9a4cf6a2f8d94873a374c91d3d</hash>
        <hash alg="SHA-384">034e092bb6fca114c35dff12116db0c5936bbd93d3fb59157c9a05a60c4c5a611c4401d6a8d62a8271df53ceb30cafa0</hash>
        <hash alg="SHA3-384">41cf63ca6c09937f020fae6832b2af3c8cb2042915cf2d1511b91f20c3ddb08f1f14df5743567a12d85ddda87c4f92dc</hash>
        <hash alg="SHA3-256">5b0836cd60d3274bf525929f54fa5455362fc3d58e575ceb74784aa1c2fb0f29</hash>
        <hash alg="SHA3-512">13c189bee544f6310358e0683e78a46d5f182fdcf5ae0c9136f4bf72d637bb3be6a4d6a120bbf5da23fe2e5cdac960b78f64c693760a71e6a4e0547f7caec8f2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-settings-builder@3.8.4?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://builds.apache.org/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="website"><url>https://www.apache.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-sec-dispatcher</name>
      <version>2.0</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <hashes>
        <hash alg="MD5">e68635a721630177ac70173e441336b6</hash>
        <hash alg="SHA-1">f89c5080614ffd0764e49861895dbedde1b47237</hash>
        <hash alg="SHA-256">873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb</hash>
        <hash alg="SHA-512">ad4e814c8baff780a4eee064903e52b09ae00420a59fb075ef72dbb8d64d12d3d5009b03d56c15f93587d931c3a7f06cad6351ab2dc9415ccc6eeab0daebeb07</hash>
        <hash alg="SHA-384">4af3426b6409cce7d5fcda4e2af407fc2dbae9873e06d98332bcd032c0039d9080a291e42223ea2bbef9825d3d63493f</hash>
        <hash alg="SHA3-384">41720858dd5804f9cb26a8878c16dbdf0372a90e99c037809fe76c3de2c5517ba252af8f8cdf534c1a09900702e6a917</hash>
        <hash alg="SHA3-256">50fa723aefb551a3fd5888375d01f1d776c534cdf833baea392818e9bfa8166e</hash>
        <hash alg="SHA3-512">a43f823d31b377c0c7ec8d36ace69e5dbcdaf4dc4ebb45ff0561fea9e12d74c06090ee24b29b06769d4031693faf5d7e3146583d3a64bfaef6b7c79773a8831f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-sec-dispatcher/issues</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-sec-dispatcher.git</url></reference><reference type="website"><url>https://codehaus-plexus.github.io/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-builder-support@3.8.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-builder-support</name>
      <version>3.8.4</version>
      <description>Support for descriptor builders (model, setting, toolchains)</description>
      <hashes>
        <hash alg="MD5">df11e28001f975f7b04833536fa97375</hash>
        <hash alg="SHA-1">19e7c1dd9ab8c3266db19e067e2b7b8764f0fa6a</hash>
        <hash alg="SHA-256">b64161e6ffd30782d97c205942bba219d60c53a8f4442e69abdfd428d7691135</hash>
        <hash alg="SHA-512">a9dccb93c090840112045e605a4777bc41fe04fe7e518148095ec31078c6d87c8fae312aefd6d35cc1475fd622b361d7010251735c738ccef85b3f42e8c13f1a</hash>
        <hash alg="SHA-384">13f1024c1957af7738c1255519b98c7b8320e3ba852e82bf51df7f6b26fe4765ba843757e204134ea3c2ad24e316e789</hash>
        <hash alg="SHA3-384">f802de7b6b38da1d5996b17b0ecef81cd7cb1a11941fbd8fb6b5604d9df975ba1f2fb8f9dbcbcdf6798443dc20c65b1d</hash>
        <hash alg="SHA3-256">e5c99c351d13101d76efad68add11f2698f74576b93c306bdce1c1b97f4eb7c8</hash>
        <hash alg="SHA3-512">9d253b3ea2ce29d770217e31928b83881514aeb3632eb0524dcc9a72ce7117b5190ed7ebd38ba13b8ea5c3f1b7ffe8f14b8d8a869a9af21b357424093a87a899</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-builder-support@3.8.4?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://builds.apache.org/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="website"><url>https://www.apache.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.8.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-repository-metadata</name>
      <version>3.8.4</version>
      <description>Per-directory local and remote repository metadata.</description>
      <hashes>
        <hash alg="MD5">b0aa47731437c6daaf70353756d2da10</hash>
        <hash alg="SHA-1">c62113372f740797767d520f604d0543dcdfc92f</hash>
        <hash alg="SHA-256">62a97989068af34eef374bedcca120a1c2b0bd5a2d48460d306944084cc495f9</hash>
        <hash alg="SHA-512">67f0a5048054e8cf03c608fc846021a3be64b6733595260ccd46796673b2abdebb5afedd9599f7060fb560932e16c6f7637281969a1e7b43d352fde0b99945f3</hash>
        <hash alg="SHA-384">13f9a3c9b44002ca24d8308555bfc600586015d7fc4286110beeafc481f454a30e75f9136ef7c8d6ef7d18ade3d41993</hash>
        <hash alg="SHA3-384">ade685b2e6e1f5965202fbf595e7c38db056d19c99ec211735d3bf5dc261b4ab60e68c34f485d8fe42503ec9e9da1576</hash>
        <hash alg="SHA3-256">820b2a1eb448a29a33b01f2852f39126fddcfbff88fbf84139b60a3cccbfd2c3</hash>
        <hash alg="SHA3-512">94d4dd13a3d00e2b000cbd3d6c93ba68c7d109c3a3f3dad948d02f74405fdb44d664ac6c3022bad99acbdb2784357838cec4da7b28423706f6418c9624d0496e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-repository-metadata@3.8.4?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://builds.apache.org/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="website"><url>https://www.apache.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-artifact@3.8.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-artifact</name>
      <version>3.8.4</version>
      <description>Maven is a software build management and
    comprehension tool. Based on the concept of a project object model:
    builds, dependency management, documentation creation, site
    publication, and distribution publication are all controlled from
    the declarative file. Maven can be extended by plugins to utilise a
    number of other development tools for reporting or the build
    process.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">12fcb750af57b284313d2a356e7de928</hash>
        <hash alg="SHA-1">6dba6d03ac7abd8b895595b0ee7000ce35c3d421</hash>
        <hash alg="SHA-256">4273b4e84805f7350eb61a1eea5debfd71d1147414b3b441b92d535218cdf0ae</hash>
        <hash alg="SHA-512">eae74088cf0ef66ff6cecd5ce6cf476e3df39e167988c1efbaa17f3c88fe55c59451125678cd041517702eb865190cdff64e691313f99c2e2f316e3e1c8a9daf</hash>
        <hash alg="SHA-384">0b7bb9bbffc4ec3bc85e7dc05e18bb24fcd60985d77ec70412e31f17fceb16ee78398a45e3a55c6f2c6e186f29f638d7</hash>
        <hash alg="SHA3-384">535844419e7e0342020ee9b950af62f2b672393268ac8ad609fddab171cd9b5baae5bcb7f2cd1116dbad13c2d37773ac</hash>
        <hash alg="SHA3-256">38460b5974c909a22778b2791234c5c7a2f4a97e23b4ebe4f55c0ebecc799986</hash>
        <hash alg="SHA3-512">7027886491da813f6226e43289239fc73dff2efaae5d14c093ace1396c1fc0a9a63423ad0d4b57538ec3b9cf6ee9472bfd1b4b633f184b9dc2ffc98806e4aeb8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-artifact@3.8.4?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://builds.apache.org/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="website"><url>https://www.apache.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model-builder@3.8.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-model-builder</name>
      <version>3.8.4</version>
      <description>The effective model builder, with inheritance, profile activation, interpolation, ...</description>
      <hashes>
        <hash alg="MD5">096f604d1a8a6fdb6e0a57173945dc62</hash>
        <hash alg="SHA-1">8e039db854cee3ddbca932b90c0c06cdcb9dc640</hash>
        <hash alg="SHA-256">8d0ed4b5cc5c06610f97935982458260165cb7e57c781ca7c9ef8b6e01ce1456</hash>
        <hash alg="SHA-512">e6493b88baaab589e42286ee4965fbce6842cfbbbbfdaf441c504a22332705d1ed0537683099c2d6d11208137c35a0295898925a17aec0c63884b327f7fc2abf</hash>
        <hash alg="SHA-384">637f99e85db1b5efc73722f4d4f1008a3b2a64525285248ea5c1e2792e6b8de8e74b6acd17bfb224eea2f029902216ac</hash>
        <hash alg="SHA3-384">6bb88ab050811db4202f48d8bff5ea881a412ffe2ba6d39f6bc8484f024d586e49aa053ce0245121df05804119c2b0b8</hash>
        <hash alg="SHA3-256">3c57b97ce6cc3252544fe2b95e48a601f4075231afa146c98e7cd7e2cd55bc4d</hash>
        <hash alg="SHA3-512">cbd64670624e5cf816bc6f795dd345060c804ba52011abe3b1e22d215a5331089c3503dd8611b8fa228aaafc518ac3d1697a84af937f37ee3c264247a8b1156f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-model-builder@3.8.4?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://builds.apache.org/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="website"><url>https://www.apache.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-resolver-provider@3.8.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-resolver-provider</name>
      <version>3.8.4</version>
      <description>Extensions to Maven Resolver for utilizing Maven POM and repository metadata.</description>
      <hashes>
        <hash alg="MD5">9824f1a800182fca787cc4f49bb1b58a</hash>
        <hash alg="SHA-1">2ccbd1e2c713922353ccd779e56aeefc7a9fa56f</hash>
        <hash alg="SHA-256">046c7d1635f91283b4f7a41b579953857914c7e0d96545b557491537b327e156</hash>
        <hash alg="SHA-512">26a359bf14c2c6c3a748f95a244f5bc0251ef75082155e931481f6c93b4b29db5b032ed3d6659e7241d7a166c662dab55aa41c4e7dd82bf52ae583536eda7b40</hash>
        <hash alg="SHA-384">36c5975e34fd58a1f3ea2904404c427ea2c37d087e70c733b48909c0224453fd95ef6dd7d823a9e1b2d1b9864a4695db</hash>
        <hash alg="SHA3-384">5a137402686a31a481291d24ed88fd1b2eec0ac8e584d443b330bec562e27d729860e00c48d046683dfb3a57ab762480</hash>
        <hash alg="SHA3-256">9b14ad5c6658067f0e02265f5c83d48a9349cff0ded6af326aef7e9f60a9a632</hash>
        <hash alg="SHA3-512">8aa9421b5e1e2e287879b05dab855b1cbbd20448d1424e76238ce81a84fc9d52c3f5853b139e9fa8feca4d348f3225cd87241fd8005bbc76fa86382adf89e972</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-resolver-provider@3.8.4?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://builds.apache.org/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="website"><url>https://www.apache.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.resolver</group>
      <name>maven-resolver-impl</name>
      <version>1.6.3</version>
      <description>An implementation of the repository system.</description>
      <hashes>
        <hash alg="MD5">2145b5eb9ddd8bdf9f3171122c703d4b</hash>
        <hash alg="SHA-1">2714ffe60bd71259a41b3e4816122504b5f2db93</hash>
        <hash alg="SHA-256">17aaebe6e3e59df8cb5b4ec210196f7084637312b9bc4ff14cb77ad1ae3c381b</hash>
        <hash alg="SHA-512">ef011e67152290379da6db1ce256b70dc436eb1596d58c38ee5bf9df65fbe75ed2ddc7768f6c61901c8cb83af88c42ad0b7bf24ad1775949eb4522511825280d</hash>
        <hash alg="SHA-384">37f1caeeb7f6b3a7358e457a2a9c6f2d0f037f2603f82d580a458d6e687a72335355d931885a2156ffc7b81abb715a82</hash>
        <hash alg="SHA3-384">200626d2ecc3736cdc13526c4ba88dcc664a1cc4305d8c9c03a9aefdd46759c956188a6908e7b845802fb30bc5818edf</hash>
        <hash alg="SHA3-256">051baae5e07302175081aa2163a03364fe15d7bea230a81f13302552c47c7db7</hash>
        <hash alg="SHA3-512">c6c926e1d8ae8874b8467b9d9ee0fdf01655aa5591ed69fcc8051438d80ea848b318a56febd6995ce9c4b9e26e8edf1fa561cd46a84c3a6d12e307dc484ae5df</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.resolver</group>
      <name>maven-resolver-api</name>
      <version>1.6.3</version>
      <description>The application programming interface for the repository system.</description>
      <hashes>
        <hash alg="MD5">c1f8b0046b6219ef49dbd73638ce33e2</hash>
        <hash alg="SHA-1">5ee235aa5ac5994b5dc847f8e78ffe9d77dd55d7</hash>
        <hash alg="SHA-256">d0b28ed944058ba4f9be4b54c25d6d5269cc4f3f3c49aa450d4dc2f7e0d552f6</hash>
        <hash alg="SHA-512">002cb75f6e07b27108e79a4d37d94fa882e89a2db30dd2ac69ecf0907cc548e13f579ebfbb5c019da6df4a950e3420b69dac3d49ae94b5646b7968ef7ea811ca</hash>
        <hash alg="SHA-384">57a6cc8ea7620331169230771e7564837193d217e9dd6289a09cc874e05f87aeb84fb613d44917cf4835a783f9c572ee</hash>
        <hash alg="SHA3-384">1d303b3805945970de6d9bf3f4098e9582d79a6b5dcd126ee2af74fd2787c3469c693a125799323e9da3d5e5e1be54b3</hash>
        <hash alg="SHA3-256">d883a9b0c67d5be1e4c2e52eb530d432e87565cdfa9df0a4b3e72ea9e080b766</hash>
        <hash alg="SHA3-512">c7c325a744e63c72fef9f31fdcb64343a6e315f7c780417479f502ac24d0e6f506519e358e0c82e809adc62223ec606c41be7156c2b27635722dd21e622d9c83</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.resolver</group>
      <name>maven-resolver-spi</name>
      <version>1.6.3</version>
      <description>The service provider interface for repository system implementations and repository connectors.</description>
      <hashes>
        <hash alg="MD5">39ccba873cf05b2b5405d24a55133a37</hash>
        <hash alg="SHA-1">176425f73fe768bf9cdb8b5a742e7a00c1d8d178</hash>
        <hash alg="SHA-256">17441a39045ac19bc4a8068fb7284facebf6337754bf2bf8f26a76b5f98ed108</hash>
        <hash alg="SHA-512">2972b721213bfee654460468b2a2aa50546d7f1957be40d955728875af3a9801f8d78a2f796e832b9332d1f90ffb5ccb651289e7b5c8a175628b21b13594df43</hash>
        <hash alg="SHA-384">e497fcbb12f4d64ad35a506c370ebf611c08a26b36bb592d9dc31a70b4244b06d57b10340912bb1d419e4791de4d746d</hash>
        <hash alg="SHA3-384">92cc0dfd2087a4a33fffc796987753f36024d892db64fbe8f2a30a08de20cb7fff1204c65b1df0293d59a3204b70599b</hash>
        <hash alg="SHA3-256">79a77fc7ce9a0a1383e9636d34f2bd46cf16a7e65f808e199856c2551e26a5b4</hash>
        <hash alg="SHA3-512">af7b9a702626ba48d9f5ae50001831167f20c13b2a416e45c2241de7d96fcc113bdc75b04d21a8b2d88e86cf8629c72d9f0d46d19ee64d904c4cf52f479be58c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.resolver</group>
      <name>maven-resolver-util</name>
      <version>1.6.3</version>
      <description>A collection of utility classes to ease usage of the repository system.</description>
      <hashes>
        <hash alg="MD5">71d7fea851a889aae2cfd632e96d01c1</hash>
        <hash alg="SHA-1">07d5a6879037b34c61c2f527dfcfb59084e86ed0</hash>
        <hash alg="SHA-256">cdcad9355b625743f40e4cead9a96353404e010c39c808d23b044be331afa251</hash>
        <hash alg="SHA-512">45bd05eee2e2e606155916ec06efdb62e4a147af7ed0bb0b443b2a71b72576fec8e0ced0eee3ae3c86778198de227c1c7fe5d423cff0b96ba382fb563239694a</hash>
        <hash alg="SHA-384">1e7eb3fbead86751b552e75ea2fe853ac81b0c349f89d8d4cfdad9246091fb72f67192ef9c037e3be2de57e6ee8cea85</hash>
        <hash alg="SHA3-384">3439dd1e245d36fc026b74b31359c0271159b05612c05f9e06a6f2361ecdc48d9c864af103baa8cf9d343c0f951dee99</hash>
        <hash alg="SHA3-256">a1dba2a839537adff9bd0f166c893313c260d97b1b4e6dfdb69b2f4553c6808e</hash>
        <hash alg="SHA3-512">03d6b8f694bc7552c217128f6469571efc84566f6f49805c03d5ff64df2e2ed545a1aac141010a3e8bce4a731ec9c07acfec1e33d7ecb06282e4753cc74a4212</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MRESOLVER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.shared</group>
      <name>maven-shared-utils</name>
      <version>3.3.4</version>
      <description>Shared utilities for use by Maven core and plugins</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">908f2a0107ff330ac9b856356a0acaef</hash>
        <hash alg="SHA-1">f87a61adb1e12a00dcc6cc6005a51e693aa7c4ac</hash>
        <hash alg="SHA-256">7925d9c5a0e2040d24b8fae3f612eb399cbffe5838b33ba368777dc7bddf6dda</hash>
        <hash alg="SHA-512">c6693f8a061de74ac59c61d185f5b130cb574405cfc37febb8e73806ea64eea822a4a75c24098fb49b7871373091543a6f4c526c0842589e528cacad40e5554a</hash>
        <hash alg="SHA-384">bc5b42831ff598f42dda54738be004a619d60201a009b04cb3aaa0dc343d0e4fbc423b19739391eb7c33efcac3c08dd5</hash>
        <hash alg="SHA3-384">385bebb35d7ea13d92ae6a5afa9257b184a1fcf40cba077a103c7a91d39a4d3e0180a475febdba73ac75949968e77186</hash>
        <hash alg="SHA3-256">888fde30d4f9a9e1b7c4c5e4d61f9cf0499192e5bc1212538e2e3320688e44da</hash>
        <hash alg="SHA3-512">40b55bb907452777443b8162d456bf1d48e02bfd9124062faed9c9bf51e0f522d40b02f4c24eb39f760469ad226570876f0de6afecd74903112ec794f0aa9a78</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.sisu</group>
      <name>org.eclipse.sisu.plexus</name>
      <version>0.3.5</version>
      <description>Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container</description>
      <hashes>
        <hash alg="MD5">30c4a9fa2137698ed66c8542f1be196a</hash>
        <hash alg="SHA-1">d71996bb2e536f966b3b70e647067fff3b73d32f</hash>
        <hash alg="SHA-256">7e4c61096d70826f20f7a7d55c59a5528e7aa5ad247ee2dfe544e4dd25f6a784</hash>
        <hash alg="SHA-512">38d7dbe023f9751cb5e30bf154e31696590317dc7b7f768811fe0f5940513fcea4665670cd47d0b72ded85453b10f7d129b0b7428b155a41c903c7b56c986e8d</hash>
        <hash alg="SHA-384">2e943a72f0ca201d50ba90b4cf70c3c1f7b5ffc3bbfdee45875bc2f6f2e2a3a93acbba3a2f1e7ffb32b70e041633b6de</hash>
        <hash alg="SHA3-384">a7b121732001b6f225b0687e7747993f48b3fc1d9a4325b4321a4c59adae36b49677193f5e31e3b1f11a6cd266e459f3</hash>
        <hash alg="SHA3-256">b879a16dd84d8d4f39c1009029b3a3a55e18049c7910f77814a32ca088b56585</hash>
        <hash alg="SHA3-512">8f8fbebd2a3024bcf6f2e27e8206e3f3c2b2673217c1220743b1869bf60341490db7d1877d9eaf3c452500690df98ccda11a19bda996b74a6ebedc37bc9bc554</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/sisu/job/sisu-plexus-nightly/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Sisu&amp;component=Plexus&amp;format=guided</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/sisu/org.eclipse.sisu.plexus.git/tree/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.sisu</group>
      <name>org.eclipse.sisu.inject</name>
      <version>0.3.5</version>
      <description>JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring</description>
      <hashes>
        <hash alg="MD5">1b296b0ddd911ed3750b3df93b395cd5</hash>
        <hash alg="SHA-1">d4265dd4f0f1d7a06d80df5a5f475d5ff9c17140</hash>
        <hash alg="SHA-256">c5994010bcdce1d2bd603a4d50c47191ddbd7875d1157b23aaa26d33c82fda13</hash>
        <hash alg="SHA-512">f4790768c0d958b3429a3241abb15f9bb6e2fd7f43a5e034dde6a3a6820e6941c00f10ad084d5c38f8edc144e7acbea7ba3dc8952f01dab41e443803db2a4efc</hash>
        <hash alg="SHA-384">b76e74a0cda6d88c1c03d40e71d238fa13e2070485c026945ee8dc6da62eacb02071a65df35fa3e4d9d6b343a89fb605</hash>
        <hash alg="SHA3-384">a2d3bae2f5e518c7d11e584f6b8b7368f3b927c3405f48e27d4225d4e2f4917fb5623c0071fc47f081200b7d754571d1</hash>
        <hash alg="SHA3-256">b998bcdf4f8b5550a543865408e94fadcf1dd37ac19ec37269ff5307220b2775</hash>
        <hash alg="SHA3-512">e9331e8a1b4281b45abec89dd9b7dd948207ebd7bed6be5978a5792d59327f7a4d4ee87c6f60392021f24f28439ab4ca4b6305ef6528e1c241c7a27c883b5931</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/sisu/job/sisu-inject-nightly/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Sisu&amp;component=Inject&amp;format=guided</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/sisu/org.eclipse.sisu.inject.git/tree/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.inject/guice@4.2.2?classifier=no_aop&amp;type=jar">
      <group>com.google.inject</group>
      <name>guice</name>
      <version>4.2.2</version>
      <hashes>
        <hash alg="MD5">57d2b333c34d0f834189d54b6e59d1a6</hash>
        <hash alg="SHA-1">fa13659f9128f4c011c8e1d06f137083b4876377</hash>
        <hash alg="SHA-256">0f4f5fb28609a4d2b38b7f7128be7cf9b541f25283d71b4e56066d99683aafff</hash>
        <hash alg="SHA-512">78f17b090f34564db0fa6903c966e79d8002903d2604f9605a0d713e770a9c772c11d615a5e112dbb15464b9f8945edff6ac3d23ac84ccb08eb1657ec64d4442</hash>
        <hash alg="SHA-384">b8dbffa5d7d5d747da5bcbf80c5642caf7d845210b6246b3fbe37fe35fb62296a143bd131c394c97a09d78c06e05c4f8</hash>
        <hash alg="SHA3-384">77c03af1ee596ff17baf62893037dc7c3b2476a68f928811c94c19c6ef33df0098f6bb4bde97be887797442359a17205</hash>
        <hash alg="SHA3-256">d6c7802ae9da1ede2a1fd5bddaec3fadbe6cce96754ac1777abe23656da61616</hash>
        <hash alg="SHA3-512">a2f0e757d29e73175af02a00b34f35065080ffc9be10e2445e51df556180e2e10b68216277c384f07729cf4b326061a870d6ced32045ee545c43a7c6cb209821</hash>
      </hashes>
      <purl>pkg:maven/com.google.inject/guice@4.2.2?classifier=no_aop&amp;type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-classworlds</name>
      <version>2.6.0</version>
      <description>A class loader framework</description>
      <hashes>
        <hash alg="MD5">67e722b27e3a33b33c1b263b99dd7c43</hash>
        <hash alg="SHA-1">8587e80fcb38e70b70fae8d5914b6376bfad6259</hash>
        <hash alg="SHA-256">52f77c5ec49f787c9c417ebed5d6efd9922f44a202f217376e4f94c0d74f3549</hash>
        <hash alg="SHA-512">6a58048d9db54e603b9cfd35373cf695b66dd860bec878c663b4fc53b6b3d44dd5b0c92e7603654911b1f78e63ef277cf6b272fe069a360989138550545f274d</hash>
        <hash alg="SHA-384">e839707ea5c4351f2703c6861ee4d58e08df0f7509110af13d4b3824e6ec5cfd65508fa80cc3f222baf5cf6c4ab5d5ac</hash>
        <hash alg="SHA3-384">75389fc7ed9aa3ad33ff317b0d41851fe0073b37aa8c33081722bfafb851493fb0e3b9629f924026fc32841f01399695</hash>
        <hash alg="SHA3-256">3aef41be29373137c58c415693b312c95e048731dce519ab88649eae9ba0e492</hash>
        <hash alg="SHA3-512">312eff142f86b9e110131dcca69527fbec80478e463fed5a34e2bd628673bce7be9ddb6fe0cda7fab2a119d1f310629413740019e686e9162194984ab6e06bf4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-classworlds/issues</url></reference><reference type="website"><url>http://codehaus-plexus.github.io/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-interpolation</name>
      <version>1.26</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <hashes>
        <hash alg="MD5">1049ae9f5cd8cf618abf5bc5805e6b94</hash>
        <hash alg="SHA-1">25b919c664b79795ccde0ede5cee0fd68b544197</hash>
        <hash alg="SHA-256">b3b5412ce17889103ea564bcdfcf9fb3dfa540344ffeac6b538a73c9d7182662</hash>
        <hash alg="SHA-512">6c3b40442adf721d325ee9cbf935d758223a04b3bd8e0f3b60fdb652175c1ca65a6010f7ea8288617ffa73cb1f19d2737c79c403d343b285e0f9afb1729caa60</hash>
        <hash alg="SHA-384">93dcdffb567f4b7d24eecf9fb0733243ebfe1fd80c92fe69532fed9d1727a58ffa5ce7da4ab26b5c6aa8a6a59beb3844</hash>
        <hash alg="SHA3-384">7489d45be45f74f7639db3b18ae6075d32d84adfaa9c4568f3fe2b2fc35c7de73ffce6f42e494466a8c81e78747b0f17</hash>
        <hash alg="SHA3-256">62145ec219beb405063de848cb54e0d63efc8c255322998858d7df74f8d1ae18</hash>
        <hash alg="SHA3-512">12fba4d2ffab1f89003e375bf74df3fc5d0f831906f9716f2ab2fc5a4ca7084c8a61500b24c5fa0ded27d1cef14b030df70b34c148c138136070e27f7cc41536</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-interpolation/issues</url></reference><reference type="website"><url>http://codehaus-plexus.github.io/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-component-annotations</name>
      <version>2.1.0</version>
      <description>Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.</description>
      <hashes>
        <hash alg="MD5">141fd7a2ae613cb17d25ecd54b43eb3f</hash>
        <hash alg="SHA-1">2f2147a6cc6a119a1b51a96f31d45c557f6244b9</hash>
        <hash alg="SHA-256">bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac</hash>
        <hash alg="SHA-512">cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88</hash>
        <hash alg="SHA-384">dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f</hash>
        <hash alg="SHA3-384">2b335733d7683e8bae312b0608af7c17b1aa22a1b9cbc4cc11549faf6bacc51c7591f1073aac99e5d70fdea31c6253c4</hash>
        <hash alg="SHA3-256">2e9f44d1c5df160563d3cedaf01929682fb3e0432beca7c782d8ba0324fb32b1</hash>
        <hash alg="SHA3-512">5051e4210310ec60fae9f32284a93da3cff63bf43a7dda30eaf2715d24cfc7f2353a6c2731521f4d6ef32e7a3e2526b6a41c8a11b0889c8dbf7ffc7914812641</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-containers/issues</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-containers</url></reference><reference type="website"><url>http://codehaus-plexus.github.io/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.8.1</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <hashes>
        <hash alg="MD5">540b1256d887a6993ecbef23371a3302</hash>
        <hash alg="SHA-1">6505a72a097d9270f7a9e7bf42c4238283247755</hash>
        <hash alg="SHA-256">dac807f65b07698ff39b1b07bfef3d87ae3fd46d91bbf8a2bc02b2a831616f68</hash>
        <hash alg="SHA-512">fb0fe98385496a565678a000c26a3245082abfbf879cc29a35112b4bf18c966697a7a63bb1fd2fae4a42512cd3de5a2e6dc9d1df4a4058332a6ddeae06cdf667</hash>
        <hash alg="SHA-384">72c6fd199936f06db886eba9dccd188e26afabf7b9e6744cea18f27e414abfe04d3d3f609f8505311a01f43e885bec1a</hash>
        <hash alg="SHA3-384">3b6eede7aaff2bbbf5133872b59e9c4932e60064951a68c219f128a8c3a2556c25c2c90a599b342ee3fdef25a745a474</hash>
        <hash alg="SHA3-256">4e708ddf8ed0c6dbd8c6bba07e06425b5d263d899884b91bf11f86ec0d6f8463</hash>
        <hash alg="SHA3-512">f43e89519e803e976f7b4d756d934be802ab36077cf2dc38dd9aa901eaf7104e58157859f45ccef7b38e072007a60f17270923e2ed7eabd41a4c776dee1458e1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LANG</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-lang.git</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.32</version>
      <description>The slf4j API</description>
      <hashes>
        <hash alg="MD5">fbcf58513bc25b80f075d812aad3e3cf</hash>
        <hash alg="SHA-1">cdcff33940d9f2de763bc41ea05a0be5941176c3</hash>
        <hash alg="SHA-256">3624f8474c1af46d75f98bc097d7864a323c81b3808aa43689a6e1c601c027be</hash>
        <hash alg="SHA-512">4ca4045775a879c3ce3021908db7b4778235a322fd8e2567da960156f24b9da86e6812a4956c8dc19920cd83e4c61141168c580829f43f10bbac925d465c3fd1</hash>
        <hash alg="SHA-384">c95aa5a652533b3b54e721b7f20c4ef19a022ac6c8cd353b032bfd65f636b1adc3eb2e5ca0b409f19456e265cbfd3cb0</hash>
        <hash alg="SHA3-384">b08f2d668d9233a3380c37c028486014db65000e918aa1c59e2db35fb5661b3a40183e51677b73a5d96a308f9c2346c0</hash>
        <hash alg="SHA3-256">f6a3b253b2c5a06a9559fd9f21e36d04198e660d4e9437ddeb78245969f03fe4</hash>
        <hash alg="SHA3-512">0a45c046c106cf88a510bde208b1ac92d7b3dc547b2516583afdbb829219ec31b0bba9fc4b7fd240d2ef859abb722ce307f9572d87409d261887130a5df6827d</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-plugin-api@3.8.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-plugin-api</name>
      <version>3.8.4</version>
      <description>The API for plugins - Mojos - development.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cd69b582bb49b758dc840653497cdf89</hash>
        <hash alg="SHA-1">699bf28a990398caa3c7dc860476c409fe538036</hash>
        <hash alg="SHA-256">3aa48d91a54aab6fea95d98218345621eb3952e693ae591d41b63ac5b86eb76a</hash>
        <hash alg="SHA-512">f3e8881e3ecdba8725583a214f5133fa23aafcb306b0ae43b20f438c483be446a205841e473eb04d641a84dd1ac3647ff1bd25f0ce1b094b9e975a0f7e3758a2</hash>
        <hash alg="SHA-384">25089a158b362d868a1e791473326ff41a26048f468eb1a4272c2124c11e64d57a1e37810fe936a4c7a6c80115878043</hash>
        <hash alg="SHA3-384">1e6c3804b77b3616a671de99aca36b73c44040f5ab2ba6a98ee03f46f25b1b12cd55d807e5cda01a61c7d64873954df5</hash>
        <hash alg="SHA3-256">c14a2dd375220a01366d251ed0ed86274d48f41b74068eb1b8d340e32aeef1f5</hash>
        <hash alg="SHA3-512">c6027b34bbe924dd76014033b99a1523701ad2e157cdd23acb92c8441c191a162a4ddcc05a115dcb1130c3dc9d79b5cdef2153e5f873f0d55fdd4c8181f4390d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-plugin-api@3.8.4?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://builds.apache.org/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="website"><url>https://www.apache.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-cipher</name>
      <version>2.0</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">55d612839faf248cbe3e273969c002c2</hash>
        <hash alg="SHA-1">425ea8e534716b4bff1ea90f39bd76be951d651b</hash>
        <hash alg="SHA-256">9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a</hash>
        <hash alg="SHA-512">8f187b07867a7c29d77454aae4b76479300238d9c4e777c1afa2aebe33b88dab916e29111dd55acac1341849f4579fe91a5470fdd45ccba0e05709c2ce3a1d65</hash>
        <hash alg="SHA-384">6973eefe06a8992aa8db1775c0f43a84cbef54eeea9122a5a30c362af3e4fb13b6cbd6fba229142e2a4495f97d71f409</hash>
        <hash alg="SHA3-384">ea780d218f96e61005c5582bf3785ddbb33b53ccb4efbffd76ab58166cf261d3c256d52fea28759380684b7e9b0db8eb</hash>
        <hash alg="SHA3-256">e2e51d5350ffdce341464ddcdf9ae60108bff40bf5174dc6be43e33ffcd84af9</hash>
        <hash alg="SHA3-512">f3e17ea31bdefc8094ba3495b8231ec7f90c7175839b009d9fd230110b66ac4c68c912fda1a6e644d93dbce639d738e2535f1ade5841e072a604f5f8ac536729</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-cipher/issues</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-cipher</url></reference><reference type="website"><url>https://codehaus-plexus.github.io/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.6.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.plugin-tools</group>
      <name>maven-plugin-annotations</name>
      <version>3.6.4</version>
      <description>Java annotations to use in Mojos</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">00a800d6df39e3ae3a96135983e21e36</hash>
        <hash alg="SHA-1">23dcee7834a0b854365c14eaa9f473d2fed951e5</hash>
        <hash alg="SHA-256">0fe41f2ffa4fc6f3b8e65c0b16d9e5f00dd256113a4114e7a9466f9c1952eff1</hash>
        <hash alg="SHA-512">fd1b8a3690ed2837d5cce81c712ce8f3b5a26bc1caffb11e2304ac771358f3c040d82c75852149ccc353252f8ad081c1dd200c4f1ef4510cee11d744c931101d</hash>
        <hash alg="SHA-384">f4df4f0bc701f5298842dc912dda55d31485a04468150c06442c12ef20df76557f48e3934a7788ae5f85e3720f10f66a</hash>
        <hash alg="SHA3-384">d138f5e5485dbb93ca3c2ac05a2a7a9ed5426d3f95e01f4fa1ef60b387ea314d922f83f0a5172ab35506b4966583b49f</hash>
        <hash alg="SHA3-256">1aefe13497b38cc037292dbb3cf6eed4f3b20105aeed1566d8ae09d7e8b18885</hash>
        <hash alg="SHA3-512">a1b5dd73cdb6ced6d91b292cdd1990a2fba4fcda53c1a28149fa6db973411cc6f3c7766bc1184739167c36628b60be55d6d81c2af70993b026868e5d49a73a7f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.6.4?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MPLUGIN</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.4.1?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-utils</name>
      <version>3.4.1</version>
      <description>A collection of various utility classes to ease working with strings, files, command lines, XML and
    more.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">c155c4135ef7ba134659bf1af31c5156</hash>
        <hash alg="SHA-1">4de9992988c534efd668bfcca0480ebe13e0c0eb</hash>
        <hash alg="SHA-256">52d85e04b3918722af11d12855b4a8257df96a0e76c8f4e3852e6faa851f357b</hash>
        <hash alg="SHA-512">0668d413520a713d9279123eccae3b5e9bc79f41dd8da3b3a1ba79b7b60086c009639d91d84df230e490192fe63b10390f3901478c69bfd452a1280364d24876</hash>
        <hash alg="SHA-384">cefd95e956f79c103c95f15d8a5b914b7158dfdf1bb1d7a1cb1eb4f89ab47f841f5fbc3f1cd9380bb57252a036cb63ee</hash>
        <hash alg="SHA3-384">26aa374d12efd70c423a45794427f3ca297a20663b2297ef806e7f2bd57bb9e885da1222e1c557a80fb2a012cef5de52</hash>
        <hash alg="SHA3-256">6ec121dba759799e676e53ab9b57d379907c6fb8f844177f63c21b7324011dc3</hash>
        <hash alg="SHA3-512">3ba2485a1471edd0e43819277db828573ba2299599dd273bbb09ae4453343bc8e32672adc3b7a4eb523edd64aed8a50427f5b7a968870c152e7859f2c6bcbf34</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-utils@3.4.1?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-utils/issues</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-utils</url></reference><reference type="website"><url>https://codehaus-plexus.github.io/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant@1.10.12?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant</name>
      <version>1.10.12</version>
      <description>master POM</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f5b97fb267862b35d1eb398defe1831a</hash>
        <hash alg="SHA-1">be08c4f63e92e03bac761404cf77bc270928b6c5</hash>
        <hash alg="SHA-256">5c6a438c3ebe7a306eba452b09fa307b0e60314926177920bca896c4a504eaf6</hash>
        <hash alg="SHA-512">d54f635e948cfc29e0f65fce6925867102534469b8ee01f777be7d0e2e5155d813f574934dfabae11dab08d41c2b3fcd9ff003b93ca1dbe8e0a9435a02ac8147</hash>
        <hash alg="SHA-384">677a1209966ff72c89dd57c00889bb3eb93dedd392922e589c34193ea9926dce899306df51d1b0f8d5c052c76b630971</hash>
        <hash alg="SHA3-384">0671ca87a7aaf98c57c94f2f3ffc470d0a01ca8af10fa9e60aaf38d57c1a8740ed4f0605746388fa7f21b309d33ab42e</hash>
        <hash alg="SHA3-256">d83a0191344157a13b02cb21fc40870054a6c5cadc81337298ba8bb269d7db9e</hash>
        <hash alg="SHA3-512">b3e3612ed4edfed70b085711140ef30dd3d3b974cfc354eb1ac85c77636f8c81c4a2abe404bfd29c7332fbe46b3cc61db6d505847841909ee882d91a61891636</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant@1.10.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Ant-Build-from-POMs/</url></reference><reference type="distribution"><url>https://nowhere.net/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/bugzilla/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/ant-dev</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/ant.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-launcher@1.10.12?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-launcher</name>
      <version>1.10.12</version>
      <description>master POM</description>
      <hashes>
        <hash alg="MD5">709ed15ea16a95903e7b3e8be130fa1e</hash>
        <hash alg="SHA-1">e090b4f9d3ecf45491cc16e759f1e843a1a224c0</hash>
        <hash alg="SHA-256">42a7ca7e7bb777fe7ee75a5ed4cc529c766bc43486367fdaad0ab4a32ee9c249</hash>
        <hash alg="SHA-512">d00dc7a8c7d724e8ae665f727b7754f0a54dea5a55a55b0e7f2e7ca3223a460d8322f9deb89e2ac0103cbc7cab1a018472aefb12aab4635270f896ec80db5686</hash>
        <hash alg="SHA-384">3bb3e3969e8b48b100e825a61e5ee278d3d659ef1a6f8751aa7d775b7024cce627065bfcd73ae73183425121ed4e34bf</hash>
        <hash alg="SHA3-384">289807457cb924c089f10c8ccc9ab1d6d740260ad59239b6aab97b23dae14c4c6ba246488eb73d46d32940e437266bb6</hash>
        <hash alg="SHA3-256">65aac82d8461dab9dc5f58980c18b160cca1ef59c6ea24a98f7256107725a647</hash>
        <hash alg="SHA3-512">2f346da5cd1799fc8b049b67421bda999a1e3e328c668a9d4315d584fead608681f453d39a9cb150685ab66400a16674fdd4f331b86671457230819cf57ff237</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-launcher@1.10.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Ant-Build-from-POMs/</url></reference><reference type="distribution"><url>https://nowhere.net/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/bugzilla/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/ant-dev</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/ant.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.steady/frontend-apps@3.2.5?type=war">
      <group>org.eclipse.steady</group>
      <name>frontend-apps</name>
      <version>3.2.5</version>
      <purl>pkg:maven/org.eclipse.steady/frontend-apps@3.2.5?type=war</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.steady/frontend-bugs@3.2.5?type=war">
      <group>org.eclipse.steady</group>
      <name>frontend-bugs</name>
      <version>3.2.5</version>
      <purl>pkg:maven/org.eclipse.steady/frontend-bugs@3.2.5?type=war</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.steady/rest-lib-utils@3.2.5?type=jar">
      <group>org.eclipse.steady</group>
      <name>rest-lib-utils</name>
      <version>3.2.5</version>
      <purl>pkg:maven/org.eclipse.steady/rest-lib-utils@3.2.5?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.gson/gson@2.8.9?type=jar">
      <group>com.google.code.gson</group>
      <name>gson</name>
      <version>2.8.9</version>
      <description>Gson JSON library</description>
      <hashes>
        <hash alg="MD5">e67627f67e03301092dc7de0a2d7cef8</hash>
        <hash alg="SHA-1">8a432c1d6825781e21a02db2e2c33c5fde2833b9</hash>
        <hash alg="SHA-256">d3999291855de495c94c743761b8ab5176cfeabe281a5ab0d8e8d45326fd703e</hash>
        <hash alg="SHA-512">46501e4dd34c9a6f33ff63aeeec45b049579365c5273490e5dfd5ea4effaeced907d0fc728204c619aa136e867ad826204582ff9ba3080d06693c1c675c8473f</hash>
        <hash alg="SHA-384">2f2897912784595e52d3f8e57741aed7dd866f16a69562d57e0604d85e2fef08b2a32e58afd00d264f66cc6ec775dc79</hash>
        <hash alg="SHA3-384">3ce084f79191afdbdb0a9aa83073b128f620cf585b65c2e81ba98080fd91e9f327db3f0952903094b7dd387bc802b5ba</hash>
        <hash alg="SHA3-256">e82ae9fa3a783ee683880d219ab529bb3d0b45ea721d002ee948fad99a67b4f0</hash>
        <hash alg="SHA3-512">25cfe43039c6d41344434f89e9a8ad6f93a341512baf93e894a14a9dfd3af1cb0f0afaed4ade6db3c719f910fd9dfbeb7bec8bcfd7f49ac572ab217bce9e595e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.gson/gson@2.8.9?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/google/gson/issues</url></reference><reference type="vcs"><url>https://github.com/google/gson/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api</name>
      <version>2.17.2</version>
      <description>The Apache Log4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0c39d90e7819c92c111e447bdf786a90</hash>
        <hash alg="SHA-1">f42d6afa111b4dec5d2aea0fe2197240749a4ea6</hash>
        <hash alg="SHA-256">09351b5a03828f369cdcff76f4ed39e6a6fc20f24f046935d0b28ef5152f8ce4</hash>
        <hash alg="SHA-512">8f986171ee6ca94ba8eacfc83b5b45bb87221c176076eb152715fcb4e1f351c4e9f88d56420fc02ee166ebe0b896fb52eda21355dec49302ab3e83a56b245d04</hash>
        <hash alg="SHA-384">e4ba0afbfd91ef295e6c1c1edfa7854e216a29705b5c4b520f803697ae6badf3630c5d55e56394954988fa88e62176b4</hash>
        <hash alg="SHA3-384">ef8ecf2f848bcb18790d79b1d4e0fac0582e94f226eb8c7039d7316bd9f4c472556a4052b4a93958eb1248c7a3756433</hash>
        <hash alg="SHA3-256">bdcccb79127c28c0f42374eeac65891e7c0d02f18e1469c705e946f74cfc89db</hash>
        <hash alg="SHA3-512">14a4d4f38dc5392f378e006994780d686095e1190d476fd18efcd4211bd4dcd64b699d79c5f4351c51f2d26a3ab98b4a49745df6dbd404e3bc981797a5b8c075</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://ci-builds.apache.org/job/Logging/job/log4j/</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git</url></reference><reference type="website"><url>https://www.apache.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-core</name>
      <version>2.17.2</version>
      <description>The Apache Log4j Implementation</description>
      <hashes>
        <hash alg="MD5">b35d06ffd3ea52e5ba9efe455108745c</hash>
        <hash alg="SHA-1">fa43ba4467f5300b16d1e0742934149bfc5ac564</hash>
        <hash alg="SHA-256">5adb34ff4197cd16a8d24f63035856a933cb59562a6888dde86e9450fcfef646</hash>
        <hash alg="SHA-512">c2fc60a1e8c866c09f4787d1edb1bd87a5a5fe114c477d065a3c43f4e513f055d61560b597f06ef6d95c09763b6adb3be17812c8611c00df6f4959311bc9599d</hash>
        <hash alg="SHA-384">a8e03c55833df8f96d7066645440281ba212040af247733db6f4debcb38b7fe8e1e9ac79eb9b67105670e82136125e7c</hash>
        <hash alg="SHA3-384">f59e8609518ae9be81b30a480bf72a93cbf2b5e25e1465a0124945817a0a98969205147289177631a2a38783d3815af4</hash>
        <hash alg="SHA3-256">ce14c5b6c9c5285db2089e70bd78ade549b6b3109b897aad868a4a2e642489b7</hash>
        <hash alg="SHA3-512">51f5519f25b534e1d9eb43b9e53d56e93c373b0dd64fa9d80a187e1ede7b5c32823d6fa5a034ec37f2a8c19d8af4dba0827912e7546824320a98af5348e6e83f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://ci-builds.apache.org/job/Logging/job/log4j/</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git</url></reference><reference type="website"><url>https://www.apache.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-starter@2.5.12?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-starter</name>
      <version>2.5.12</version>
      <description>Core starter, including auto-configuration support, logging and YAML</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">82beae27be7cbcdb841dcf9184107e2a</hash>
        <hash alg="SHA-1">c43224a577cab8985ec17d971cd25ae88c92a94d</hash>
        <hash alg="SHA-256">ba354f3ca0b36da70468b3ce16b8bca52d125f7925c309803889b4398ca30998</hash>
        <hash alg="SHA-512">b4785cd2400fa03fc55fa130c0c4bc79ac7f8f9dd77527c7441de88de65599e76be3817100ddfe5325bb7bcc4d769fa4d186c4cc67a72b9c5e9f9b4fd4f86ee5</hash>
        <hash alg="SHA-384">6dfbad5171f59ac09efeeab0ebfdcfde462fe90c1ada078c78e8ec2a4b63872d5109f5bdb5fecefea22f6bb9c8fd692a</hash>
        <hash alg="SHA3-384">94f98f178c294880446e336e7350d1ae10b2ddbad8cbcd696e40477d9b0ef5fd25419ce22edecf1a28f092fff067ab14</hash>
        <hash alg="SHA3-256">1d4f532978137d57962793e62210b1c0bbd0b9319bf1d3cc89e592467925b128</hash>
        <hash alg="SHA3-512">b466d188711efd0fae03bb96299287c3622d388f28ef7d6338b9937acc8db9ba02e9cfb4052b8b6d0ac207562c896f6f8863e7fbd96e6d94f30663b9d76461a6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-starter@2.5.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-boot/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot@2.5.12?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot</name>
      <version>2.5.12</version>
      <description>Spring Boot</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0318f1936643f4982ba5251cf69a49f7</hash>
        <hash alg="SHA-1">afa269ff27342e8c472a70a4f9355c6b66f16384</hash>
        <hash alg="SHA-256">4723b82ad4f492bbb4bb2b8e158a52f6b6de5fd508ca3f347628a0f9dbfce527</hash>
        <hash alg="SHA-512">30644948751520249bc59f2c8f665227e317b3dc8dc42953dad6907b0b1ba354642f43caf1899a7124cc7a4da1aaaadb2d5ef5836438d93c1fb31054ab9aabf0</hash>
        <hash alg="SHA-384">95d245d97bade66710f216014c646f15ca2335bd0fd554246b7a0dc0a3401b77c85cdfc2aefa5780200444775bc55814</hash>
        <hash alg="SHA3-384">f2edcf8d63a40afca30be885554f3ff5376f262d7ee26029e261c18373cde1a453d51fee3bc21ef4b63408971517c476</hash>
        <hash alg="SHA3-256">6fd987a29da8c96aaecde0a729280118cadf2d66681d40e9dd368571a0e598f5</hash>
        <hash alg="SHA3-512">ce88b2621901292a78812d0841e180cd7967e5aec5f09a3dc14b70de2b4c558bc9ae7823e9f26c57438219b2fe25366a5b05aaa089c0293a24d35603be69e0d7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot@2.5.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-boot/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-context@5.3.18?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-context</name>
      <version>5.3.18</version>
      <description>Spring Context</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3ae3003c3d7da5c8890e8af2b6a41213</hash>
        <hash alg="SHA-1">34f6683d9dbe6edb02ad9393df3d3211b5484622</hash>
        <hash alg="SHA-256">6f307ea6e140d7f6f7fcffc7bb8c1540dd244c1039d8f7e7b8f3ddec6c73f59c</hash>
        <hash alg="SHA-512">3e38262247fd1800015ec7eab2fa6cd3a1a957490399836ba14628a466b51020797ba05fa9a09ede0d78be61144281230e2401a1544ff8ddf0783b9dcf77f6e0</hash>
        <hash alg="SHA-384">1f52b6a17f2afe374a898e661400e6813839143651f65acb500c1de0153c0ef3f88299a35f89e6a2cfb0180facfa345a</hash>
        <hash alg="SHA3-384">9c50bf0083286b362f03638fa268dbe7885dd18f99f26387ebd7d633024d1d8221f0a1426da6321d8e122b80fa3fcc1c</hash>
        <hash alg="SHA3-256">e5f12b8e2564612d5e855dd594807802b9b649ceeee3dd56588b7657220b28b1</hash>
        <hash alg="SHA3-512">b55021bbd4b7d845e26abf45260e63a71f6840773f093b4b349f293beb3ae533941c3a389f9b24a335e34f075c8e51235304bade31122cd1a839920c77890ca3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-context@5.3.18?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.5.12?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-autoconfigure</name>
      <version>2.5.12</version>
      <description>Spring Boot AutoConfigure</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">945afd28b0df41cb712470e74a66bd56</hash>
        <hash alg="SHA-1">59251dea0eac5480100e93ec4c56ca26fbce22f4</hash>
        <hash alg="SHA-256">c186ecde7a6c563212d9425a1235148e76f33adb1bfc1e2901fa3559d343a12c</hash>
        <hash alg="SHA-512">0dbd9ba2c213d416067cfc8a579dbad3d43cf84bed9a13c0e683cf035502aeaa3b7266178d01e68b60186bf236ed1fb1e78c7c1d70f9d766ef0507cf045220e9</hash>
        <hash alg="SHA-384">377064d6adf72a504ea49a8c6da548e327bb74232a4ad2769ae7d27d930ea88c54995edc06466943ceb7be4bbd1dab02</hash>
        <hash alg="SHA3-384">c28d6e1bbb87d32b250e998296a3c4032698877db03b0d3121801a15e4bed283910152399e7699f6ac1c2deebd2d8a2f</hash>
        <hash alg="SHA3-256">a643dc566bb7500eaf0cd17ee1e4783d2c8d0f37955204ebde06ea3da82c27c2</hash>
        <hash alg="SHA3-512">511a92f21b3a8e50eb09e6660b33ed63bdc89a8435e934463c093d8a7753de7d5d81f5bd10b8f05572f5a051ef834f49344f80813f2806583ba00e8aff2e0e31</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.5.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-boot/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.5.12?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-starter-logging</name>
      <version>2.5.12</version>
      <description>Starter for logging using Logback. Default logging starter</description>
      <hashes>
        <hash alg="MD5">0b3312dab3d2e84c93e93fe864601162</hash>
        <hash alg="SHA-1">de71318e8383c1460902ef336b4a4467bd2fbb19</hash>
        <hash alg="SHA-256">31421249bf449fafbe6ea68057e7ef5886e81836b416be6f3fa0d6c3b1646107</hash>
        <hash alg="SHA-512">250107ae4340a4f9b77bf0879f3fdbd763984ec2885d902a26bd57d35f393cb69fa1f8f027c48bfde595c006a379791134a9a8e6107fa67f8abdbd4901c2e3b4</hash>
        <hash alg="SHA-384">edc4d5ee0c0b98da03c44243de02a8b514125a0d74cde857d4af7cd75b7506d0c90c50645278461c6c2602c3e147ae1d</hash>
        <hash alg="SHA3-384">24d2cac2586be50d6e49b898684e3322461a80c53bf79d8607558c064583825d3001ba3e5367833fb5b4614f5650e800</hash>
        <hash alg="SHA3-256">f7037db798b922a1e0aa27ea67c0e3177ee3f451e31b5e1ecf90a6730381f3f4</hash>
        <hash alg="SHA3-512">c2d5389da02f084330ae21f708f73ef715e8dcb5dfd6d1e7cdac97bc9bf75e858c6a21123a7b56a97808eee3d6b174632340bd363bcdffe38adeec5a9e8ac652</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.5.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-boot/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar">
      <publisher>QOS.ch</publisher>
      <group>ch.qos.logback</group>
      <name>logback-classic</name>
      <version>1.2.11</version>
      <description>logback-classic module</description>
      <hashes>
        <hash alg="MD5">e13679004cc76ad5792f275f04884fab</hash>
        <hash alg="SHA-1">4741689214e9d1e8408b206506cbe76d1c6a7d60</hash>
        <hash alg="SHA-256">4d8e899621a3006c2f66e19feab002b11e6cfc5cb1854fc41f01532c00deb2aa</hash>
        <hash alg="SHA-512">6df8b42396c5d3257f11fb19c280533aa28d66e647115816d4ebfd6a58c9b5adf0e098504772261b29435df75b86cb2b9a47f846ed45d770179c9d10f39941de</hash>
        <hash alg="SHA-384">d480881d1a0d58c94aba0b719d56cd492147bc6481b67370dc7426ea7a81326af5b19f32d6a95fee714f37b90a5eed76</hash>
        <hash alg="SHA3-384">070647c93da744f04cc13ab3f1958c61a8b1e219fe221ed0bf251e4cc97563c64be323bfb3a9e2fd4839e33ded424b21</hash>
        <hash alg="SHA3-256">60c1dbe51066ffb3885673255a279e8894c89fe26f079180fa992478c1d9b03e</hash>
        <hash alg="SHA3-512">ce16fae69767bca975bec0d7dd0ceeb40c15cf034a4a949721c828a0f2c25cb9d619c4db3f986f6d9805d5b76d27b8926c55be5579522cd5ab3fa5e69bb68aeb</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/ceki/logback</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar">
      <publisher>QOS.ch</publisher>
      <group>ch.qos.logback</group>
      <name>logback-core</name>
      <version>1.2.11</version>
      <description>logback-core module</description>
      <hashes>
        <hash alg="MD5">115da115b5e66ef64e774ec35af1fb1a</hash>
        <hash alg="SHA-1">a01230df5ca5c34540cdaa3ad5efb012f1f1f792</hash>
        <hash alg="SHA-256">6ce1e9397be8298a2e99029f55f955c6fa3cef255171c554d0b9c201cffd0159</hash>
        <hash alg="SHA-512">86b12a74c2a822a12ba2e9a7b0db5013803f18784a3cb1201c95d5f7872a6aa8cf06d5861a5c35777a7decc7ea26df7b4388fab3b3b71aab7274527d9b339318</hash>
        <hash alg="SHA-384">2afd896ebe6333d99e5baa553d80b7851d8ff51c06c725267e061df81bc9a878b74a65394699ae853f9738a08963aa0a</hash>
        <hash alg="SHA3-384">43d39acc5608b60d671c000bf6114f4623d3057399142abca01b0fc2381f2191479a2f0dd74f812223b66f57fa48fd9c</hash>
        <hash alg="SHA3-256">c23af1733b972e958369a2e14372fd2b306d4f552d7ae5ff6b9dfad3c14611c6</hash>
        <hash alg="SHA3-512">c7f6357d32a3b9fd82dfbd162c3a6cbe4b4909ef530e956bcd18649b2d3624eb51c5a71fee54533a9786e87cf1ccdc693f563ef6e3c6fbff7beedbd1d670f9bb</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/ceki/logback</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.17.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-to-slf4j</name>
      <version>2.17.2</version>
      <description>The Apache Log4j binding between Log4j 2 API and SLF4J.</description>
      <hashes>
        <hash alg="MD5">14b27a4266c6d71c949cb4591ee463cc</hash>
        <hash alg="SHA-1">17dd0fae2747d9a28c67bc9534108823d2376b46</hash>
        <hash alg="SHA-256">9bcfa5273527b950d79739d11e8f8080cfc881908fa2a946b4e891c0293094de</hash>
        <hash alg="SHA-512">c90bbaacaabeed35f80be4d723b54234fd137413888870d6e1c1b16c067cbede57d637a18f0d25421a9c419fc55a9c388ce235077cfd6497178dfe67c5d398e8</hash>
        <hash alg="SHA-384">c8374c05542d5a04a831a66596fe31cf385a303643e724840a70508aaa98e4870234aa8a26ac1f4fab167fe45bf34e6f</hash>
        <hash alg="SHA3-384">25c843c30137e459b94476843d8312a49d75b40d80469b1943b44a6bd2fd51f6b6f71b23d4bc559f91ae0f28763c7b0b</hash>
        <hash alg="SHA3-256">d0e8a8996e79cc881a10a55b4887436a9458625007f03b071230d1c4e96b54b6</hash>
        <hash alg="SHA3-512">6d0ec7c51ea40dee55c3c9a60ec198fe7461fba1f6b30a88b866608e83f47fb1328754b8fe33f3993f8c1ececc89c9ea83cb8b266f36fd9c1b8095946d330e2f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.17.2?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://ci-builds.apache.org/job/Logging/job/log4j/</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git</url></reference><reference type="website"><url>https://www.apache.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>jul-to-slf4j</name>
      <version>1.7.36</version>
      <description>JUL to SLF4J bridge</description>
      <hashes>
        <hash alg="MD5">2a3fe73e6cafe8f102facaf2dd65353f</hash>
        <hash alg="SHA-1">ed46d81cef9c412a88caef405b58f93a678ff2ca</hash>
        <hash alg="SHA-256">9e641fb142c5f0b0623d6222c09ea87523a41bf6bed48ac79940724010b989de</hash>
        <hash alg="SHA-512">0bb1e7343d07d41bcfb0c1ffeb2db28cbb35e7a80a409b80042f463b082a292976f09d719e319471e31c7bab716121728a16509fd385fc6e3b400b1b214cffea</hash>
        <hash alg="SHA-384">50e2f326fc00537a5fb3726c7c55556851b3be8b4346f522f27ddecf2fdb44adabae3197b30ccfd854c37d6734adbd8f</hash>
        <hash alg="SHA3-384">4ad0c3870852ac44530a9dcb992d947cd8708ee6f422559da41aaaa8b22d1610fb116b32d2c54df83b110b85487083bf</hash>
        <hash alg="SHA3-256">8e3f5aaaa27f618b52e610376d2a16c6f9dc8dce5e6c2bbe42131a590626aae6</hash>
        <hash alg="SHA3-512">e3da265406b5e69f02235ed7272a48f71cb8b6f0a696820e28e90fb5eafeeb311abf2a4e779b402f384c6a80470fd41116ee52a526f57040fae3b24cb3b19c01</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.qos.ch</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.annotation</group>
      <name>jakarta.annotation-api</name>
      <version>1.3.5</version>
      <description>Jakarta Annotations API</description>
      <hashes>
        <hash alg="MD5">8b165cf58df5f8c2a222f637c0a07c97</hash>
        <hash alg="SHA-1">59eb84ee0d616332ff44aba065f3888cf002cd2d</hash>
        <hash alg="SHA-256">85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a</hash>
        <hash alg="SHA-512">d1acff146c0f9ea923a9325ad4c22ba2052ec474341ab8392abab7e8abd3ca010db2400ff9b5849fc4f1fa5c0a18830eb104da07a13bd26b4f0a43d167935878</hash>
        <hash alg="SHA-384">004a4bde333c0575f72df1cb9cf95ee0c6c7f738a6f0f723a5ec545aaa1664abeb82f01627708a1377e3136754fb7859</hash>
        <hash alg="SHA3-384">abcc5b1fbad59b3e9b6d2d6195ec11d6254f689116c534a964724b61f815cca60ba3a2c1489933403f3f78dc54fd20a6</hash>
        <hash alg="SHA3-256">3d3ef16365e7a0357d82f874fa26b2b0a146cf7bf98a351c65ef1586444fa009</hash>
        <hash alg="SHA3-512">88625a8811be514851209291344df32478b527bc7838ddee58752269bf2457ae8f4e6b6a0d0b5c18522e287ba6df1def0cb19dee2b85e01ee21f0b48ac2630d3</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/common-annotations-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/ca-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/common-annotations-api</url></reference><reference type="website"><url>https://www.eclipse.org</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-core@5.3.18?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-core</name>
      <version>5.3.18</version>
      <description>Spring Core</description>
      <hashes>
        <hash alg="MD5">91eb16af497ab752763f5bb24e1239e7</hash>
        <hash alg="SHA-1">7ff3000f3342989cb011b6095a0e86f2e5176cef</hash>
        <hash alg="SHA-256">ca6fbdcf571fe1ee036d8e0b990175169baf629d38a8714f59e0e0fdc8f7a361</hash>
        <hash alg="SHA-512">0b687ac0ae4ca715a451f50a221bb317fec0fc5bfec5962454a91bb0158da6ad49a79ded964158a2bbdc5733cc829489b9ee56759684644a757d613daaf18dd1</hash>
        <hash alg="SHA-384">ec1befb91ddce4c5d61868050cd7b233e28150e412a7456d64d9b90ad46029b2b296ef73bbb72b9dd15fa7d9773af82b</hash>
        <hash alg="SHA3-384">5a8820e72f4ad25e97cbad8a2cf1df6a27e0c2ad7df9465bfbbf1ded9c13b5a09a24e44614854866b2faa47e4fc68152</hash>
        <hash alg="SHA3-256">8190f9815df340fe3019584d8b6f72b091f82f82663ea9597ceeb18295631528</hash>
        <hash alg="SHA3-512">e5d8c1ca790bf535db1330a061629a11cd26445cd0d81412dbf1525966796cdfe560e690b0d30de7ebb3f54eb8e8c63fc1f82eb819a270020161e2005d7a7a3d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-core@5.3.18?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-jcl@5.3.18?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-jcl</name>
      <version>5.3.18</version>
      <description>Spring Commons Logging Bridge</description>
      <hashes>
        <hash alg="MD5">4a258a1588318010d00aa66db45e03ef</hash>
        <hash alg="SHA-1">7e5d8cd447981bc20d4c397a2ba0a1c65ff2267a</hash>
        <hash alg="SHA-256">5769aae0e6addd8f5f59cbacd1b0635d819851e66baec4fce7d6c1fad1fadf8e</hash>
        <hash alg="SHA-512">cde1bcfa290715c3004f89cabe6064be50a25d3a7d0cd58ef67db330e62ea187c42b4c7546f607798c8bf965d51e956f009e5e76165b906cfcd7e1750302d703</hash>
        <hash alg="SHA-384">5d3f84317dd562012878ff60096201801fb7e9c80bdca9c41ed1a8ea253baec0ba57ff66daeda38d06bc1fec089845ef</hash>
        <hash alg="SHA3-384">348e9ce34388e36de3cad5cbff6c7185c629f01da5a7bffda0b41a2ae75ccae4d0494ef203c88925a45792d75afea60e</hash>
        <hash alg="SHA3-256">5042505cf6cfd15d3101898beed68431781800ca3e4a11c11666bb89219b3910</hash>
        <hash alg="SHA3-512">c22c3fb371d7364c749275fda4ec54c858280b3dde780762d656e428aaeca5c7805286dcb5eb92bd84011326f13405c2b5f66e15514ee11dc37e9bce38b2b2e7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-jcl@5.3.18?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.yaml/snakeyaml@1.28?type=jar">
      <group>org.yaml</group>
      <name>snakeyaml</name>
      <version>1.28</version>
      <description>YAML 1.1 parser and emitter for Java</description>
      <hashes>
        <hash alg="MD5">0fac676adf839a85e0ca7a3df05cb28b</hash>
        <hash alg="SHA-1">7cae037c3014350c923776548e71c9feb7a69259</hash>
        <hash alg="SHA-256">35446a1421435d45e4c6ac0de3b5378527d5cc2446c07183e24447730ce1fffa</hash>
        <hash alg="SHA-512">448c82a2ba0c644cd4a697f02699829e1e431b9ef69f80b23f5d79d164996cf15841961d7b2246c08aadb910a8ffcdc695b8baedf26066d7fbe11e5d7e6f61bd</hash>
        <hash alg="SHA-384">0f9dfa1eea336700c6f7aeed9724eb417d0d3e8f52e3edf19d2dbee16fd63b37926a71fb54b9937dec8914247cc6f475</hash>
        <hash alg="SHA3-384">f3e243627814aab986ce5c3380bb19d02edb6876fa2296cd124b782cfa8a07e5564ba28aa4aaed3fef688df378617696</hash>
        <hash alg="SHA3-256">336150cfec9501a5d40d57a8abf53771c6431c48d4ce78f37ed247b1199fad83</hash>
        <hash alg="SHA3-512">fc504b8575f0b5d5cbfac0a6e557466bc58cc37f08cbb0c5869f15fec275a2e109a8d54c2e729fa58170c77d0c42bbfac795ff5e00b27fa42012dc676dce659f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.yaml/snakeyaml@1.28?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://bitbucket.org/asomov/snakeyaml/issues</url></reference><reference type="vcs"><url>https://bitbucket.org/asomov/snakeyaml/src</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-starter-web@2.5.12?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-starter-web</name>
      <version>2.5.12</version>
      <description>Starter for building web, including RESTful, applications using Spring MVC. Uses Tomcat as the default embedded container</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">fcdcc7a4407694a34cfcbe22f18fe0a5</hash>
        <hash alg="SHA-1">0c217615248c94a218bb00ea415ad6eebe460ba3</hash>
        <hash alg="SHA-256">be0c193ac2ca2e39d5a3395f5d07625f04b4a0ab16bb0fb04506ecb2c57e87eb</hash>
        <hash alg="SHA-512">7e141e17916a063d0de0041b82eb3b3ad54bf8d2e3d785a7f73f33501c68d26c54af241e6392d576bbcbbd7fb9e999a5388d140511ac9fbb86f92606beab9425</hash>
        <hash alg="SHA-384">bdaea95bf4280d3722fd5e223965be150414d5f418d70774b79e0f34465e420ebb5bf9141268eeb656a7d5280e9c1469</hash>
        <hash alg="SHA3-384">b9f1963890874dbdc611636fe43cd00bfab5933d649cf44758bbe2333acf1c02385f61e5296581801983a87588677c9d</hash>
        <hash alg="SHA3-256">950d02839e0c9df6577e2dcaac78787a611d72ebf65b0bf13a5232eaea83cc44</hash>
        <hash alg="SHA3-512">e5d99c76fa9bdb9740403b10907b39a2f0b6b18afec6cca5913fbd0e52c8235656779df1f3f674afad8f6a24d7312b2c2026c4c73a08585f694d0af5f9741e00</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-starter-web@2.5.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-boot/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-starter-json@2.5.12?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-starter-json</name>
      <version>2.5.12</version>
      <description>Starter for reading and writing json</description>
      <hashes>
        <hash alg="MD5">97d3415ccb5ecb864f106d1b8d70769e</hash>
        <hash alg="SHA-1">549b45bb8d9edefb693406cc7e6c590943009cd8</hash>
        <hash alg="SHA-256">1526c9f00bf84835c746f9182228188373864f965d8ac66580af0672634f08bd</hash>
        <hash alg="SHA-512">ad2898a33c8cbf5e5d7dd8ae80eff3dad4b48af356e5a54cd0dbc1e9ff93f37c47e61ab198cf2942d08e59a344d8ab396b155f18c37d484a18fd8837ebcab62f</hash>
        <hash alg="SHA-384">ab888391b65d54210ab041dcfd6aee312261ae0ae1777e48ad0c7c6add6e8f554e6d9c38c7846cc076a79c4fd30c04bf</hash>
        <hash alg="SHA3-384">0bd59e34f0f026c9fa5b280b164534a00b267aed2185f3db2317d9f79f393d719870407a4b84d7addcd41916be0adfcd</hash>
        <hash alg="SHA3-256">e187c25a7768b43acb37f91459c4738dff7621af1d75a89d6f1e770a9583d7fb</hash>
        <hash alg="SHA3-512">ae18d314c0a6b10383e561a63006a55aa6c142ae86626e277f24a3e742bb49ced77319b76684d89855e7bb4a917d322dcb192341f666fa9d4dcfee1c2a77c506</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-starter-json@2.5.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-boot/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.12.6?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.datatype</group>
      <name>jackson-datatype-jdk8</name>
      <version>2.12.6</version>
      <description>Add-on module for Jackson (http://jackson.codehaus.org) to support
JDK 8 data types.</description>
      <hashes>
        <hash alg="MD5">2af8967df4fbe28274051430886f5cba</hash>
        <hash alg="SHA-1">ccbbe6e72e3665e7ad9d0eee4613e1d8a09b81ae</hash>
        <hash alg="SHA-256">3602428cafcef7819ac1fc718fe5b2ab933944f9f781874cbd44a50273bbcee2</hash>
        <hash alg="SHA-512">4e0ad569a8e4f08927d6f70081a66574afc6c3a740b99e804842802f21689fdf2f91c278abc078648606b7e34e44a592c5c9d6213f43c03c285e98073f49bb1e</hash>
        <hash alg="SHA-384">602b2b31b44cfdc5c3a2424a5493d27ca057a50ea878e6a447cf4f0852d54d4f1ab3ab74e3edc77c354d1b351f1965e3</hash>
        <hash alg="SHA3-384">f49c3feb3c47bfe38262f66bce03f86bdb3e206092d657a6e9fd8220a1a027e568d14428e90722f2fba8224e4c2159b0</hash>
        <hash alg="SHA3-256">56a60e3a87f99545a6155cc35d50c48b95b7bdf3a4ac144ce5d7c88f2d5f7d24</hash>
        <hash alg="SHA3-512">5c0e40fdc8409e22c0d49e7b9266bf13a77c0e8837c7200b4580e67b11228fa142b921452742203ebb5f45785b8d490692e46c54d26d8107ba4c24d1a96f99e7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.12.6?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-modules-java8/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-modules-java8</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.12.6?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.datatype</group>
      <name>jackson-datatype-jsr310</name>
      <version>2.12.6</version>
      <description>Add-on module to support JSR-310 (Java 8 Date &amp; Time API) data types.</description>
      <hashes>
        <hash alg="MD5">0dcce05f281b2f8bc0e7d422eebb8f7c</hash>
        <hash alg="SHA-1">0f7d0d854f24c4254885c275a09fb885ef578b48</hash>
        <hash alg="SHA-256">b4539d431f019239699691820dfea70a65cf8e882120a72b3a7713ed1dc66fcb</hash>
        <hash alg="SHA-512">cd589a330ff73905be347c1f97b003ebe3e19a24062309505c6080517dd6b2c711400e8479fb5d93a11c425641072d2752242eb742056b8afdc3e85773a4c4be</hash>
        <hash alg="SHA-384">77d6ed6d536cd22722e834a9cfadf4cdbeda0f4d0ea866d391f0291ac201fa9054369d51b4ce8bf03ddf16200501a6e7</hash>
        <hash alg="SHA3-384">5796ef725a1e0cd23ce4bd421202a5c2d5941a93705384143eeb9be30eaed12b86fa024bc384938ffbc8a764c4b8a844</hash>
        <hash alg="SHA3-256">c4bea88772b37186e4f54589f5a7ec35f06ae6d1a9d2e698ebdf177fba06a37a</hash>
        <hash alg="SHA3-512">d2ceb0451fcbaae572532524bcccb4b3898fbac771cd9baad957952a5635c21d8bad239dd0df1b26b984ad1b5f8ad64e103ff6b0906f26c221613ffadd6c4ea7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.12.6?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-modules-java8/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-modules-java8</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.12.6?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.module</group>
      <name>jackson-module-parameter-names</name>
      <version>2.12.6</version>
      <description>Add-on module for Jackson (http://jackson.codehaus.org) to support
introspection of method/constructor parameter names, without having to add explicit property name annotation.</description>
      <hashes>
        <hash alg="MD5">64d9623e71a4d62b7184701d90d310d1</hash>
        <hash alg="SHA-1">6149920352cfbdde97e6a3d35437260a72907761</hash>
        <hash alg="SHA-256">bcd0e6411465100f2b90c9d7c940d191ef037079662fe82d8aba995511206d42</hash>
        <hash alg="SHA-512">5f615d11eb63520212af566bd6aff748de9e82e225899dcdd2f35f1e7dca9bfe47f0864f0431e04f9b232569082f42affeb39335b9a7025e190b3c84012168e2</hash>
        <hash alg="SHA-384">437d5d02d235d14bee9e55d0e549fbb0cf5e503abf659a8b86df0bd944e4e1de4e0afd37d747a0eaae2cb7252b9bafe3</hash>
        <hash alg="SHA3-384">cf852068c0e482bb7a5edad75b88dd76bda9c7550b74a119b4788f27a09443ea297409c6821b45ec5bd4ba69024b1b50</hash>
        <hash alg="SHA3-256">381054c8322730e31190b9d1716a072cbd3efadd11cc5790f88c31cf6108c8f4</hash>
        <hash alg="SHA3-512">4a6e87066a4130d7077f6ef09114198a30b30016f3b67ff8aca6bb29f39b3d379f0bf9ea12b00fda0a45dcb69bc2484be57b92b4137cdf5077eb6c0d0ed36be0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.12.6?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-modules-java8/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-modules-java8</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@2.5.12?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-starter-tomcat</name>
      <version>2.5.12</version>
      <description>Starter for using Tomcat as the embedded servlet container. Default servlet container starter used by spring-boot-starter-web</description>
      <hashes>
        <hash alg="MD5">c967cd03a6bef373b4f02a9314e09db0</hash>
        <hash alg="SHA-1">15fe18ed97e21ca94e86e6cdd54ddd2baa6964a5</hash>
        <hash alg="SHA-256">cba38d192023500a8b6e35f76a3e07a6ba927fbe472229d651138b1b098c5145</hash>
        <hash alg="SHA-512">4b4ca724e520cc229c3111e742da6037932fa143c4e1df1bed8e1a3afb8566a394f84a14b749d4708693728fafa79b69a4900c996db21f563f5887faca1177d8</hash>
        <hash alg="SHA-384">44119dfc70a3a2edbc8bd0dcf0e5750e7338e8d27b752e31c3baa957c9a2b894da08dfd7e5550e9e2aff8c587edd245d</hash>
        <hash alg="SHA3-384">30166c774444c1a915a39db66ac0f3c992ecb19e2d8714e93dfee26fab8b8ad0cf4f48d7c247d04165c07f4bfff11c8a</hash>
        <hash alg="SHA3-256">51e1823b9b9eac3076ff64e706a2003b00e539451f5112d1c086510701de2d25</hash>
        <hash alg="SHA3-512">63833aed62e2ec013e1a485f01b6214594f9c1ed72d88cf46bcc980229cf325ce24bddc3e51ac1972fb1eca608787aeeb9b11a089a0904cfc86ffa4b848fc616</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@2.5.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-boot/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.60?type=jar">
      <group>org.apache.tomcat.embed</group>
      <name>tomcat-embed-core</name>
      <version>9.0.60</version>
      <description>Core Tomcat implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d44c65e29d1a56777c9fdd2453f02159</hash>
        <hash alg="SHA-1">0e14045220243804544ddb168cb532f4640a220c</hash>
        <hash alg="SHA-256">7f7ce6b70a0750202d8ef7f4f8832fc59d6b474d303c7135cba6646d95a1a314</hash>
        <hash alg="SHA-512">3302b2504b9881f4ee8d1570b70429859f6d3bb506fe34903f6643f21377efd4cb40b6569ede018f71b0916b277cc512add3a5cbf8d9982f59e62101f1622766</hash>
        <hash alg="SHA-384">0f89d01bf7b4730b5ab6201b03a58e5711dffd2b0d242f6df68023d247c8a9acd297d7a86825093d7a37db6f52808b35</hash>
        <hash alg="SHA3-384">d054665b443d80199a2fd04dd2080bc16a3238d465fb79a6528c3ff44c36b05aa2392bc53216cce6a00ab9466342ca52</hash>
        <hash alg="SHA3-256">5580998d1549d171d4f7fe4bda8b6b8809e3ef40c243ad712f707a82c3dec635</hash>
        <hash alg="SHA3-512">ff7adaa28d58e0b45a42f024e6f70bf474f62f57980a0e8bf9af532e8b34710bb52980336290baa6f30678dad1e43f5bbd41a0359001d59511ac1c5b84360728</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.60?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.60?type=jar">
      <group>org.apache.tomcat.embed</group>
      <name>tomcat-embed-el</name>
      <version>9.0.60</version>
      <description>Core Tomcat implementation</description>
      <hashes>
        <hash alg="MD5">99bba291948e6db87de404569b2be6eb</hash>
        <hash alg="SHA-1">46dad1a278f348ca73466e0b73132bf4c4892c06</hash>
        <hash alg="SHA-256">526e7cbe8d6e3b35e5e355ee299809d5acfb4c9cc948ca1670db6508b07f47be</hash>
        <hash alg="SHA-512">e81fa0823d6a4843f5cd65d3001ed51a47bd29b1dfec26c2ae6bb8a5195523076a8a6926da79150cd49ac5ecf0ae2c8773275b76f5053fc58375236e1b2015c5</hash>
        <hash alg="SHA-384">3f8a58680c9e89fa33e868071d053ae7d7a5ed68bebbba5c95fded0d4101137892ea66c7da70b57fe5481fada247f3ff</hash>
        <hash alg="SHA3-384">a3b5c1db218c1a87b83c0032a6b7099db11455f1be0db87b582357c515c9e5d04c60b294d8881119aed3fc003a0b789e</hash>
        <hash alg="SHA3-256">eef13678dcc4966da4545680531420b8d3a424de6074c45f0ac305dd9c1cd7e1</hash>
        <hash alg="SHA3-512">fc56e3b461cce6ff0356b5a6139d3f1bdd04d2ccc351f056841eaa0beb5f3b4df8351e3d40e4dff63d186d91a53150177be648aefde56ce6df6b31ee28d583c1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.60?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.60?type=jar">
      <group>org.apache.tomcat.embed</group>
      <name>tomcat-embed-websocket</name>
      <version>9.0.60</version>
      <description>Core Tomcat implementation</description>
      <hashes>
        <hash alg="MD5">15464af3b2cdd9087643af53e1cfebeb</hash>
        <hash alg="SHA-1">a88262a55ae2c4b5404149a48122523688be341a</hash>
        <hash alg="SHA-256">673b88109fda4344c484d858a6ad8b8dc87336d9f317a93e3b6ac0ce850c7326</hash>
        <hash alg="SHA-512">209a9a5ffa41a892d710179e82f61e006d3db9f5f384714e3a7222e83bc43da8557a750f167d62568fbc4dc34a09a69006aa2d460f3ef786ad34dd26bc4723b7</hash>
        <hash alg="SHA-384">8167fef876b4eb61e8028c7286c99bd530bd4e8bde8069d2a2e77110b594178659b9e0427fb6931a2df3ef9f398ce456</hash>
        <hash alg="SHA3-384">e2d6ea027ee07577aeb369b7e6e0f3aff6ece130c3674b42bc939f70e0d4a059fbd3e5c22158e8ccae953f5c3c007fd2</hash>
        <hash alg="SHA3-256">af946b40d668739b3a8d2c5f53342b2213961b17d45501ace1ba22b740cc2ed4</hash>
        <hash alg="SHA3-512">3c47313ac89811402b632f8224ae282ab95c8edad98348ab864c9fa588379ef1f2efb127a7576c4a11954eb54bd7b353331cf5ea111b3b7f6682a4222522916e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.60?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-web@5.3.18?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-web</name>
      <version>5.3.18</version>
      <description>Spring Web</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">68bf9d2892d68a1b19060647d6605f24</hash>
        <hash alg="SHA-1">8db103c4109e925ec6f5fbfe577d447d3e95ded5</hash>
        <hash alg="SHA-256">7918618bd44e82fee77ed878e86e556353370c66d1703344b2f5f6a795c9669d</hash>
        <hash alg="SHA-512">f95b6ba21e635af8e43741c7ecac53c9ab1fb4978b1f7207b031495a9e30bf09d465f9d598a1169ea2032d0605f20aeb30cc0c8ec093cc0b7ffc7706c9e2f863</hash>
        <hash alg="SHA-384">7b765494c8d2f0ce6ad2a934344dcf0b2d35f0e03f3f7089b7c959925ab4fe24673ac8379f71fcb985060ddb255145dd</hash>
        <hash alg="SHA3-384">e59fcfb42912c533a322add76a795cdf22d69890bf7c774dff040106becac874f1b6c9aaa34879a9ed0a0ad02c0fdcbf</hash>
        <hash alg="SHA3-256">8c975ad894681a49edb927bcef787458dfcec68b458e599e85c1dbe139b5e7bf</hash>
        <hash alg="SHA3-512">f4501e9be315745416b0c900f297042c408a106d5c6ceb5a23a28526f64819d63aecc024794d13cbb0b29401185e002df4cb70629a8ed1315a0e4bd1b6c951f3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-web@5.3.18?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-beans@5.3.18?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-beans</name>
      <version>5.3.18</version>
      <description>Spring Beans</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8afc1c508b017da98daf0f9e1a6a9d2c</hash>
        <hash alg="SHA-1">3f0ea6598a5a1eae0a672f025a33a0b7e0d6dfd3</hash>
        <hash alg="SHA-256">e962d99bf7b3753cded86ce8ce6b4be5bed27d0b59feeb2a85948e29bba2807d</hash>
        <hash alg="SHA-512">9695f878109a3d78c03a52031bac5841088097de8679711768ced7d6186747bb23f70acb97d01aba275fc4b054e40f2fe2fc28e2373678ba5e88fba4a93bbe47</hash>
        <hash alg="SHA-384">ffeda3567ee7bce5b0c0fe56fd1cf02e7bd229a4063e943ea498a8107f853dc77051f4641546a750edfca5f70e53d81a</hash>
        <hash alg="SHA3-384">036fa1333fff5abdfa373821b46bc5f69f69ce6d535b5af798568a82f9489224e7c9502b79043aceba4db34462680fab</hash>
        <hash alg="SHA3-256">5d2487a54db2fd7dab8b68084bafc54fb14341198f07eae43768f7142f3a513d</hash>
        <hash alg="SHA3-512">0cf1cb767d8b0c87f9973da7f7725fccd6075230cb55f1cbd741677ade055480b1b5cdf72ec03472adb8ecd79e3e9914314835e0e02db7aa51d1764800ccd5bb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-beans@5.3.18?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-webmvc@5.3.18?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-webmvc</name>
      <version>5.3.18</version>
      <description>Spring Web MVC</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2cf4d20d68efd5b9adb8aa9fe719ed0d</hash>
        <hash alg="SHA-1">806b4ac997761daa32cba3f766d8ac09c132fe81</hash>
        <hash alg="SHA-256">22bc86890b53dab50522bd646cd57180616a651da45ae588d5e0e1f72aa2bc7d</hash>
        <hash alg="SHA-512">3dc7281d612278e2796be26a5b8ca0906de71d0b1a735430eb31ff63ba0008c58242f4a19b53255093f3a7fcd6da815e5a7c5bad7a4a9ffaf62029964b44695d</hash>
        <hash alg="SHA-384">5f4e0a1f4e34f772abcd0d7f57aa55bd729ff0fb96e7183e9903a29a16cfd993bf0ee664a94dfe40ebf8218804102f40</hash>
        <hash alg="SHA3-384">343df9577fd3676ed862bce83817eb6097ddef34dc2ecd0875525f80da237637b8e57cf006811d82f008fc92ccb7ab50</hash>
        <hash alg="SHA3-256">48fc4ddf5e7918bd14ad89ddbc75e6f7c7c67796f196431f707858f3a1528654</hash>
        <hash alg="SHA3-512">dd732440e46e363e2a5c85710f3844bbdee4a7d6915e7510901d067c41da381dcb330cc7cd72b3e3561c82593e87fd13ed121a338bee84045d9d50a013044ab9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-webmvc@5.3.18?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-aop@5.3.18?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-aop</name>
      <version>5.3.18</version>
      <description>Spring AOP</description>
      <hashes>
        <hash alg="MD5">b1be5b3d7f482926b4c9c55fff219fd0</hash>
        <hash alg="SHA-1">8e9cce60c60257ae1d5b3cd675ec3a8286ed1955</hash>
        <hash alg="SHA-256">8678295dd6dfd35960f220087480ec1741a448e7ca018ad6525935672584ee88</hash>
        <hash alg="SHA-512">34babe32287bf2914fa12e5dff8a39e434056a523b63f037a680934d2478ef8a49f22a8643fe68d022d9c519166d9c04a7caafbf46d4cbbdf9c33a4bb4032463</hash>
        <hash alg="SHA-384">d9c0085c2a852632f68e91ef31252c4787e17662549a4ad858d3e07fbdbafe8730f6d2a75207e8c19ad75c72bfd4cfa0</hash>
        <hash alg="SHA3-384">eca9524e7798d553625572456bc38798dfa532ea4cdf3ec6933d480128ad04173be4686124a92fb615ee6aa33986a599</hash>
        <hash alg="SHA3-256">e6f55ac2720d77f82d0408f5496a02ab76c407232444b94b8c3c7f7799210f65</hash>
        <hash alg="SHA3-512">4123256e1992bb05ab56ba2e1e98feaf7c02339647cd49c7508fbb24ab8ea346b3dabad264d02554d1d6aa88a5f56a1727d66acd583dba31a70c20ee12c22013</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-aop@5.3.18?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-expression@5.3.18?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-expression</name>
      <version>5.3.18</version>
      <description>Spring Expression Language (SpEL)</description>
      <hashes>
        <hash alg="MD5">240d2a18a4e363082c9748a9663fb7b8</hash>
        <hash alg="SHA-1">61c51831e49a85fc5bf925253ca63f46fec6f013</hash>
        <hash alg="SHA-256">c0fea3c2a8dcc231070a74a473f7589b39db22fbd03edf4fd3f4740434ff7814</hash>
        <hash alg="SHA-512">4749443a12126e225361aaae2b2e06070d6d4dbfd29169dfcdfe6914de3aade5bb83092f17acd5917ccf8787f7e5e4664ef55e597c7d24a9cd069ad4ce0bed51</hash>
        <hash alg="SHA-384">57fb01d8b2cf244e47757aa5d7f16ab3bd3a9719e2603719eae50b9e1c2c43d465f93e9b20b53aff71e4a50b8c45e1b6</hash>
        <hash alg="SHA3-384">1b5e091d4002b45da700d20c38af0fb845ca3d6d0c87a3f2b429c7d9897264387f7a860b99d29eddca845e423b749d5d</hash>
        <hash alg="SHA3-256">824afcd5e837ae9258086941becc99c6d1f308c79642fea7d1caf2b30a43d39e</hash>
        <hash alg="SHA3-512">3750aeea4cde05236bd76f604a9cb58ec5b0113f1debcaba706a25b1c2f78b1313695889c22a34180905f925bdd1d843fda8c83bae1d0d2b2cffabae63a31727</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-expression@5.3.18?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-starter-data-rest@2.5.12?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-starter-data-rest</name>
      <version>2.5.12</version>
      <description>Starter for exposing Spring Data repositories over REST using Spring Data REST</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">8dd40897670a95a94f4ccfcf1811725c</hash>
        <hash alg="SHA-1">4391a04014c493c72e058c540a1fc5bdf776ac3e</hash>
        <hash alg="SHA-256">23179e1435b2e2fdc7b1aae786d4352394e7f4d6dec723e01cb1ab48d0d11451</hash>
        <hash alg="SHA-512">fa28c275e542ad04bf15a18d4a0d4d25f1e6f3498fc52b367c6ea25cef5bdc53c4d1995c4c5e00e67a052972bef692147cb333e34cc25e7d8a86407b75323e7e</hash>
        <hash alg="SHA-384">f9492fe6e7b86a90320a0c33672b2207078a0355dcdf15b596eb98f8fb78b3706f7af258abb96a3979af4c7c365f8def</hash>
        <hash alg="SHA3-384">f5a9cc5d9a46cf23074be3c1f64b9f2f769ae0e566fd73444d531c1d36b7b54a14040399b22f37c794b13619371ece78</hash>
        <hash alg="SHA3-256">2e6440a3e8bb793db146bb845f3b495f78e8567eb97d2af9eaeb2f5e324b54e4</hash>
        <hash alg="SHA3-512">94cebd91a8e3618a37a96835d58e14dcf4347a242bb9a7453a77e4ca8acb389ce7cdd96120f3947d9358c7d6e06aa8b61dee11acd31fe4313a84f7ea91aabc13</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-starter-data-rest@2.5.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-boot/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.data/spring-data-rest-webmvc@3.5.10?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.data</group>
      <name>spring-data-rest-webmvc</name>
      <version>3.5.10</version>
      <description>Spring Data REST - WebMVC</description>
      <hashes>
        <hash alg="MD5">6909b906b3ecf6a72d7154ced70a4cb0</hash>
        <hash alg="SHA-1">ced2d9730e8725111c4d15eff3d62fd48c913e56</hash>
        <hash alg="SHA-256">d02533707c4768a5dc188361b93563d986b9d1efc28e7f6e829141c6d57f440d</hash>
        <hash alg="SHA-512">3070836010cffeee9faa79225b9db4c24bda90e53b2cdea4c26d4ffb2535527de43cb8e62685fc9500732724131e2d95204a66786057e658c162eecfdc4802d1</hash>
        <hash alg="SHA-384">b41e3d674e577d070a7e6d3fc00ce1080e668e5f19e6cd6af5ace664b984d8c39655b088310d6a4b782b0370cedb08a3</hash>
        <hash alg="SHA3-384">d725ff50a4e0314ced041acc065765564a85a03dfde59372dcfb81402a6cf1358978d68d8ba29e0bba3fca4ff042e8a8</hash>
        <hash alg="SHA3-256">5779489f821ab98b83629c31b386ab0bb4699b3e9bc2db85377f13236be19e4b</hash>
        <hash alg="SHA3-512">5015ee10c8df521fea58af340d029e94d76cb017110df9c6982f0e16cd0d0bf89252454e8f903193028b80412c37196115ff67b9ada573579167266fcbad931d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.data/spring-data-rest-webmvc@3.5.10?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.spring.io</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-data-build/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-data-build</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.data/spring-data-rest-core@3.5.10?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.data</group>
      <name>spring-data-rest-core</name>
      <version>3.5.10</version>
      <description>Spring Data REST - Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4aa73b1540d388af32173df8d6ac4322</hash>
        <hash alg="SHA-1">80fe9d1fb6823a5ba2849b4035fb089790868343</hash>
        <hash alg="SHA-256">c59dc0bc40b0d2893742569d6c6cbcf1e02455fbc9eeb3b0dbedca55b798c293</hash>
        <hash alg="SHA-512">cc64172dc53f08d9d26ba1cb19a7397ed2a92bc7f687fd0539a1f1f37f45160f0406be386cef7c22c4c7a670dbd7ee14bacd70d4f9ba303af44b744a939c23e6</hash>
        <hash alg="SHA-384">4e82d7ad0d5f207c57327cd256c65c8966c426ba19200375bfc93ce40a287733c60c4e1bb0b52d96f06465b6c07130b4</hash>
        <hash alg="SHA3-384">75ca833a888e0dff5a63f65d2645c65ef3b74e959be1826ceb57a1d68e03a2056f4a73c732868c062683ab4d16443207</hash>
        <hash alg="SHA3-256">cbaf8e4c12f2b260b79f37c2204b9870c8cd7d4d438dc730f12dedcedd36fd3e</hash>
        <hash alg="SHA3-512">f0f24c886bfa8bb31b217d10a6cb8a5a2801fffe6f76db8d0e40a643e3e55436f23214c8d4258ca4472714a860dbdcfb361a345d4582433eb345d735de8a53ad</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.data/spring-data-rest-core@3.5.10?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.spring.io</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-data-build/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-data-build</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-tx@5.3.18?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-tx</name>
      <version>5.3.18</version>
      <description>Spring Transaction</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fc71fae4e214d2a00cdf46fd4f4f47a7</hash>
        <hash alg="SHA-1">a93f91200e40b22ac0fda1308ecac081b820b099</hash>
        <hash alg="SHA-256">e976af3135e466533ece3ae1fc2fa1ac893f7f766cbc4321b92579e5768544ff</hash>
        <hash alg="SHA-512">2a505a42d3e426505f90719812844aca484780e44d9c23ed86cde5bb8fcaeb795132ba4cfab6b10c313b62606ac15338baddf615d79cb7176c496f0d982bddef</hash>
        <hash alg="SHA-384">628bd63b567688c9117cf3ad6af94dcd5f7d876817580854599f337b1416e0afb0b928d4f939ed985d55cf610415fcaa</hash>
        <hash alg="SHA3-384">82999ab31924a2fd5a4e85fac6e6e53ffdb149e198c391eb6879ce8974f09fcf6097cac9d9a498242cab7d83b21fa67f</hash>
        <hash alg="SHA3-256">6411c3d55d193aa54b6cb13ce7a23b716802731ca1e19f767649241904a37e40</hash>
        <hash alg="SHA3-512">505398bdb331bb5b9e31a74131ed0aeff7fe5b23e29000c12571a253e62af8aa81a2a9cede0edfd20ffc14fc979ecefaf700b34f65f1ae2ba6aed5b42368be5e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-tx@5.3.18?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.hateoas/spring-hateoas@1.3.7?type=jar">
      <publisher>Pivotal, Inc.</publisher>
      <group>org.springframework.hateoas</group>
      <name>spring-hateoas</name>
      <version>1.3.7</version>
      <description>Library to support implementing representations for
		hyper-text driven REST web services.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4f96b4605a657db6137dcf12359c6be4</hash>
        <hash alg="SHA-1">c5b5e4156471bd73ff452aa68e3cc708ceb1d85f</hash>
        <hash alg="SHA-256">4fb7368b7444e6e4fccf0665e7fb93bab94c65430640486a6ffa5cd3e015d4b6</hash>
        <hash alg="SHA-512">f9ff212cdbc8e3b31685a2807ce63da036694f421622b5fd1a0e37521ac67b5cc479a6752e736fcea72ce4f200f93aa0201917035afd276d66051a3d233788b9</hash>
        <hash alg="SHA-384">5a0ce25847c33f11248098acce599bf1337f9f9cd7c7649a5ef83b2f1f435ff54508b56a2eacbd8046a7c5ee49909eb3</hash>
        <hash alg="SHA3-384">c3f169ce7b053da40ef79f63c26ec3f3bfe78ef83c5b0e97e6fe82a86aa9de31aca41d6513bad76700be301f2c5b25ad</hash>
        <hash alg="SHA3-256">704c0b6a59f4e2a9a619e972a98da97c6398ab45b40de02a3b73ca23c2c8779b</hash>
        <hash alg="SHA3-512">429cde84df352c1329f17d1bd95662d979613af00f557a846734d0783bd5d77ee647a91dfeb9a349a9ed70ffa9ecdd3dc5866ef3fe8cd3cfc514331dac880df3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.hateoas/spring-hateoas@1.3.7?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.spring.io</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-hateoas</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.data/spring-data-commons@2.5.10?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.data</group>
      <name>spring-data-commons</name>
      <version>2.5.10</version>
      <description>Global parent pom.xml to be used by Spring Data modules</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8dfc3911f9944ed46f6fda1a42b9a4a6</hash>
        <hash alg="SHA-1">55040a7d9413d0e9371aca04473f2f362edd3507</hash>
        <hash alg="SHA-256">49920a4203c067f09b0b43bbebc1b95086f44e3dd08fd0795bac13d6173e768f</hash>
        <hash alg="SHA-512">970167f35e1e51c0e5ad6eb0fe6936daf56febca5d8ce179aaa65ccd86cc0e2308add061b081f38b75b138c0f1cdd0f4299783003cec08163dab60fd83326db4</hash>
        <hash alg="SHA-384">aa0c1dd43ad75c719d385d179f1cff61fded8039d1179a9daa23f709091f03a81e03b8d07ed45ee3ff3280ebe9e91a6c</hash>
        <hash alg="SHA3-384">602f7100bff4154f6a49cdf544a365c248dd24e7d9d2de04cc6fb9547417f4eab83a309e2189a880e0172f45f5bb503b</hash>
        <hash alg="SHA3-256">cb4d405324a7f50b1d4d35cb368f9724e21b2b8bb538d5bebfab1b4005d895ea</hash>
        <hash alg="SHA3-512">3bf0d0b8335902ea78255ebd650d483c8c950d363f354c53a0ac991512bbf4d6b3818d97e636cc2c9eda192abcffa4bb6a7dec03fa7545b1afa216713b5f2bb6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.data/spring-data-commons@2.5.10?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.spring.io</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-data-build/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-data-build</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.plugin/spring-plugin-core@2.0.0.RELEASE?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.plugin</group>
      <name>spring-plugin-core</name>
      <version>2.0.0.RELEASE</version>
      <description>Core plugin infrastructure</description>
      <hashes>
        <hash alg="MD5">a89cd7b77db3ed7d0c9ea71ee9784e2e</hash>
        <hash alg="SHA-1">95fc8c13037630f4aba9c51141f535becec00fe6</hash>
        <hash alg="SHA-256">6e6d026d6b572495533692173a264c6959f48d5ef7f3d6faf4555a577d4a38d2</hash>
        <hash alg="SHA-512">2ea2c22caf7c89a7878a156c7adfb1154c9f194a4cc2d77aabd5f003d480a5705b86535fc9a5afcf863985437c820356e41b8f2f5e51f3d869ce63c2dcf67c60</hash>
        <hash alg="SHA-384">b3fb4671c3cb504a0ad0213e55d1adeada8df67d47eb51f7fa2826ba6204aa661a3bfc742d5080c840b90c08eaaaf9d1</hash>
        <hash alg="SHA3-384">cb2555d329d3a2e5904bc50021eee7fce678e4d769144fd19fcd3b1e135dc4a330d048be91e01133233c55edbc1c1434</hash>
        <hash alg="SHA3-256">17e03ea8f3cc139df934330987e13e91c3b1fe455aac7f6c08a8f80d74fda9a1</hash>
        <hash alg="SHA3-512">c56f48c8ec1cf9a4c0bd0dd6ee21f2f3070b8f75fdc949622e5e125975cc1221aca1fd4b8ed2ba96bc3cfeca397b61e286ca417c21144580436d932522fb2aa0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.plugin/spring-plugin-core@2.0.0.RELEASE?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.spring.io</url></reference><reference type="build-system"><url>https://build.springsource.org/browse/PLUGIN-MASTER</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-plugin/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-plugin</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.atteo/evo-inflector@1.2.2?type=jar">
      <publisher>Atteo</publisher>
      <group>org.atteo</group>
      <name>evo-inflector</name>
      <version>1.2.2</version>
      <description>Evo Inflector implements English pluralization algorithm.</description>
      <hashes>
        <hash alg="MD5">da63c9ef600b74c760d81a09f9053d04</hash>
        <hash alg="SHA-1">2551aad98d65ac5464d81fe05f0e1516cfe471c9</hash>
        <hash alg="SHA-256">c485c110870c597ba401dda2c7c5819a3b2e15ee064f539323138302bd591d48</hash>
        <hash alg="SHA-512">2d60a399908887d50b2abfe69508338001807ea40938891a74ce4e44c68a6af151002e2b2543579ec2c4c1f860c144bd05183775f919a68a35d80a22b5cd6cf4</hash>
        <hash alg="SHA-384">42425c3dc1f2b8a30ed3e660993ec0d8de5275c1e875966a968646e8fcc2fdb80d4eef8f5b064641ae228d98531996db</hash>
        <hash alg="SHA3-384">1b028b1bded8e5ade8eddd9cde64874f4698dce2257391a492b83c1f1a4438a255807b5753541f28262af3aa97b6d54c</hash>
        <hash alg="SHA3-256">6217788f54285a7713c127d8a7ceb13c7b5a4627fb0841d346c36b6b79b39906</hash>
        <hash alg="SHA3-512">323716ba7bfb95bd7b6f35ea449429a649d08807bb87b1dafbb50dae8763a900e481d6d219c55d43914646f1f2b7e0351b266a976bbcb22ab41d840f705c09d5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.atteo/evo-inflector@1.2.2?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/atteo/evo-inflector</url></reference><reference type="website"><url>http://www.atteo.com</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.5.12?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-starter-actuator</name>
      <version>2.5.12</version>
      <description>Starter for using Spring Boot's Actuator which provides production ready features to help you monitor and manage your application</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">e7e25761ec93f114d7fc3d734eafb8b7</hash>
        <hash alg="SHA-1">4d0366d721e2394649a461e7ee151f221c9eb684</hash>
        <hash alg="SHA-256">4c3473b2ef7c599557c2e2e82d930275fd0e3073699a2701f51d10c9307f1e34</hash>
        <hash alg="SHA-512">96a51713f10b234fa6f40dd45cb3b0cf9daaf1447f770ad3676e3dcb1ed997bfce3b587a113c4b9d62dcdc67f8cfeebf347e0aeeefd3a26ceda54e58caafe143</hash>
        <hash alg="SHA-384">82ea4cbddfb8daeaa46ee1f0bcb2142c9d608197ef2a25352c7dd4d0d61de98cb5354463a1f5a5b5f4476245d7d5b228</hash>
        <hash alg="SHA3-384">b093e2b49e59d65cf7ee3ed23e664333754aff1cb443372671b2f89e9364f622faa7f8b9e1cc0fc32068f9f679ebc938</hash>
        <hash alg="SHA3-256">642d530a44df80aab87d6901056c41bae35fdf40d2cb459de8c67e2741b06a3c</hash>
        <hash alg="SHA3-512">78a2d787873001243d4f5c8999bda3002d3d9bb752a9358f0d882ce00e82b23768e82bbf802bda071724d86942795e570254d8f2e1adb51432e5431c0c18b6f9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.5.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-boot/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.5.12?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-actuator-autoconfigure</name>
      <version>2.5.12</version>
      <description>Spring Boot Actuator AutoConfigure</description>
      <hashes>
        <hash alg="MD5">92cf14234178ff3b42f1c86b06df558f</hash>
        <hash alg="SHA-1">2e5435c7b0849b298b53165ef952fbfc6a742cb4</hash>
        <hash alg="SHA-256">b680605023f09c07accc62e9b0be9d007d25acd2d5c7b2ddb7d39ce681b51a82</hash>
        <hash alg="SHA-512">a44236b928eb96676d0d42daad3041df2d4e0640cb942acd6699bf1c3213da1186aa9f3b44b747516acd16c06b31db54e6b9cbcee04d150b9745c104329c17b4</hash>
        <hash alg="SHA-384">ea4d45ebb3b0d052172c58829d8bea97f89362e60c5af97c0dd57b4f37bbac7ff9749d7c501935bc0cc31958206aa9b4</hash>
        <hash alg="SHA3-384">ed57af5166b202024b8a1e5d2ab3c7d016dde357164d4b86c077708298916009566f41283c689ce042e10810f383409c</hash>
        <hash alg="SHA3-256">a9faad8e8d7ee01613d5bd90b00305924b4a0ff0b7bbd5041c2c54e919611dec</hash>
        <hash alg="SHA3-512">989f8cc44b6e3c1a1180b5802bbb311ecf1fc895df10e74017d9d6b593402b42512141f09969ab22b392e339ee8a8be834af5d72ba5594de33ba66aa78dd5e8d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.5.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-boot/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-actuator@2.5.12?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-actuator</name>
      <version>2.5.12</version>
      <description>Spring Boot Actuator</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">95697c3e7acbca1ac2b6fb4488373b08</hash>
        <hash alg="SHA-1">bbe668b28b7b5736e14bec44030065c1f5fabe72</hash>
        <hash alg="SHA-256">5cb3307a32f7506ce79cbd0e29b6d4da232ee7d766a8e3d3004084fbbf29f316</hash>
        <hash alg="SHA-512">72d9b30b78c80c2db2a4189552d2643f2c6dd6b26a5e11406e13d28fa53ff8ccc866e7eeecd44d7bbb2dd8f9ae8e3b58fe21ebca9085d054a90cdda105d1c65d</hash>
        <hash alg="SHA-384">6486cacb027c8dc1b1ac169725b68bc66485faa09c8f22bea6941f51e481c670b9f3798ee72a9f84b076b78839e2cb16</hash>
        <hash alg="SHA3-384">3ff74d18c384b0729388283c883d11384e02e54b8f7832f71979093c44971bfc135ed3cfde0360c9cf8a4c44bce4a657</hash>
        <hash alg="SHA3-256">57ce5aa4977732b050ae40890c7df080538d6b0595a334294b3da68bf90230c9</hash>
        <hash alg="SHA3-512">35ab61fe5de6b5e90dc3055b49c52c69567ab8bedff64e575f0b80f1396ba507bcd48f789797921df50f3c2ae7774eccf62f2a96a22d4876d99ec40b1428fbd9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-actuator@2.5.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-boot/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.micrometer/micrometer-core@1.7.10?type=jar">
      <group>io.micrometer</group>
      <name>micrometer-core</name>
      <version>1.7.10</version>
      <description>Core module of Micrometer containing instrumentation API and implementation</description>
      <hashes>
        <hash alg="MD5">0d3375d39802b9bb98cd1a93af366f3c</hash>
        <hash alg="SHA-1">11e2e84a7bfc13ca5d6f9a9b72d4af831df4cc64</hash>
        <hash alg="SHA-256">2035a19821953bc76839c576ebc6e0942385c543e6d41bafc6649d4c0364e1be</hash>
        <hash alg="SHA-512">ceebcc4fe79dd1d87de509526577fd0bca948d767892c42264cd7f899dd53187bb7e455c55b12985500c5cff780ded8fbe17f98e428920648383333a0011f6af</hash>
        <hash alg="SHA-384">07e8a54e4ffc93de9e614ba55be917100fc3aafeff44b97262b04803bad2197d0908a91824e4a45fa05e6b87081673b4</hash>
        <hash alg="SHA3-384">02441f5805573d1c15f86ce2b61342cb6dcee01c81583487cb857cfc650688f086d34e62290c97db54e4625a52f40fbd</hash>
        <hash alg="SHA3-256">838189ab7326d07eeda776ea7b9deacde66487a0de6f458828a14c855d41b397</hash>
        <hash alg="SHA3-512">33086f6acf3c615e621f2a0677e0da531ee7355df46b8a318808f8fcfc8f87fafbb9840fef5f620751d2e7ee52bb5bc77d6124299b1c3bf3c55b6f1587d61760</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.micrometer/micrometer-core@1.7.10?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar">
      <group>org.hdrhistogram</group>
      <name>HdrHistogram</name>
      <version>2.1.12</version>
      <description>HdrHistogram supports the recording and analyzing sampled data value
        counts across a configurable integer value range with configurable value
        precision within the range. Value precision is expressed as the number of
        significant digits in the value recording, and provides control over value
        quantization behavior across the value range and the subsequent value
        resolution at any given level.</description>
      <hashes>
        <hash alg="MD5">4b1acf3448b750cb485da7e37384fcd8</hash>
        <hash alg="SHA-1">6eb7552156e0d517ae80cc2247be1427c8d90452</hash>
        <hash alg="SHA-256">9b47fbae444feaac4b7e04f0ea294569e4bc282bc69d8c2ce2ac3f23577281e2</hash>
        <hash alg="SHA-512">b03b7270eb7962c88324858f94313adb3a53876f1e11568a78a5b7e00a9419e4d7ab8774747427bff6974b971b6dfc47a127fca11cb30eaf7d83b716e09b1a0d</hash>
        <hash alg="SHA-384">06977d680dafd803d32441994474e598384a584411a67c95ab4a64698c9e4cbd613e0119b54685cea275b507a0a6f362</hash>
        <hash alg="SHA3-384">b5ccb4d39bf7cc8ccc33f0f8fcbab0a63c99a94feda840b5d80fc3ae061127f1475cfb869b060933783a1f2eafb103a1</hash>
        <hash alg="SHA3-256">ef2113f27862af1d24d90c2028fc566902720248468d3c0f2f1807cc86918882</hash>
        <hash alg="SHA3-512">4fca2f75bdfd3f2ac40dc227ae2ef0272142802b1546d4f5edf9155eaeed84eff07b0c3a978291a1df096ec94724b0defb045365e6a51acfdd5da68d72c5a8eb</hash>
      </hashes>
      <licenses>
        <license>
          <id>CC0-1.0</id>
        </license>
        <license>
          <id>BSD-2-Clause</id>
          <url>https://opensource.org/licenses/BSD-2-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/HdrHistogram/HdrHistogram/issues</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar">
      <group>org.latencyutils</group>
      <name>LatencyUtils</name>
      <version>2.0.3</version>
      <description>LatencyUtils is a package that provides latency recording and reporting utilities.</description>
      <hashes>
        <hash alg="MD5">2ad12e1ef7614cecfb0483fa9ac6da73</hash>
        <hash alg="SHA-1">769c0b82cb2421c8256300e907298a9410a2a3d3</hash>
        <hash alg="SHA-256">a32a9ffa06b2f4e01c5360f8f9df7bc5d9454a5d373cd8f361347fa5a57165ec</hash>
        <hash alg="SHA-512">bb81a42498c65389366205f4e07cee336920e2f05cc0daae213f2784b1d0ce9a908b038daec20478f23eb00b2bf704f96c5b00f63c99615193ab2a3cc4a9f890</hash>
        <hash alg="SHA-384">16ca4640dc9d848e6c6d15441897e1b5a9f27f34207b0bb456dd54d8f267b73b348092e548e78634144de44ba3515205</hash>
        <hash alg="SHA3-384">406c2b5c6f64b0c090568e479b5e6136a04a4e77f8eea65d32b4e2b01deebcdf6a0a851240cdb740c25b5a5e61e6c179</hash>
        <hash alg="SHA3-256">50ae828358301033542fd7c412e86ee318d5451f89a182e2a679aaf18099d26d</hash>
        <hash alg="SHA3-512">456c337b9fb385579aae707409ed6a04d08e5fc87b1a46733dca617c22c625bf253dc4747e0cdbf5e7d8b48102d2938cb482b6b688a79aab645a7459c592258f</hash>
      </hashes>
      <licenses>
        <license>
          <id>CC0-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/LatencyUtils/LatencyUtils/issues</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpcore</name>
      <version>4.4.15</version>
      <description>Apache HttpComponents Core (blocking I/O)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">be7c67929df007fcac6c8eff5322d3a0</hash>
        <hash alg="SHA-1">7f2e0c573eaa7a74bac2e89b359e1f73d92a0a1d</hash>
        <hash alg="SHA-256">3cbaed088c499a10f96dde58f39dc0e7985171abd88138ca1655a872011bb142</hash>
        <hash alg="SHA-512">f0605e4d521c6e9c7e645905687c519239fa9e2128403a515e6118b0406b503b0865a8ead197f8532186b0c9aaa4189ff5bb301d5b0cf84bd54fa2258d17551d</hash>
        <hash alg="SHA-384">fffa9cd7434271990e20230ef9c3754f4b198958437573cdec2d4e7063147a765cb0cdf0b79a9688e81ff85dc704c25b</hash>
        <hash alg="SHA3-384">0b72d65d0c3a7d74d1baf1a2fc4e9510e64bd34f7b23f52d436621d2043d81b5395c9b05803e7471537964ac42e2fe94</hash>
        <hash alg="SHA3-256">3290e3547fd3ea688f30ba6a554c779c784bb209642ec4d48b284ca8374191b3</hash>
        <hash alg="SHA3-512">230b7196270183aaaf5e89e8d7598a3c65ac6bbede816e222e6d457fe5fca50fbe8ca2cb30ecf161bf4ddf34a08ee3a95d2f559e0aa513e9e730eeb5624b296b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.15?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.apache.org/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCORE</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.15</version>
      <description>The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <hashes>
        <hash alg="MD5">303baf002ce6d382198090aedd9d79a2</hash>
        <hash alg="SHA-1">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>
        <hash alg="SHA-256">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>
        <hash alg="SHA-512">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>
        <hash alg="SHA-384">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>
        <hash alg="SHA3-384">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>
        <hash alg="SHA3-256">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>
        <hash alg="SHA3-512">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CODEC</url></reference><reference type="vcs"><url>https://github.com/apache/commons-codec</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.7?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.7</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">87709c85b69a685ddba69c65fe6dd6f9</hash>
        <hash alg="SHA-1">3f2bd4ba11c4162733c13cc90ca7c7ea09967102</hash>
        <hash alg="SHA-256">4547858fff38bbf15262d520685b184a3dce96897bc1844871f055b96e8f6e95</hash>
        <hash alg="SHA-512">bc2dd1790a26cf48a1353226d55c8b5334aa65c3f2bf2b19efba4d007348888f2bebe20f76eba9e3685cf1d109b48dad7a597d5278078be4e9deb0d75c12bdd7</hash>
        <hash alg="SHA-384">0f2aefbd798c73410274bb9c0590ebf94b116ab7e37a31e6a48a1f2f4451d2eb2a6390e1098090287d45f782d220bc80</hash>
        <hash alg="SHA3-384">f29b55f6936dc645678069812e9be3ad1b588348e488326fad22a5102553c184183be7319e83fb76cf2af64615a43216</hash>
        <hash alg="SHA3-256">3fd90c753bdcfc7144da3e91c07a71822f7ffc3e05afdfa927d19e09e220a615</hash>
        <hash alg="SHA3-512">bf72edb17a5711284de88c763d49d4fcc1f2990eb8fac5143948f063e0fe5fbe78a1da45cdd234876778daf5d1c9cce992e8c1ab5bd64bcda08a3d2ad7bbd391</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.7?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="website"><url>https://www.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springdoc/springdoc-openapi-ui@1.2.32?type=jar">
      <group>org.springdoc</group>
      <name>springdoc-openapi-ui</name>
      <version>1.2.32</version>
      <description>Spring openapi documentation generator</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">b4655bb295c09862610469ccf42c0066</hash>
        <hash alg="SHA-1">473ccb692becebd121577fdff0b61e4c9914b3eb</hash>
        <hash alg="SHA-256">91792e7e30d22827ae304090f0a94fc76b4f7671d36395d8a3461dc18c55b917</hash>
        <hash alg="SHA-512">b7e16abefc9221f1f7de0e23249217dfadaf4799e1860e86185ab3c09c481563dd9925b8f74fe381c36f33d819eb044fd2b403a53e8c9f003dfedceffe9218c2</hash>
        <hash alg="SHA-384">36bfcbc134b73bf6a4eed6243fbd7538b075fc860b2606e510432ebf5485103cd9d2d120b12144d7a1983bc5339dac44</hash>
        <hash alg="SHA3-384">245472404c3e6e051e855cf022cd812683ec3425006a1e01abd365b393ef1abbc4952da05fbe4ff0c125f36fa7488032</hash>
        <hash alg="SHA3-256">b5588fcca0a1dd3ff40b7e90cd92c36f5b3fb3746453c385d0048698c50684da</hash>
        <hash alg="SHA3-512">9088b0fe507ac2dbcee63b3dfe5f1dbd270f41e8e355bb2dd345770c73290760d9384fdad1fe4a209dfcfb3765a58199e5cc46f9154d3ba4e9f1f2c3ed85b884</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springdoc/springdoc-openapi-ui@1.2.32?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springdoc/springdoc-openapi-webmvc-core@1.2.32?type=jar">
      <group>org.springdoc</group>
      <name>springdoc-openapi-webmvc-core</name>
      <version>1.2.32</version>
      <description>Spring openapi documentation generator</description>
      <hashes>
        <hash alg="MD5">93a0a50f76506bfa2fe4f11d5e5026e3</hash>
        <hash alg="SHA-1">caad2a403f73fb61eb2f98c592f8785f76fd827a</hash>
        <hash alg="SHA-256">973b13759b0ae116f0cfd9b2d9ac0b1171799d49509d80cf85658375db22c077</hash>
        <hash alg="SHA-512">880fd05cca34306e227bd77e75b3ccb607d7b24a4ac6524e9df0935d80dc2c928d30f26d9d2aeac0f69ffaf0580afb87afd2c52d9a21cc70a664caef20405d8d</hash>
        <hash alg="SHA-384">9051728462fc563957f960df51885ec9f5309a5f7864e860b70db0552b9244559c5b6e018abb75273ee47d2ebcbb31c7</hash>
        <hash alg="SHA3-384">7a07cfdf966c2817c080868922fc1f4ebf4cac29436ce9df258e03643123f782e1251a5031e59ed511dda6d888d1c6a2</hash>
        <hash alg="SHA3-256">8b03f31ec1a66c039c5ef5993bbb082c020a6748c3e9a997002142d9bfe5bce5</hash>
        <hash alg="SHA3-512">3809bfd5493edae8e498513319e49b5cd31418913b2c54962f12a2ee61f0dce54b0980334bb3826b9a9ad32c437b5ecd1e46902018bf53a3ae2aa08de7181d3f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springdoc/springdoc-openapi-webmvc-core@1.2.32?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springdoc/springdoc-openapi-common@1.2.32?type=jar">
      <group>org.springdoc</group>
      <name>springdoc-openapi-common</name>
      <version>1.2.32</version>
      <description>Spring openapi documentation generator</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e2aacb4423b0c11d33bbe090a251420e</hash>
        <hash alg="SHA-1">089dac17e97c4e41fcd0227370f9a3213e99574d</hash>
        <hash alg="SHA-256">261e12fa645c9ea74f004745268a7d15957816815c91bf472c29051eb06c88fd</hash>
        <hash alg="SHA-512">c6882aa24c98109f0ca7afe8e5bb0e815d1583301ae2735c3897195bb273396651f72f4b2379a9345a3bfdc3a75acff2e3e10fde23f4edd4b3ec2e6d6a8864fc</hash>
        <hash alg="SHA-384">bcfaae974dc22a3e47dc14919398f643a656e39c7867ec918252caa8aaaeb4b0894bb56f3330c8bc7dd1ae68be4254f3</hash>
        <hash alg="SHA3-384">fc40868040dd7848b5ec132108a2fe7ae3a0a87673be8d74fea475513a071bb99020ba1519f9594083fe802c3fcd09ef</hash>
        <hash alg="SHA3-256">94ce24ac3861a0f65cab476216121e89ed74a5de3bcf4bb198432e1059543507</hash>
        <hash alg="SHA3-512">d7ee63d8f7e7f0ea0ef50099c8a0f8aca580512c8e5db7a05c89b1d7def9d8ffee4b035374b7434575cdd0e855323850a1bc5238772547910d4f4186d50f2f10</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springdoc/springdoc-openapi-common@1.2.32?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.swagger.core.v3/swagger-models@2.1.1?type=jar">
      <group>io.swagger.core.v3</group>
      <name>swagger-models</name>
      <version>2.1.1</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d837ea4186b7f7e35ea3c88d74512496</hash>
        <hash alg="SHA-1">9c18e2c834dee2b6c8ec2b67259fdaef2adba3c0</hash>
        <hash alg="SHA-256">fb190ca75763ed290f93f08c9079cc02d8621d2a352759880c00c6b53c669233</hash>
        <hash alg="SHA-512">0dc79b2bf65ab9982e82abe34d5155d39cbdebf2ccabc462b23aefedef0d175e8d0bc4b78dc051381b4614d173368c927ec60b10cc52f0d2b9a134d7629f4a0c</hash>
        <hash alg="SHA-384">d31008319d2a68664511fe7f35bcf2382d313863be5049758b80a19e2940098ffc97f00e9c2473bd7e3549cbabc3b6bf</hash>
        <hash alg="SHA3-384">cc3c9abc2b8f16a0e77cf664d14ce46ce66f2e5278f70b5dedced8153a66e26fb61473bbcb488d36b4f7a3ae5166b172</hash>
        <hash alg="SHA3-256">49487515a3526ab396bcf780bf4269c80299954ac0e913b1cbcf4c478d2fbe99</hash>
        <hash alg="SHA3-512">b26d7e5581f460b61b1d622c8e59de9beed6582e119723c3dfd197ae58d3f938b03cf69253c9a2709c5abc7f27e6a127e0b69ff9bf19c131c4d680a2f4ad98a0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.swagger.core.v3/swagger-models@2.1.1?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/swagger-api/swagger-core/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/swagger-swaggersocket</url></reference><reference type="vcs"><url>https://github.com/swagger-api/swagger-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.swagger.core.v3/swagger-annotations@2.1.1?type=jar">
      <group>io.swagger.core.v3</group>
      <name>swagger-annotations</name>
      <version>2.1.1</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">474583342ea1968dc0d624c9d37c1aa5</hash>
        <hash alg="SHA-1">4d645f0d4a1ec1f13bef19ad1b10e72b30fe9307</hash>
        <hash alg="SHA-256">a138af458693ef5edd32869260e49becaf02a370619e031f817e215275cc48a1</hash>
        <hash alg="SHA-512">18d8fce936b509c8485e3a455463205ec39e454389945a034fa1a93c4d34d378dca1ee29cbed9547fc485f41c13aeaffd9036d4b93acedb92a8ee278cea632af</hash>
        <hash alg="SHA-384">1fad522fab00349864e4b0fcad9b6c6c912c947bd1d3fab9de42e7af600ed75fb086ed5afa19ad2d0ce7b0e68230cd37</hash>
        <hash alg="SHA3-384">11518b48dab9f9625a7a08db13cd6b2f9b31304a39ba05117784c58e5ba887d49886d1776cca32ed1096008d109e133f</hash>
        <hash alg="SHA3-256">42d9709d36119138b099b4f598304d3db3b796d1f4e9e8310926743ca856b68e</hash>
        <hash alg="SHA3-512">3ea7780a77c5241e796b3be1541be11702b911ed0ea08fe3fe1c985bbd6f5a44089fffa9b54f6c64ee98b7ec39792931f1ec4637b2b8fdf1ad90810f688bc3ef</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.swagger.core.v3/swagger-annotations@2.1.1?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/swagger-api/swagger-core/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/swagger-swaggersocket</url></reference><reference type="vcs"><url>https://github.com/swagger-api/swagger-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.swagger.core.v3/swagger-integration@2.1.1?type=jar">
      <group>io.swagger.core.v3</group>
      <name>swagger-integration</name>
      <version>2.1.1</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <hashes>
        <hash alg="MD5">7ce4d1435e77c69a7d6e19f4a0c0e9c0</hash>
        <hash alg="SHA-1">79454bd29a5d133d7cc15f9062488399fbe96c06</hash>
        <hash alg="SHA-256">4853b2bb894570d0fbb104a98b3b20e7ae0db195aa52836eaebc5c0e94ed79d4</hash>
        <hash alg="SHA-512">5defb27fdd829b7dc434b84a3ed2bb7bc37184f5c7552ab16b770edef78c889ef96feea050378375789ecfb279fa4f4fc73ff66fd3d63619fe1d92eb869e9bfb</hash>
        <hash alg="SHA-384">d55bb7f586fd8132b45cd81cba7e03117f346913c78ca604f4abc2c3bd60667d293719581179d064d109d14196bc1a62</hash>
        <hash alg="SHA3-384">f7bb03d671dd75dd3b9d8899eec8f1856215ae39510438b90bb0471cc33b9f66fc1b526a1a05abd5abbcbe6c61dd7bb9</hash>
        <hash alg="SHA3-256">50c2d565e3376d4a7008a3484726fa3cdb07a29e9d677be91fab926d7feec0b5</hash>
        <hash alg="SHA3-512">8d0a7bd1f8aca92c890d19855e647ac25b3e299647d0620fd062657821e2283ae4e9f66de9b382e0302f67b3a2fed69ee44730ef3d1b99fdccbd6bb688691b57</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.swagger.core.v3/swagger-integration@2.1.1?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/swagger-api/swagger-core/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/swagger-swaggersocket</url></reference><reference type="vcs"><url>https://github.com/swagger-api/swagger-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.swagger.core.v3/swagger-core@2.1.1?type=jar">
      <group>io.swagger.core.v3</group>
      <name>swagger-core</name>
      <version>2.1.1</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <hashes>
        <hash alg="MD5">2a6af5f5deb819f3688d980f38d35522</hash>
        <hash alg="SHA-1">7c8d69356c3521734f0225ce6ea15d6b26b1eecc</hash>
        <hash alg="SHA-256">c322a84c5fe8ca4e762f61bd50e283be6dca7065dd1f07b0199bcf41f027e48f</hash>
        <hash alg="SHA-512">114f91074d0ad1f7ce261b34ddd4bdedd58b1ab6ddbdfb4ea6a7c3a365f2582ba782fe3fa1d4d95c5dca4c180c2e8d634aba6654e0fc646a616bfd596248b695</hash>
        <hash alg="SHA-384">a2d1877b9003e791731ca661f80f8e7e6674fc44ae5159240a856a73b8a65adcd3e4bc011f0a01b009a50b6f4b3e0c2f</hash>
        <hash alg="SHA3-384">594986b3dd06c9bb3cb97161ade93556b619dd29aa82d736df2193cafb7841e948e17491ac11a2d2314ba4518304b1c7</hash>
        <hash alg="SHA3-256">98a0a97c2afc231980956395efbd2e5dbfae8c0ef148166840bcc380974bf979</hash>
        <hash alg="SHA3-512">a4918d0c73f8c37220d01e964f9df64d7174e321963b2a635f1cbd9c84e9dbe5f91e91fbde9da8b972d1f4481bddb91c93ac1c05ef3daddda616a65f31ec5499</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.swagger.core.v3/swagger-core@2.1.1?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/swagger-api/swagger-core/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/swagger-swaggersocket</url></reference><reference type="vcs"><url>https://github.com/swagger-api/swagger-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.12.6?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.dataformat</group>
      <name>jackson-dataformat-yaml</name>
      <version>2.12.6</version>
      <description>Support for reading and writing YAML-encoded data via Jackson abstractions.</description>
      <hashes>
        <hash alg="MD5">998d69617a7f33297233736002c20b82</hash>
        <hash alg="SHA-1">cfba448bc4e92b8656968756a9c4af1ad8e502e4</hash>
        <hash alg="SHA-256">f34baee89a7040b83f5806ef7bd83e7160b0dbaeaf141ba8423004cd9c1864c2</hash>
        <hash alg="SHA-512">50e683bb25f4837b0bd080417d9c391ee1962920991ff5f2ce381e9e02dd03b724c66806e6560762750af3fab1ae275e165cde0906f0eb3ddc947faab653b459</hash>
        <hash alg="SHA-384">fa601fb487682023ee5836b4ecffce8b8d6f1f15e6196bf4b09cfe463fec361ffb01ae3340b3c983f1d870218c2f9713</hash>
        <hash alg="SHA3-384">5df8d945a4f80d586b2440103ae4f75dd8d3b03f7140749cb8e85e38bc5fd6866e290dd30469815aedc131b4cf9c7bdb</hash>
        <hash alg="SHA3-256">53d73d14b4c6397655d788b7b0f0b17cae42b06d1d94ad5566aa12dcfa3913ac</hash>
        <hash alg="SHA3-512">5d5976f2c8966955e140568f478ff5a383d33279cad8f40728eb92fa49f8962932c0e9daa7295c44a9c472617f5f5cb406e655f81acfd4b9d70f606e6dc5e5b0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.12.6?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-dataformats-text/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-dataformats-text</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.github.classgraph/classgraph@4.8.44?type=jar">
      <group>io.github.classgraph</group>
      <name>classgraph</name>
      <version>4.8.44</version>
      <description>The uber-fast, ultra-lightweight classpath and module scanner for JVM languages.</description>
      <hashes>
        <hash alg="MD5">bfa81305f4fc016325b5ce8ab3f15bf3</hash>
        <hash alg="SHA-1">52f4c19484041e8857f444985b7b8f8a9783da56</hash>
        <hash alg="SHA-256">c4b213084ca1f4bf88484a5fe3d53cc46b9b6c17ebec74be30abdfd4f1c43790</hash>
        <hash alg="SHA-512">b5b656d540521f1781f5622c0261a2f88c105a837d1f1eafb1263e61f655d9dca4f42c5e8b6a03eb97187eedd86ebbaa0ca4298614de7aabab14c69f20fbb1e0</hash>
        <hash alg="SHA-384">23c35ab23351a455bb48469c471e64593d69f989bcab24b69cc2a7023eb979b2c1eb3fcbb963cb117ff9e512c8c17676</hash>
        <hash alg="SHA3-384">02c56710e007529c810ee913e14d154bbe145f320ef5ce147e469abe7ae9d441e5b494189ebf40f768507cf28591b797</hash>
        <hash alg="SHA3-256">c5b3940dd6d2b162b5e59beb1afcf81e7d30354f17d47a0e5dc2b44439232b27</hash>
        <hash alg="SHA3-512">4058ba338463ac0d59acfd44f1698c2adbb08f2477c429394f2a07fed78276d5ed6afd379f049d259963c3ff320958c9cf2035a3f49177a101a3ab46484ed655</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.github.classgraph/classgraph@4.8.44?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/classgraph/classgraph/issues</url></reference><reference type="vcs"><url>https://github.com/classgraph/classgraph</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.webjars/swagger-ui@3.25.0?type=jar">
      <group>org.webjars</group>
      <name>swagger-ui</name>
      <version>3.25.0</version>
      <description>WebJar for Swagger UI</description>
      <hashes>
        <hash alg="MD5">9dad163ba9533c3a7db4f5a867133a03</hash>
        <hash alg="SHA-1">7b41c520c163d4308f19e5f879e1abaf0a3f03f9</hash>
        <hash alg="SHA-256">e06d0dd86936192c3e0bbc0d461d9adbc75a02b07b2cf9fb8edf5677525aaf7b</hash>
        <hash alg="SHA-512">809a8db8c845ae0e16a27c8b3cca3913c110579b63994097ffdaee167268467adbdeb16b6d478cc2240dcba9e335f35a171f1e12a32693559be65993d1e9588d</hash>
        <hash alg="SHA-384">35a4658437557858d9a1199186f1ac3488dd4f4352c96e4817e04ce487dc57b9a7b963b0035751d5c055242dde0c8459</hash>
        <hash alg="SHA3-384">d490467a915c0f519e231e2963381fc5e33f6a28ae4cc3e6f7f0f72cc46b8d972f41e8858d9aedb3d214c74c4c6cf2cd</hash>
        <hash alg="SHA3-256">6679d9361800c32736a4b9eb6f970dca749a6861189f878f6fb3df8cac960af2</hash>
        <hash alg="SHA3-512">09a79aaa33fcd477bde7ac80ba0a3f8ec28c9b03570f7e73ebf8041c2610212918bb5d8e018b90f4118b515269e6b91d5ae2dd84bff8c144fdfac8c6d7408ea9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.webjars/swagger-ui@3.25.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://github.com/webjars/swagger-ui</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.webjars/webjars-locator@0.38?type=jar">
      <group>org.webjars</group>
      <name>webjars-locator</name>
      <version>0.38</version>
      <description>WebJar Locator</description>
      <hashes>
        <hash alg="MD5">ccb0179a7a0db487bdcc811a86faa421</hash>
        <hash alg="SHA-1">d27083737381eadbd11b3f94dbd207149b1a7dd3</hash>
        <hash alg="SHA-256">aa62e73553cd87d9894c13bd8010c8c078af03c68723bbda51cddc38eb72f3ff</hash>
        <hash alg="SHA-512">6f5fccc5286be1bdc815a0aaee690285737168a749c8ee1f7cd8e13bf2a07f66427fbf7b207fd5e994f075afc135b492a40785f33f784c686ec3198b07945646</hash>
        <hash alg="SHA-384">2e0a9f0f64a88fefe036b6e083fb95b2f896584986d1ef676a1179f7990b71f3fe46f0fc21512d98f6e7d4a71401cb2f</hash>
        <hash alg="SHA3-384">2854d3f6974d17c995b60e0797963ff34594cc0d0455e86e99299780845803110ebfc80eb9103c9e498705aae4a9744d</hash>
        <hash alg="SHA3-256">beae1ac09418fcf4ff1fe2a592bf8910ae1feeb90929a263fbbe80adfb170318</hash>
        <hash alg="SHA3-512">c4c10954f7690d3119413857a678a93f878fb2ab615ae58b611928c17189c355fbdd52e40309f9c675a24f6dd141a78761674d3cecba27eafd1641898ce3d99d</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.webjars/webjars-locator@0.38?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://github.com/webjars/webjars-locator</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.webjars/webjars-locator-core@0.46?type=jar">
      <group>org.webjars</group>
      <name>webjars-locator-core</name>
      <version>0.46</version>
      <description>WebJar Locator Core functionality</description>
      <hashes>
        <hash alg="MD5">467243ddcdf07d23e2bd040ae096d61f</hash>
        <hash alg="SHA-1">2c207eae0bf475d6e2444ece594c199f1f418322</hash>
        <hash alg="SHA-256">2295de3f8b84fd2f55aca565a97213e826f8bbad1ca8b16a8c75aa98f7a20110</hash>
        <hash alg="SHA-512">f30fb89449c3f139b5c3a70ff0e40feb9f2e3229b1ef36feedf6d66283ec29202ffc14903542cc304eafdb61ce4ba1d7c598169150dd086faedd9cb61135e9a2</hash>
        <hash alg="SHA-384">ab145fb651a77281af894078fb8cb09aef9c1b6e0a04aed8e8669e92832b7e64d65f01dbc3ec7810db4d47b04fc83599</hash>
        <hash alg="SHA3-384">fb3c5544c31cbe9d039a291514b739b8506b6bdf796570dd682b46f2cc1aac6e6e155d76ac640ca8892edf9c8380f8da</hash>
        <hash alg="SHA3-256">f43e85bf22464a097dc0e94792833225fe71f126c66b63f87b6d468bd7010220</hash>
        <hash alg="SHA3-512">516bfd53431bf5e4117fe347ccd0846204ae3a60dfae14c8e898f8e0a2d50b126e0b523e713cdd879a43140439238780a9484fc2c3019b2715efb772fe6b2512</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.webjars/webjars-locator-core@0.46?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://github.com/webjars/webjars-locator-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.6?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.12.6</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <hashes>
        <hash alg="MD5">3976126e023f2969b4267963fe841f43</hash>
        <hash alg="SHA-1">5bf206c0b5982cfcd868b3d9349dc5190db8bab5</hash>
        <hash alg="SHA-256">0026cff293bdba389fbbbc67a20fdd5f73e091554ab46671efa654c25c807ee6</hash>
        <hash alg="SHA-512">faf2dcac732b824ed1728011363ec9c2345ab62a6e38f623e623ae0df068afb241bb24d2dcbf625d2184e07262fe1651796706f4958362daeee28dd8e93ca4bd</hash>
        <hash alg="SHA-384">febced79e3d0c7b130c065602dfa537e08ee288ef9fb197180e13087dc4efb2326672ffc3680c8cf8acaa0507240d7d7</hash>
        <hash alg="SHA3-384">f8da6d69b3285b773d959f5f12ffc360e41f16092411fbc206251fba0de3deb8463c415179e3d6f8dd59cb4841af1e9c</hash>
        <hash alg="SHA3-256">36900837f190f6aedf6d8ecd2384fe24d27c3ce73391db1d73839a55b9a53f5f</hash>
        <hash alg="SHA3-512">2b65bb589addd185ffad8ebc355e55d9e3835a6fbd07e8f16fa4b125baa3af1509ce92d7d76d4752e8f539f62488fd5299b99241ed50ab4b426244386ae80943</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.6?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://github.com/FasterXML/jackson-core</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.12.6.1</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">88088e2e9bbc93adb021ae8bf436e544</hash>
        <hash alg="SHA-1">df01cc0c2d4acb913d73d587274986a12e3dec8c</hash>
        <hash alg="SHA-256">eb60e494ba8c23e653da4db8e29af0342927fc7e1c60501bf99e93145738c696</hash>
        <hash alg="SHA-512">9fa25c2a2917a751a1d77ff5301627a1adf48fb8b9924acb47d176b142fe791e4b12b7a526327e93557d0052dc10ea210a87849f1d292ba4ec581357f1b21971</hash>
        <hash alg="SHA-384">48ec219d4a8692ce850d7eedaf7fadad2c1891887773d3b90767538a4174248c8b51ceb5360ba8fa3e69efa736c3abde</hash>
        <hash alg="SHA3-384">8ca6c47360018827f1593d66786ecea285851c502ac43f7f42e81eb4254d637df7d45f5e88318e386de3d6bece38fca3</hash>
        <hash alg="SHA3-256">40bdbd0d303793df14d3fa8c5d6266a208793e466c0fc7ba5b39d29c134dcf80</hash>
        <hash alg="SHA3-512">ff1a8f9259cb6ff708a5ccc2505815b7c6fefb8ca6995a33a821bbea6f8a6f253cd69d9651b087de9cd3b8345ec75f59760e064f5389e0976e09e73efee6faf9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://github.com/FasterXML/jackson-databind</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.6?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.12.6</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9c936122eb418ee985b195d183623618</hash>
        <hash alg="SHA-1">9487231edd6b0b1f14692c9cba9e0462809215d1</hash>
        <hash alg="SHA-256">ddf46e401a7d9ea3b481c263fa192285d13c50982a5882b22f806639b9645ee4</hash>
        <hash alg="SHA-512">a4faf2e4b6ff9af14a9d5916606257ec537d05dc5a84585ce3d26ea52a38e4cf13295351bdef05274dccdcc3e415e21686e50f9f5ac414754eefe66463e4a75a</hash>
        <hash alg="SHA-384">0f263e4f5f5a31a14c65203f5aa2f52bfd43220db4923367bd7b206b91f26ae998a5b56fcd7547d48ac760161501d3c2</hash>
        <hash alg="SHA3-384">ec6344be5cc3c21e7ab113959fec9a28bf96040c778a3daa2187079c8598cf748fec4a9895261d4511380bcda559fdda</hash>
        <hash alg="SHA3-256">38c2bbfdaf41c6c9fa90e690b383021998a9dd7be7ca881db12b8d09fee0c9ef</hash>
        <hash alg="SHA3-512">fa4394114b48c986a24064915050444c782d23dc64e8838af1ee02f087523093430fd3384e2bac4bb6bb3edc3dbc19022c36521405480a06de1ece06398526fe</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.6?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://github.com/FasterXML/jackson-annotations</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.jayway.jsonpath/json-path@2.5.0?type=jar">
      <group>com.jayway.jsonpath</group>
      <name>json-path</name>
      <version>2.5.0</version>
      <description>Java port of Stefan Goessner JsonPath.</description>
      <hashes>
        <hash alg="MD5">c16241d78783e2e2b93429afb4c783aa</hash>
        <hash alg="SHA-1">c35ef29095125b51638d19120f63e2b56eff20e9</hash>
        <hash alg="SHA-256">4ed3c4c2d4e477cb2a349c0ebb8c22f0584702221ddbaafd166fddcd2101029b</hash>
        <hash alg="SHA-512">11cdc35b8d72d452e0c89f5bf6a04b37996624d108e23aa3b489d54509391212e6172e775e5703b47416d971f125028d47f1eb87291847d70d430b5f9b81e34f</hash>
        <hash alg="SHA-384">e6d7889ed440d8ebe5d0153e01588526f774980b1f6a0af978b178871e900a1a32604b789c42d85bffb81b99794121cb</hash>
        <hash alg="SHA3-384">ae90c12be2e3c0a5c8cc4b3e92a89eadc3107fb1ffe68f59ad3d366052468c43afa742b6523051ffd53fa7a4c191bcd8</hash>
        <hash alg="SHA3-256">44d9217e1fb952afeb796aceb1f8c517befea6d2585f04799d2c1bdca7ea58bd</hash>
        <hash alg="SHA3-512">6f9b067daf7895e9a716af1c197b6e76f44c270bd029285ca8b224ed0a8406908a403757d0c33671528f98cf3d01c07de16d926fccb3e43eda3ea938532fdce8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.jayway.jsonpath/json-path@2.5.0?type=jar</purl>
      <externalReferences/>
    </component>
    <component type="library" bom-ref="pkg:maven/net.minidev/json-smart@2.4.8?type=jar">
      <publisher>Chemouni Uriel</publisher>
      <group>net.minidev</group>
      <name>json-smart</name>
      <version>2.4.8</version>
      <description>JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">20a8427206313ed3aa85cdc47f730415</hash>
        <hash alg="SHA-1">7c62f5f72ab05eb54d40e2abf0360a2fe9ea477f</hash>
        <hash alg="SHA-256">174a9ad578b56644e62b3965d8bf94ac3a76e707c6343b8abac9d3671438b4b2</hash>
        <hash alg="SHA-512">13f4609fe72df98c81f86d25616e5b0ce1426688aa5a9dd953733fa98a8deadb87b3e69a77741dc9d31dd4485265d3b9e4ec71d99346e4a7558f2500f3677714</hash>
        <hash alg="SHA-384">1426a97474b44c58d1f30c70afec9dd658207d89ce5067932bb4dbe2ddb31970d31d2b682631e208d4b7f435b97b14aa</hash>
        <hash alg="SHA3-384">f80d75137a6ed01e53a7a168a39d33b15c26de832268d61a80affa7f9472639f2b19165fb4fdd1b6cbcc2601cf1b413c</hash>
        <hash alg="SHA3-256">60607471f4e886f0959dae77ac61ffd1b5662f9d39bd7efc552290e90e965c38</hash>
        <hash alg="SHA3-512">84f2e3c1840bbec18ad0fade94791a759f9a2e0de4dfe3a52fc9a54d2a7cffa94e8645273c7417db7ebd9e3a35884eaa6381ca6a6d5d48eae5bb0563b741247a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.minidev/json-smart@2.4.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://urielch.github.io/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netplex/json-smart-v2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.minidev/accessors-smart@2.4.8?type=jar">
      <publisher>Chemouni Uriel</publisher>
      <group>net.minidev</group>
      <name>accessors-smart</name>
      <version>2.4.8</version>
      <description>Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.</description>
      <hashes>
        <hash alg="MD5">e5761631acc11ded0255af1249937e85</hash>
        <hash alg="SHA-1">6e1bee5a530caba91893604d6ab41d0edcecca9a</hash>
        <hash alg="SHA-256">7dd705aa1ac0e030f8ee2624e8e77239ae1eef6ccc2621c0b8c189866ee1c42c</hash>
        <hash alg="SHA-512">45405c083334b05efa07572497b9d510ca771af32ce93d960be802216a9714ffff8418384ea48e197d3dfb6ebec4ec3e610155841e8a257a7fb9a4bd6a1b668f</hash>
        <hash alg="SHA-384">9f3a75bcd9a9c00dc7437d0dfcf075d411c4bcc125ab6761f0bec3f00eec4d0e5c7d0e7f304f69d3491a12f542ee0823</hash>
        <hash alg="SHA3-384">764e26adb705500f3e1a81b8360ce2c9d2c23ec09e3fcc9b673378d5e10fb8846843547ec0c5383e2bed1a20c48aaa43</hash>
        <hash alg="SHA3-256">7017996397067155374396bea86ac9871f6c672da91c91faf2ff8aa8b154624d</hash>
        <hash alg="SHA3-512">a1050d7f9e728546989c62e1a9ca7b583070012d766e7e77ed0d958a2271cf21326b8ed8d2d4690277e8da5b7ac3599a617ff68418fb5be903f6b59ad21dae8b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.minidev/accessors-smart@2.4.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://urielch.github.io/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netplex/json-smart-v2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.jeantessier/dependency-finder@1.2.1-beta5-log4j?type=jar">
      <group>com.jeantessier</group>
      <name>dependency-finder</name>
      <version>1.2.1-beta5-log4j</version>
      <description>JarJarDiff is particularly interesting</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6609f69643ad810d335b743641ec1f41</hash>
        <hash alg="SHA-1">b6b7f77ce559a1fd86f3ee626d0ebd8682cd4fe6</hash>
        <hash alg="SHA-256">617189460dac0264997053727bbf2f8de00a284c856394758afc95a678189058</hash>
        <hash alg="SHA-512">f8008e21227bd2e63a4131dfb4301a5c580c7d7349fe6978e191145057548ed64f1cdc9b93b1ec5b4edd88880bc34037f00cc72249db58a82063ad404e3db0e2</hash>
        <hash alg="SHA-384">cdeba2ba474582d96ef9a449bc35ce6e8bf98c50c73e22b0ee2ae297ae237574179632a9ff38c0391e91eaa796ddd195</hash>
        <hash alg="SHA3-384">565a093eb8673d5d0be91fa4636e12eba870bd99f8c8d7a568bf37ad4dba9e31a775894a85150154a2fe58179868d45d</hash>
        <hash alg="SHA3-256">b673af624d252d720d5220703db02715aaf3910883db2e7017f8b0dfb6679ebf</hash>
        <hash alg="SHA3-512">0edb0d35dfb45666f5b4b39badf1240f89a6315ac43ede35b702b0a5f2bba758434358fd3a8eac7804b25ac3e7654932b3179158b93dc93a7f69004797871c88</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/com.jeantessier/dependency-finder@1.2.1-beta5-log4j?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/oro/oro@2.0.8?type=jar">
      <group>oro</group>
      <name>oro</name>
      <version>2.0.8</version>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">42e940d5d2d822f4dc04c65053e630ab</hash>
        <hash alg="SHA-1">5592374f834645c4ae250f4c9fbb314c9369d698</hash>
        <hash alg="SHA-256">e00ccdad5df7eb43fdee44232ef64602bf63807c2d133a7be83ba09fd49af26e</hash>
        <hash alg="SHA-512">9a98e493c4d771322b1331ec05ab0e363a83d8ac2af8018d96a44df2bf5bfc97d33ebe6f6f93e46ab10bf1536f0c29e9d9569318ed49bc18b4e96b1a8b476d37</hash>
        <hash alg="SHA-384">f542e92b7a86bcb20cc21f0c4b29778428944391344ca11df432f9ce36a96ce8e8f65da67e450e52c0e8ba441d2a7332</hash>
        <hash alg="SHA3-384">e483eec12e463136ea4163a280dc17d62e48f5d49f0f0ad2ab672c4c5366b1f4e5fd460e880caaa4b39666106ac98ca1</hash>
        <hash alg="SHA3-256">e558c00adc56713dc57cebed64b966e3ca0d8f096056d8843fa8bb11c7c96017</hash>
        <hash alg="SHA3-512">f6e02d2cd83014e4a4d5ca0f24b189ec944c3b1e306c5eb04fac7e148b47ad2432256ef6b05292cf6d34a31c72420637702cc0fff4b38edcfae21bc0ffda98aa</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/oro/oro@2.0.8?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.steady/rest-backend@3.2.5?type=jar">
      <group>org.eclipse.steady</group>
      <name>rest-backend</name>
      <version>3.2.5</version>
      <purl>pkg:maven/org.eclipse.steady/rest-backend@3.2.5?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.5.12?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-starter-data-jpa</name>
      <version>2.5.12</version>
      <description>Starter for using Spring Data JPA with Hibernate</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">3b5d3b17e41ce14f66ed67918d8aee3d</hash>
        <hash alg="SHA-1">fb29004f637a6c55535321e51d6d11837f348d48</hash>
        <hash alg="SHA-256">629cabd7b85c7f935aa69c5f4350e93a33a14cfac8f6956350a27c481b6ea73a</hash>
        <hash alg="SHA-512">b89a0290a3144a38ded08ccd74a98b004d179749ad9c130070f74c14d916e38c880b405d3dffe6de7b3a2da65b9eb34e78edcc4c7761bc278574773823cc108e</hash>
        <hash alg="SHA-384">6803cc7f40e9719d35c3a5d08d7805f20eb637019f398a83a883b608552a4a970078b5b66e4eb2705a5406b6801ffeaa</hash>
        <hash alg="SHA3-384">78e9cbe224775beb8485283b4aada129d7c84ed9b622ba07e09408031911b2b515d5e18be5198972e6f061c006d2da0f</hash>
        <hash alg="SHA3-256">1a70fcb852c95c3a5f9418d5a2e091fa5eb7213de4fc2dc4d0be46104bb6d1bc</hash>
        <hash alg="SHA3-512">3c444c3b620b7c2bece75fcb443f0e81365afa6a2e723a928228f5e5b173027d8db371190e4d4ff118144953221c932087196332d7b63c55b2f1ced9d96b0d2e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.5.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-boot/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-starter-aop@2.5.12?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-starter-aop</name>
      <version>2.5.12</version>
      <description>Starter for aspect-oriented programming with Spring AOP and AspectJ</description>
      <hashes>
        <hash alg="MD5">12ad4702492d470680038b590a0de8f2</hash>
        <hash alg="SHA-1">12d557bf73679e2ae91409bb627e4648a1f085a0</hash>
        <hash alg="SHA-256">9b75645e440ea1eaa35afaa669b2f6684f33fd7efb57cc269de1c104ddf3e9b5</hash>
        <hash alg="SHA-512">44e9bd94a6dc87c1e91dfdaa1b361471fb6689ee8887d3e80648f287dc21757fe0530dda37b8ed22782a7e896b592e48cdc3823fae0158e9f8562e5d6bf7e6bb</hash>
        <hash alg="SHA-384">0d64f3f48376e71f9285ab8ee1887fad16272bc4d817fd6fa630e8d9f38e3185324b05e0c76e18fd728ee73a54e154aa</hash>
        <hash alg="SHA3-384">1033c6f30e7cd01b0cd43143b21ca72109e99b9db3d3259d75c0b8384324a0d63d616bc97c389689fef23e512af6ecdf</hash>
        <hash alg="SHA3-256">7f0f2a8af6a630a244396c1e7d8d09b97c8a6d497cf865b9ee24bcb1736400c3</hash>
        <hash alg="SHA3-512">89249e61189173ed57fe9fb7e04856455c7693ece2a8e094f225e8ecabf54a37e542f2c4226cda72f7d19baf0ea67bcfb94b04da98d65bcd0b1d0d1733ed7234</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-starter-aop@2.5.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-boot/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.aspectj/aspectjweaver@1.9.7?type=jar">
      <group>org.aspectj</group>
      <name>aspectjweaver</name>
      <version>1.9.7</version>
      <description>The AspectJ weaver applies aspects to Java classes. It can be used as a Java agent in order to apply load-time
		weaving (LTW) during class-loading and also contains the AspectJ runtime classes.</description>
      <hashes>
        <hash alg="MD5">a4d97c5a2f94b8b5d132761a769e5eeb</hash>
        <hash alg="SHA-1">158f5c255cd3e4408e795b79f7c3fbae9b53b7ca</hash>
        <hash alg="SHA-256">1b448d82bd0f8a8c1842506e6c7edb95ff1a1275ce39f766e7884122b866fe5d</hash>
        <hash alg="SHA-512">490fcf238486848e27cbed45fd437613193c9e89748a0818fb532aed5c213aab2624d148ed9fd58080c6934da5f7ec12c64e40b64bb46d16e361eb404393c5ba</hash>
        <hash alg="SHA-384">4d3b13d7e7ab437410226974ad3acebc8c663b21d9ccad6d70b5adede33bc4033858e8b303c7263a8e17c073c354b87b</hash>
        <hash alg="SHA3-384">0d56981fa691d1d79f39aa65dc091def5fb106f65d5d1b0836a7279b95195961c5a49f07979cda49e35768276a30477d</hash>
        <hash alg="SHA3-256">e10b7535b50a0017f062b7eb71f1f1b301beadfe474d050f7100996797a8640c</hash>
        <hash alg="SHA3-512">a77467b7b04410e7eb33214e84b4061f3e7112eb4c29a2c826691bdc0af6136c7a78789ae685273e9e69cfb40e674b64ecb31d1e516a8b5d79afefb13f57ffa1</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.aspectj/aspectjweaver@1.9.7?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/eclipse/org.aspectj</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.5.12?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-starter-jdbc</name>
      <version>2.5.12</version>
      <description>Starter for using JDBC with the HikariCP connection pool</description>
      <hashes>
        <hash alg="MD5">fcf899d1b3add515b85872a8f9c88889</hash>
        <hash alg="SHA-1">0423e05e8769e97be1d1dcfe0b3c151e900ab820</hash>
        <hash alg="SHA-256">baa1dbe2142bded162156311913b5255591ba8bf01f07044b25f6be4cd2dbb53</hash>
        <hash alg="SHA-512">edbc42a8c7e05c0736d95bc063b88ada1e542928327c6befb5f3a95d5395df95d036b0b9ba9de91da93a71b01435f629bb2852919a388374295c2e3f58eee3b8</hash>
        <hash alg="SHA-384">5ad8cfe340793f12d749e9a38bcf92a152d9e2d6683a2b363669663cc113c7e22314d56279bc45abc8fdcfda3bd28583</hash>
        <hash alg="SHA3-384">de43d7e87b4cc56a0b32c91911f9deff1e1cf99e33baae45eba91ee026adc1d61f034b7336ccfdc455b72b215603d9e0</hash>
        <hash alg="SHA3-256">d578bf5cbb1402218e2bbb51fdf69d141ba062845281a134ac24b5c814d21789</hash>
        <hash alg="SHA3-512">fb9d09b6c1bcc1a5e34fc8dfdf51f25f975829cfc29c8a91f91347ea87afd379f2e26e041dd9fd36fb610f2008759a9bcf8733e490342d9d87fa898550092c30</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.5.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-boot/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.zaxxer/HikariCP@4.0.3?type=jar">
      <publisher>Zaxxer.com</publisher>
      <group>com.zaxxer</group>
      <name>HikariCP</name>
      <version>4.0.3</version>
      <description>Ultimate JDBC Connection Pool</description>
      <hashes>
        <hash alg="MD5">e725642926105cd1bbf4ad7fdff5d5a9</hash>
        <hash alg="SHA-1">107cbdf0db6780a065f895ae9d8fbf3bb0e1c21f</hash>
        <hash alg="SHA-256">7c024aeff1c1063576d74453513f9de6447d8e624d17f8e27f30a2e97688c6c9</hash>
        <hash alg="SHA-512">34a9ee96c51ae070634cd0b642cad3c4c54b9d2ab7f1714f59dad805512ae27c9c69b8be83da473689f55474c4e2874c93e727f9f31d3bfc9b80ec37aeb68898</hash>
        <hash alg="SHA-384">9c49efde42b89a8cd2b119d666076bc9d532c4a835c640b77d8a5858d3325f9ba99f8cd19cd21b9df4f386d1c21855ae</hash>
        <hash alg="SHA3-384">ccea43e68e6dcf0426c271640abf132575a9e28b439ac968b5608e3d04d7ec80dd948d33c474e31fb18bab9b80959c2b</hash>
        <hash alg="SHA3-256">163e0d75894a0a4c2d36f4a992449e2dfd71bf495f5789813cd333ad1b571fc5</hash>
        <hash alg="SHA3-512">bc20907f677b6fceaf8f81361d5a7e0099799561af550a2a49dfed531a3b8ee29f35ecc2c4419cd8eef9e25a147a2cf88cfb7ffc9218b8b35b0e0524caf56d8d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.zaxxer/HikariCP@4.0.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/brettwooldridge</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://svn.sonatype.org/spice/trunk/oss/oss-parent-9</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-jdbc@5.3.18?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-jdbc</name>
      <version>5.3.18</version>
      <description>Spring JDBC</description>
      <hashes>
        <hash alg="MD5">c12e56d5bd660d5f7b765164c08f5077</hash>
        <hash alg="SHA-1">b168d4c024cb002377bca91f2b804297d8b74003</hash>
        <hash alg="SHA-256">cfb6b8be5b6f4029cce12f78d185c22e38452483069c5ee971a249235378cdac</hash>
        <hash alg="SHA-512">80baac96f79f52a55981afe8d3d420a52c3344313b131fa30b30b225b4d4dbc78ada92f3a2dd6f5615dc38952ea7923239f75eecaf3dca342c0c0700250af5ae</hash>
        <hash alg="SHA-384">b5874762c6055e44e4d4567feddff0c2087a10b3df5d049454dff668f2739e4ec3c6b1eca9bf6972b3e4bb2da0e2a0fd</hash>
        <hash alg="SHA3-384">a9c2f2164ce1adae1d470554253e30b96b6e3e64bf9f4e7e8f8d54468dcfff16a1cd0c0e6176dea6168f3b0470396112</hash>
        <hash alg="SHA3-256">70ac842370613d37f4b2e7bff5e76d920e60a7e70d6851a26a018c72437bd450</hash>
        <hash alg="SHA3-512">a5f235d705c49804fd7b67d1cfcab1cde0c36c9367329dfce960fe249b2758008fa769d24b5f0550c6f2418f055119d19c2ff84c2f127236027d5f202efcb43a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-jdbc@5.3.18?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar">
      <publisher>EE4J Community</publisher>
      <group>jakarta.transaction</group>
      <name>jakarta.transaction-api</name>
      <version>1.3.3</version>
      <description>Jakarta Transactions</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cc45726045cc9a0728f803f9db4c90c4</hash>
        <hash alg="SHA-1">c4179d48720a1e87202115fbed6089bdc4195405</hash>
        <hash alg="SHA-256">0b02a194dd04ee2e192dc9da9579e10955dd6e8ac707adfc91d92f119b0e67ab</hash>
        <hash alg="SHA-512">764ade8ba807682dcd1ec7382c35275f3d8ab09a03d5b45c48e732501190e2738269080aaf28aa8dd656c11ee84bfb7dae6953dd2768f2acecd3a8cf0ca4961e</hash>
        <hash alg="SHA-384">63adeb3c5eb24ad0147377436b6e3208d5e97c0e800e0e1e4cb3ba92699f1b06034c2ba00e3689aa8f909ee96c432db0</hash>
        <hash alg="SHA3-384">dd0a253f45dac003d40ebeed7f38b0850ff4b08941d55db5b3bbf4c936f94062d23799729ff718c54a565de2482bfd3d</hash>
        <hash alg="SHA3-256">d47afbaf1daba46c7aa107bf1b476857523738370309394958f96a2105686684</hash>
        <hash alg="SHA3-512">1b744b2d939a8d0a2bbd0be29c717af4a5e2374ca26fbb95a16df03aa55d2aa092e9314f20d5b080f02030ae1b70e4904ef0f8e1509680b9001153cdb7bc1934</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jta-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jta-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jta-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.persistence</group>
      <name>jakarta.persistence-api</name>
      <version>2.2.3</version>
      <description>Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs,
        implementations of those APIs, and technology compatibility kits for Java runtimes
        that enable development, deployment, and management of server-side and cloud-native applications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e0a655f398f8e68e0afebb0f71fba4e5</hash>
        <hash alg="SHA-1">8f6ea5daedc614f07a3654a455660145286f024e</hash>
        <hash alg="SHA-256">0c2d73ab36ad24eeed6e0bea928e9d0ef771de8df689e23b7754d366dda27c53</hash>
        <hash alg="SHA-512">1e07257b631ae3331a71d7cd9136152cddebbe786ba50c689bec618a9eb659be8e952fe0405db36332cb6c12c6c87c6d648e817c027ea8c6e0c660ce82f6f424</hash>
        <hash alg="SHA-384">d68e1f600244d7a3628244e0265208ce08881f4ea33a3cd1f085886f7ce755cdd44bc6788ebda1baf8bc23b1f3c844dd</hash>
        <hash alg="SHA3-384">fb77e58872d4e3ef6475094ea96f1ce32a1a7c3617393fcab47c47cb84f6995315c5f805d518c69a0cea751ce980bf13</hash>
        <hash alg="SHA3-256">3619596135b169649ed16b75972c39614192d2a802291a7eb4c1814ef7dc9ff8</hash>
        <hash alg="SHA3-512">045c7f1ec7f9191cd2ff35fadf5c037aa596a288189185fd10d5fed89cd3661b6353945083f4c3943c87e343b61a556699f43f00a0e928c165e52d57fe514fa5</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jpa-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jpa-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jpa-api.git</url></reference><reference type="website"><url>https://www.eclipse.org</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.hibernate/hibernate-core@5.4.33?type=jar">
      <publisher>Hibernate.org</publisher>
      <group>org.hibernate</group>
      <name>hibernate-core</name>
      <version>5.4.33</version>
      <description>Hibernate's core ORM functionality</description>
      <hashes>
        <hash alg="MD5">9d7ab2e3d7b9e4116415fb47765a05af</hash>
        <hash alg="SHA-1">23fae08d13475d71acd374928e38d3f8e1baa3d3</hash>
        <hash alg="SHA-256">594ee0cb3532db0896f1ded317747bcb6e460adbd37d0ce27f01363237cd1f5b</hash>
        <hash alg="SHA-512">09b187258e60b518b5f67e4163e58d7c3679e65dbc04b9c09d9b95f4cca70911efd4a3a9c7237f4b28b7fa0aa5cb27943d5b0862217072ba2c527ca484ac9c28</hash>
        <hash alg="SHA-384">129f4d26298a747124253c4d31d0041effb64322a3859069cff200506d69b23f39c93576b50ff82a8bade32e91bab7a8</hash>
        <hash alg="SHA3-384">f3c59d1c7452397b834aaee9e2df8bf983f3820e560f745b46e7fcf34e827c467b06df84a3ddc9b030bcda063f8d85e2</hash>
        <hash alg="SHA3-256">9bcdf2ee10829df094b865960197d7a6e7383ac09dfaecc2a4fc6c0dd9eab53a</hash>
        <hash alg="SHA3-512">a505e6a37d03e9f672de9dbc14b71e91678488c92da517c6efc032f90482e70428aa25dcc740efb5111fe5f7f774de37e5357b6a80283078377e8d3c2037739b</hash>
      </hashes>
      <licenses>
        <license>
          <id>LGPL-2.1+</id>
          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.hibernate/hibernate-core@5.4.33?type=jar</purl>
      <externalReferences><reference type="website"><url>http://hibernate.org</url></reference><reference type="issue-tracker"><url>https://hibernate.atlassian.net/browse/HHH</url></reference><reference type="vcs"><url>http://github.com/hibernate/hibernate-orm</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jboss.logging/jboss-logging@3.4.3.Final?type=jar">
      <publisher>JBoss by Red Hat</publisher>
      <group>org.jboss.logging</group>
      <name>jboss-logging</name>
      <version>3.4.3.Final</version>
      <description>The JBoss Logging Framework</description>
      <hashes>
        <hash alg="MD5">b298d4b79e591843c1eb1458ea79f070</hash>
        <hash alg="SHA-1">c4bd7e12a745c0e7f6cf98c45cdcdf482fd827ea</hash>
        <hash alg="SHA-256">0b324cca4d550060e51e70cc0045a6cce62f264278ec1f5082aafeb670fcac49</hash>
        <hash alg="SHA-512">60759c4340a7c1af0f10a5c2252e028150413d2437547f42018a94a838dc4a2bb24256411490a7e5f109b76305e2752ecf37def85e631d7e7b7e8461e0b54dda</hash>
        <hash alg="SHA-384">1c07afd380f25c076ca0e568be205ede18c875471547133711f04bb2ffc9936c7c97708605cca18c9a98fc94b072caea</hash>
        <hash alg="SHA3-384">f17eeff5983e9e0562c90b8b3051b2dbee885818adb104ba8700a399f90a1a3c85a766686dafa06122cd6f8979561ea9</hash>
        <hash alg="SHA3-256">c41833778a14d364e29767d543ac402e93222616bfcc020552f0f037cfc6b02a</hash>
        <hash alg="SHA3-512">0dace1456d22070719b6e7322cdfb64b34f36f5c8f271f62026c691b00fe32fba50ac17f61b467160ec2b7cabdeeac77029ded3d7f9b1e08a4a0f709222a5017</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jboss.logging/jboss-logging@3.4.3.Final?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/jboss-logging/jboss-logging</url></reference><reference type="website"><url>http://www.jboss.org</url></reference><reference type="issue-tracker"><url>https://issues.redhat.com/</url></reference><reference type="mailing-list"><url>http://lists.jboss.org/pipermail/jboss-user/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.javassist/javassist@3.27.0-GA?type=jar">
      <publisher>Shigeru Chiba, www.javassist.org</publisher>
      <group>org.javassist</group>
      <name>javassist</name>
      <version>3.27.0-GA</version>
      <description>Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple.  It is a class library for editing bytecodes in Java.</description>
      <hashes>
        <hash alg="MD5">05ea852668c9e38294d1bb823af95a70</hash>
        <hash alg="SHA-1">f63e6aa899e15eca8fdaa402a79af4c417252213</hash>
        <hash alg="SHA-256">0730bdb1547a5a3f458d60400d804078d80f329c5b5dbc2498a4e220de8f7013</hash>
        <hash alg="SHA-512">7237c6ba9ed082ea635d378d4fae27ae325a79ba747a3c082fd8d8f0fe5cfee60468165abbd152b71d34d5a7707911238e11ebb7f1ebaf8cb21006b4016bab76</hash>
        <hash alg="SHA-384">423796fee40c128f09ea8dec4658e088a868733e79796a5a5a11ca179a86890189a3f02fa1219a33dd1dec53071b6b53</hash>
        <hash alg="SHA3-384">cf398eaad8030f71b728c2ddfefff614368651fc3b311db878fd4159800c61543a9ad4be7989565da7ee0ef524bb60ac</hash>
        <hash alg="SHA3-256">64c28c2b64bbed18d0a5c1be7d844ec8394315daf7a88e1e555378a2d1b8ce00</hash>
        <hash alg="SHA3-512">4f7f3f11e7cac3bf7f3f26dd910d6fd64f92f7bc37988c89bd70bc507eeaab5f3ce8ba9f502a806c926aa3275c6f2009448121b410e4be0c27aaad845eacef2a</hash>
      </hashes>
      <licenses>
        <license>
          <id>MPL-1.1</id>
        </license>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.javassist/javassist@3.27.0-GA?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://jira.jboss.org/jira/browse/JASSIST/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.bytebuddy/byte-buddy@1.10.22?type=jar">
      <group>net.bytebuddy</group>
      <name>byte-buddy</name>
      <version>1.10.22</version>
      <description>Byte Buddy is a Java library for creating Java classes at run time.
        This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.</description>
      <hashes>
        <hash alg="MD5">8307313c20c0b9417cf5f60b2cda7436</hash>
        <hash alg="SHA-1">ef45d7e2cd1c600d279704f492ed5ce2ceb6cdb5</hash>
        <hash alg="SHA-256">f931adc4393177afa5244c47257a83955e27fe047c409378c6eda090fb074a84</hash>
        <hash alg="SHA-512">e7b44444cb918b7e33fc19e722e0b31bfe595b6d4f9557b739b04893e72b8d9d25340c453f093cc35ebe7e13abb4c5caf08e21074218ac47e61d445c0fd8b725</hash>
        <hash alg="SHA-384">de9451d04f858a08cc758ccc1794fe1b8df0a5fcf3e8f37b734b1eff69c93d516ec173872e517719e054fa3721815c12</hash>
        <hash alg="SHA3-384">ce491feb30e5898108e2432f79ae32f1df0f7984085aaaf7dab558262ea740b041137722daa0fc1c4739b296da6ae7b1</hash>
        <hash alg="SHA3-256">7081bf3e0573ca322a3d15dcf133c124239b0fb85bb73380a642cd05f136e419</hash>
        <hash alg="SHA3-512">39af86b90dc15899e0390654be25dda5f584bd962172caa30276796d47104db3c9bc6326548e5d2e97ed42d593f9b5894d8d95f76d6eb4154c1e3db73b4a9f4c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.bytebuddy/byte-buddy@1.10.22?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/raphw/byte-buddy/issues</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/antlr/antlr@2.7.7?type=jar">
      <group>antlr</group>
      <name>antlr</name>
      <version>2.7.7</version>
      <description>A framework for constructing recognizers, compilers,
    and translators from grammatical descriptions containing
    Java, C#, C++, or Python actions.</description>
      <hashes>
        <hash alg="MD5">f8f1352c52a4c6a500b597596501fc64</hash>
        <hash alg="SHA-1">83cd2cd674a217ade95a4bb83a8a14f351f48bd0</hash>
        <hash alg="SHA-256">88fbda4b912596b9f56e8e12e580cc954bacfb51776ecfddd3e18fc1cf56dc4c</hash>
        <hash alg="SHA-512">311c3115f9f6651d1711c52d1739e25a70f25456cacb9a2cdde7627498c30b13d721133cc75b39462ad18812a82472ef1b3b9d64fab5abb0377c12bf82043a74</hash>
        <hash alg="SHA-384">2e811e531ce30a2a905d093a00de596cf04406413b60422db8252b46125cadf07b71459cf6ac6da575ec030a9bf05e57</hash>
        <hash alg="SHA3-384">bdf019332ae8714ef6a3904bb42bb08c1fe4feacf5e6137274884b0377d4e5b5f7aa9fe8e1ef5ca9b3e15f12320fdb67</hash>
        <hash alg="SHA3-256">babce5c8beb1d5907a7ed6354589e991da7d8d5cbd86c479abfa1e1dfc4d2eb8</hash>
        <hash alg="SHA3-512">3a8ce565280a157dd6e08fb68c317a4c28616099c56bc4992c38cf74a10a54a89e18e7c45190ce8511360798a87adc92f432382f9d9bdde0d56664b50044b517</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/antlr/antlr@2.7.7?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jboss/jandex@2.2.3.Final?type=jar">
      <publisher>JBoss by Red Hat</publisher>
      <group>org.jboss</group>
      <name>jandex</name>
      <version>2.2.3.Final</version>
      <description>Parent POM for JBoss projects. Provides default project build configuration.</description>
      <hashes>
        <hash alg="MD5">721b5868cfbb718dd97facc96929dde8</hash>
        <hash alg="SHA-1">d3865101f0666b63586683bd811d754517f331ab</hash>
        <hash alg="SHA-256">0544d55ec0cb378fd8f3b20e66277f893f3094cb67e71a1ec0cce6ce150f83b3</hash>
        <hash alg="SHA-512">a2011fb69d4853d4386c6878d9f6cde8335e39d28699dabb5b4253dcc5376ea9468dd6d8f1c0ec5b87fa3e54ad80ec2f2c71da3e1232900c64ea4ccd754931b2</hash>
        <hash alg="SHA-384">021ce3373801c97602202a5d25bb8eaa16814fe9fd37cd2083c0781f2f746d9e183dc5e7210a39543b09ea685426bbf0</hash>
        <hash alg="SHA3-384">2f6d1427c9bcb203d488b1f60ffe0048cbfa32020fd4c6e1dbec88a6a39c4a0f7912892b33a9df4ee5f5704afcac4cec</hash>
        <hash alg="SHA3-256">675de7c27c684b5025ff85e00cf1d2d8075acac9f839fe2727305b74ee60ba84</hash>
        <hash alg="SHA3-512">185ada941cea594b0a419e16259fa52ee059410a69100959141ea72cbad086c1e94b218bb2bebd5231f70a746b21a1d1c4d008094c66d00ec1a1dd1d0b644a7d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jboss/jandex@2.2.3.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jboss.org</url></reference><reference type="issue-tracker"><url>https://issues.jboss.org/</url></reference><reference type="mailing-list"><url>http://lists.jboss.org/pipermail/jboss-user/</url></reference><reference type="vcs"><url>http://github.com/jboss/jboss-parent-pom</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml/classmate@1.5.1?type=jar">
      <publisher>fasterxml.com</publisher>
      <group>com.fasterxml</group>
      <name>classmate</name>
      <version>1.5.1</version>
      <description>Library for introspecting types with full generic information
        including resolving of field and method types.</description>
      <hashes>
        <hash alg="MD5">e91fcd30ba329fd1b0b6dc5321fd067c</hash>
        <hash alg="SHA-1">3fe0bed568c62df5e89f4f174c101eab25345b6c</hash>
        <hash alg="SHA-256">aab4de3006808c09d25dd4ff4a3611cfb63c95463cfd99e73d2e1680d229a33b</hash>
        <hash alg="SHA-512">7fc4764eb65227f5ba614698a5cf2f9430133f42ec6e2ae53b4c724ee53f258541a0109fe0659e0b9e45729b46c95c00227e696b8d1addcd772c85f877658c9a</hash>
        <hash alg="SHA-384">28b4780b2353ebc08dbc02c9a343527a9062a0455bfb4ab135cb639c03e5dfd9c2250a835c44d5f17d275667c2009694</hash>
        <hash alg="SHA3-384">b194ace8f1f49f410286bd859866678b95a1b2c6f73e41f48291eb7438dffea57aaa9b177459038b6997771ce4d1cee1</hash>
        <hash alg="SHA3-256">50234c94efed4c816eb77bd2f70b869c9f89ddf8ee73dc25e354f4d0b81b3e1f</hash>
        <hash alg="SHA3-512">9886421726066b313a62283a6811b76d904ea1c1e9b7b2d850cb47afa189b03cdef053c8f7f6b79e77f2269c45f8cc2ed75c3389e96594b50987fef311d5a25f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml/classmate@1.5.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://fasterxml.com</url></reference><reference type="vcs"><url>https://github.com/FasterXML/java-classmate</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.dom4j/dom4j@2.1.3?type=jar">
      <group>org.dom4j</group>
      <name>dom4j</name>
      <version>2.1.3</version>
      <description>flexible XML framework for Java</description>
      <hashes>
        <hash alg="MD5">41efcf234c5a05a8c590f9b51d53ca66</hash>
        <hash alg="SHA-1">a75914155a9f5808963170ec20653668a2ffd2fd</hash>
        <hash alg="SHA-256">549f3007c6290f6a901e57d1d331b4ed0e6bf7384f78bf10316ffceeca834de6</hash>
        <hash alg="SHA-512">c17d210d2a3d304ae03f725fcc6644e44185c945807f4980681972cbff946b5468d1dec84eb4f660627ee1f86ad4b8372990cd63ab956d4eb75a22d20dbd9cd1</hash>
        <hash alg="SHA-384">930553b442d977537ccc76cf230d28f4c41d19ff438a5a33481942c3cc4dbe42378180c5cfdaf3872a0a8ec5e3518bb5</hash>
        <hash alg="SHA3-384">ddae9d6c0816a5c39d05c5dfa9c98810e375164b0c9d0f89a3de179e7f52c830cc2ccbbc9731cca34fd78b5cb3457419</hash>
        <hash alg="SHA3-256">79165a5f9c7051a61182d14233e2868a2fc05eb556f08c574b3c990b3151fb66</hash>
        <hash alg="SHA3-512">d7ef116204278ecac874ac3e42ae9a6653411b02cc3202ebeb67badf1e317ca8d38f6e10d6c3eb11e16f53cfc83d0bb2d3a496daa5c93ad4ccb5746202257a2f</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.dom4j/dom4j@2.1.3?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final?type=jar">
      <publisher>Hibernate.org</publisher>
      <group>org.hibernate.common</group>
      <name>hibernate-commons-annotations</name>
      <version>5.1.2.Final</version>
      <description>Common reflection code used in support of annotation processing</description>
      <hashes>
        <hash alg="MD5">2a2490b3eb8e7585a6a899d27d7ed43f</hash>
        <hash alg="SHA-1">e59ffdbc6ad09eeb33507b39ffcf287679a498c8</hash>
        <hash alg="SHA-256">1c7ce712b2679fea0a5441eb02a04144297125b768944819be0765befb996275</hash>
        <hash alg="SHA-512">9ce69f19b2e080071a69a2faa992be70b2c153d94862c306f784d1f91fe66e01139c13a3b4f156ee17bdc58ea9c93b61e2dbdfc43152d43896610251488c6e24</hash>
        <hash alg="SHA-384">4f1652cc7f93556ca615f7a70a63e22004f7e1325b6d38492c5601d9b13f9ee3292b7e8919c1a0ef41de0266ed84b941</hash>
        <hash alg="SHA3-384">c39a9a94055696454d0ecc5c9718ca1ca7ea05f3b22eb8991c69f31e976a595b86fcaa37fd030c03c0860610bd7251c4</hash>
        <hash alg="SHA3-256">a2dc556200c3503ae769c6efa3634a94ac30f475f60b9fd7e478c8919e326720</hash>
        <hash alg="SHA3-512">4c791c5d5c43a3d4907f495966d89bd281d90727e3884d889b07a6e88c0ad3f9a712fabf4f2d73c57412d9eff1946ac48ad5450067ca9f6e83212ab09c18907e</hash>
      </hashes>
      <licenses>
        <license>
          <id>LGPL-2.1+</id>
          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>http://hibernate.org</url></reference><reference type="issue-tracker"><url>https://hibernate.atlassian.net/browse/HCANN</url></reference><reference type="vcs"><url>http://github.com/hibernate/hibernate-commons-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>jaxb-runtime</name>
      <version>2.3.6</version>
      <description>JAXB (JSR 222) Reference Implementation</description>
      <hashes>
        <hash alg="MD5">29acad12b7cdd22b2a5ab66cd7439d48</hash>
        <hash alg="SHA-1">1e6cd0e5d9f9919c8c8824fb4d310b09a978a60e</hash>
        <hash alg="SHA-256">cd87d4b98a8bec1d237aed61472ef4adb6a8bb0515cbde1fd62fdd9781c16770</hash>
        <hash alg="SHA-512">8e8042f4a2a45f3520ce6376d826c0445a54509a728f9f61b274c2e2d92d242bfabfba112994d0df56f59f58c48e4069fb2dabf0fcc67208e651597de5eeaa98</hash>
        <hash alg="SHA-384">6c3cfac49412ee125c0183e39ef751b8a7db04f02133ca6e039259708d2bd36df88bca3163672c8ab809cca9824e8d7e</hash>
        <hash alg="SHA3-384">3a0e2fbe2231fb39ae58afc52ad6dabf3cb932d4b56116f5ed3697b57bd0970c915e1f2b14df48576277c50ebb055a3b</hash>
        <hash alg="SHA3-256">00c4b10fb5581894c010618d4af73b821fbc262d883e5e1089438efa72243668</hash>
        <hash alg="SHA3-512">f5657b09370ecd381e76148b52fd8aa8e904f09424f2c7df5307b11ac0403db885d8a82e50002047c5be4c532c8f5778bd11833beebef3ddfe02fbf2fd35b464</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url></reference><reference type="mailing-list"><url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxb-ri.git</url></reference><reference type="website"><url>https://www.eclipse.org</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>txw2</name>
      <version>2.3.6</version>
      <description>TXW is a library that allows you to write XML documents.</description>
      <hashes>
        <hash alg="MD5">dd02e61e4662e6461f0c21b08e721021</hash>
        <hash alg="SHA-1">45db7b69a8f1ec2c21eb7d4fc0ee729f53c1addc</hash>
        <hash alg="SHA-256">f8bc249d22ad950257c373aea80c2f16f18f5eb4d557bdb2660bf5e1f1e84776</hash>
        <hash alg="SHA-512">468cd89821480364a49f73f1774383fd483fd8273d373601a4867b37267f125c3fdf3ffd8a73a114408699137c469c02e47f94b80c7d21df236b4a187d12680d</hash>
        <hash alg="SHA-384">02c99a070c038081922bdae47cd9e739045342b223c55204716bba9f81eca971ed1313eab8bb103dc596bfd7b84a6b72</hash>
        <hash alg="SHA3-384">e63ebe6d86a51506c45b430c8a71d80ac0fa95f99692a30697468b242ccd5c818f5d4aaf967e049797fee704a92307db</hash>
        <hash alg="SHA3-256">585be97a69d2a94b6647330ac36b3d5b2389eadfb92138f2b80a3e8c3bcc4b63</hash>
        <hash alg="SHA3-512">2e7ed6f7267f7e4eb0c0b0e89f845fcd253eec4ab1fa66fd915b7a4bd738e881c9e8f801af17dbbbfbc4311409f0fad9737780693a1018582e307a3293d27405</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url></reference><reference type="mailing-list"><url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxb-ri.git</url></reference><reference type="website"><url>https://www.eclipse.org</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.istack</group>
      <name>istack-commons-runtime</name>
      <version>3.0.12</version>
      <description>istack common utility code</description>
      <hashes>
        <hash alg="MD5">1952bd76321f8580cfaa57e332a68287</hash>
        <hash alg="SHA-1">cbbe1a62b0cc6c85972e99d52aaee350153dc530</hash>
        <hash alg="SHA-256">27d85fc134c9271d5c79d3300fc4669668f017e72409727c428f54f2417f04cd</hash>
        <hash alg="SHA-512">af36b11cc0d82b7f62c64941f4e7d441d25cb9f3c4b3e08753d038c388e5a09364b5dac9127f29a9b8df6d96034133caadab6d74371077478d2f301605913460</hash>
        <hash alg="SHA-384">ad8ba1f6538e087915b1e7fbf4a7a60b006ebecc4ab52986c10dfe88ae11ae7eb6e1f302bee06f70b16ec316f001375b</hash>
        <hash alg="SHA3-384">2207c7e1570860d6300ef3157905498efaf26ba85566b053495f583b20c755cc07d6855b2d79136ab4d6544635e39f4d</hash>
        <hash alg="SHA3-256">50a425e524a6ee81110ecd86190d039a84d46aa3c45855310fe4f95abba3c21e</hash>
        <hash alg="SHA3-512">286997280ee0885c456686cf91c601e600106138f39eb81fc27381868f7ede0d1521cdf22c420331b1a961ed2f1ba1887a9ae05073f4364e3ffc297f40f0de53</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxb-istack-commons/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxb-istack-commons</url></reference><reference type="website"><url>https://www.eclipse.org</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.activation</group>
      <name>jakarta.activation</name>
      <version>1.2.2</version>
      <description>${project.name}</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0b8bee3bf29b9a015f8b992035581a7c</hash>
        <hash alg="SHA-1">74548703f9851017ce2f556066659438019e7eb5</hash>
        <hash alg="SHA-256">02156773e4ae9d048d14a56ad35d644bee9f1052a791d072df3ded3c656e6e1a</hash>
        <hash alg="SHA-512">8bd94a4370b827e3904f31253b022e5c1851896d3b616ca7daebfef259238cedc56d4ced32c74f24a13c3e2295b0ea012af5d04656b7f713cc53a2f18d5e2cf7</hash>
        <hash alg="SHA-384">1cb0aff8b73ba52a9931b2cf13c75a1ce6665fb826bf97ede66db75c532136aa189fb53a1925e62b6eef572309ef3b9a</hash>
        <hash alg="SHA3-384">83801332576d931f4091ba65ea240d49c23e3b93dae939ce2eed63de943f80f251a4347638b99900de5b831796b12590</hash>
        <hash alg="SHA3-256">5363211b59dfaff6e1973e93548e5e4062189c6d0f43d7802627ebeb7b7ff37d</hash>
        <hash alg="SHA3-512">0c7b62a3432b19ffad02eafffc7e598391cd32b1313d075f94cda09913402770b4ba2314716625571f266431067229c93cec36e17c3ea598623542988634ca0a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaf/issues/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaf</url></reference><reference type="website"><url>https://www.eclipse.org</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.data/spring-data-jpa@2.5.10?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.data</group>
      <name>spring-data-jpa</name>
      <version>2.5.10</version>
      <description>Spring Data module for JPA repositories.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1c2afbe3eef42c4039e625fd9806330f</hash>
        <hash alg="SHA-1">25830894d7ccf948e42903b100463a5f9f8c9a3a</hash>
        <hash alg="SHA-256">f30a20ac8dcda22319f6df8f1e2ff804dce6fba0669a4a8b23f9b5db746fe551</hash>
        <hash alg="SHA-512">15d2c9b72c29e21b174c9f3959527f309c4530a53f40924a4a757a9a7d12ea746f815b773f132484d35283eaa3c5d67be42614f9a143cc25ebbc812092ba7f29</hash>
        <hash alg="SHA-384">5eae5c22411b56e7eed3b8ca149a1f21ec87f429c8718da4ac23e6f4dc379295ffe304134b9e79fba077216bdb7ed86b</hash>
        <hash alg="SHA3-384">bf64eb301283a147468f032777d17be589dfc9640e6fd60f0c750170f2cb610e7ebebbb5faa45905a43b283cf6c87ad7</hash>
        <hash alg="SHA3-256">8b3ef686924ee8369ace3267992d9f0f216b6ef00c0a3e1d35953ebcd19a9488</hash>
        <hash alg="SHA3-512">ab3e10cc6bbda551c39acccd3dcce856227ad6d6d39e9d93e35320ba8d97a4bcd6f3a8a49016178b6641098e6e2b1813d0a6a02167864e975fbf8546f5fdcea3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.data/spring-data-jpa@2.5.10?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.spring.io</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-data-build/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-data-build</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-orm@5.3.18?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-orm</name>
      <version>5.3.18</version>
      <description>Spring Object/Relational Mapping</description>
      <hashes>
        <hash alg="MD5">9888adaf9c9ab46c75bdc9a6c38042f2</hash>
        <hash alg="SHA-1">ec32d5f4c718cc63e7c44adf5c4e7c49cdffa147</hash>
        <hash alg="SHA-256">12faa2c7347b58db005424078cb325a9c9f427f91c167d4b926ecda5e70cfc8d</hash>
        <hash alg="SHA-512">9080e4ac343ba5afac821d6c90cba0e298baba7053d78dec4b710470b6ab77a199d96b8a4e3c5cb136642c9dbc9b50330ea8b1b105644fd39c7912695991d18c</hash>
        <hash alg="SHA-384">f40d4102eb379075d0a362beb3e47fb1324917e85fbf010e635b6c1f18fd105956d7ae1195571444b4bac696b41c11b6</hash>
        <hash alg="SHA3-384">a237850d594841c78026a8b5b4c02bdbd5a60c8d624e02871e5b35d19fff6fe0bda0dc79bdab88f36dec6d3544175dfd</hash>
        <hash alg="SHA3-256">e65bfdccc95a40a359c98a5d297c0b444b4dfe10f04e84a0e8fb3fb9b9f01efe</hash>
        <hash alg="SHA3-512">33f7c5e745c34dc6fa92429e20af46035ad83ddf4c0ea48f6c437c63b4a8964f92b9579a9aacc3f0571ee672030740cf6405d0137032c4e1b7c27439de448363</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-orm@5.3.18?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-aspects@5.3.18?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-aspects</name>
      <version>5.3.18</version>
      <description>Spring Aspects</description>
      <hashes>
        <hash alg="MD5">75dad3c83d647a04ec36d14ea09d7f02</hash>
        <hash alg="SHA-1">78e473c68f3f579f6dff4810530260bcfe97ca8f</hash>
        <hash alg="SHA-256">13aec9ce656f9dbe64b8d336d0564b6603442a6655bd4aeeaac617500c9a9a05</hash>
        <hash alg="SHA-512">50c5937dd41ecc6b004168d04cfc306fbed2845246dca9eb22f04dd61ffe2541ccd1fe415e6c822e88c9a0bffbce3800ce26b87680035e31ff23185ceedb1632</hash>
        <hash alg="SHA-384">57533ea6271ddef10d40a104f56f8ebbfc9583650563363f889903d638807c758ef6a120f6160c0582995bfad3966ded</hash>
        <hash alg="SHA3-384">b785a7c78435e0167f187bca2beb1be35105e2d9e1c40720819087b8c8ec9285c8e8ea2222afc01f2041368cff64f0a3</hash>
        <hash alg="SHA3-256">f497801aee778182393f01adbf9ff661415cff64be9c28adb69738d2366182d1</hash>
        <hash alg="SHA3-512">3dad86186785fcdd9ac52cca3ac4ceb411519e0416d6702abc3e685ab28ab68cbc575872302a7b701e6be0d560d59b34da0d8d3d69fd91c033ff3b698a9aa4a6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-aspects@5.3.18?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar">
      <publisher>Oracle</publisher>
      <group>com.sun.mail</group>
      <name>javax.mail</name>
      <version>1.6.2</version>
      <description>${project.name}</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0b81d022797740d72d21620781841374</hash>
        <hash alg="SHA-1">935151eb71beff17a2ffac15dd80184a99a0514f</hash>
        <hash alg="SHA-256">45b515e7104944c09e45b9c7bb1ce5dff640486374852dd2b2e80cc3752dfa11</hash>
        <hash alg="SHA-512">d76243093d93c556ae399ce9b65ea35bc5a7e12703110108cf8eaa314d8f9b094034dd530438189775f61f0994727cac6f68efb8eab2f13349922b08eb00d4ec</hash>
        <hash alg="SHA-384">44300db745c6a065b5ca907e04d06bc42e42d4bf59470b24d2c40f889cf8fc79f0793997321874b2c25bc269900f9c51</hash>
        <hash alg="SHA3-384">4884616293856fe9d2ed2c6bb838f32d645ccab65a05b949351e6d93d6ed9ea408c8666ef17e19bd033c25545bafb490</hash>
        <hash alg="SHA3-256">905d9b5869f8ee5ad4b1027293beb5af5051aa2b929f52500611beedd2d5c992</hash>
        <hash alg="SHA3-512">bec15cc6423179fb27e01c149e9c761a5cc98844e47f2182101d69f84736a85390da487eef7cc2dca94992c14d6ba7fe3d5833d2ad554731bec439ef11d547d8</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.oracle.com</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/javamail/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/javamail</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.activation/activation@1.1?type=jar">
      <group>javax.activation</group>
      <name>activation</name>
      <version>1.1</version>
      <description>JavaBeans Activation Framework (JAF) is a standard extension to the Java platform that lets you take advantage of standard services to: determine the type of an arbitrary piece of data; encapsulate access to it; discover the operations available on it; and instantiate the appropriate bean to perform the operation(s).</description>
      <hashes>
        <hash alg="MD5">8ae38e87cd4f86059c0294a8fe3e0b18</hash>
        <hash alg="SHA-1">e6cb541461c2834bdea3eb920f1884d1eb508b50</hash>
        <hash alg="SHA-256">2881c79c9d6ef01c58e62beea13e9d1ac8b8baa16f2fc198ad6e6776defdcdd3</hash>
        <hash alg="SHA-512">c0ff5bf3ace7acc1b31fcc109cee48d9eb8f025ae15a31dc91eca760933bdb97c93f05d61e95af1e317859d72e5f179f897f5bf3df0e3810f4212d43bacee4bd</hash>
        <hash alg="SHA-384">c4ee54d80a2e67e819700051d6cfa01a17631c89f942b8690afb601e491f02d7497fe57bd5c70edfb9b444ae8222b846</hash>
        <hash alg="SHA3-384">de0777d2d1d7aad105defb12aed17ef38abfe89db2449c5243fa3c69304ea24dd8df0881330351d0733313e8f7252814</hash>
        <hash alg="SHA3-256">5fb94d2742cc3d44abad42c5d61b9c7464a2ef33bc58b4b5b121d49799123460</hash>
        <hash alg="SHA3-512">c5e37fe3d9c420a9035f1160eb1d396e94f01851c01c6e2f19f19a221bfc484e63f9660c7377f58aa65246b95a9eb799ac4e6798c0b20f658edf00a4435e1efa</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.activation/activation@1.1?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://maven-repository.dev.java.net/nonav/repository/javax.activation/jars/activation-1.1.jar</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@30.0-jre?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>30.0-jre</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, google's collections, io classes, and much
    much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a7379037e654274e3544f2488a29b31f</hash>
        <hash alg="SHA-1">8ddbc8769f73309fe09b54c5951163f10b0d89fa</hash>
        <hash alg="SHA-256">56b292df9ec29d102820c1fd7dd581cd749d5c416c7b3aeac008dbda3b984cc2</hash>
        <hash alg="SHA-512">137b74502a104d744239261923ea725949ea8f101290f9c3b4bfbfee2e6635e61c6a61207236df8c00670d45a5b50c1b7710c7553b370a7ad9dd32b4268d1f84</hash>
        <hash alg="SHA-384">dad46a3438e9e2fc42032e6a249240fb706d58535dd1844fdf45c8739ba9d430afd17523042f93d81aeddafedb226c34</hash>
        <hash alg="SHA3-384">6806083c88d7aafc72c3869001e081afd3ad99a2d09e4f624a239fb81bf10562478f99d684ad4479d337cb4420cc938d</hash>
        <hash alg="SHA3-256">ac7bf441042441fa56d46bc51e07a88138c4d911c6b37e490cde0711eb8fac90</hash>
        <hash alg="SHA3-512">7c7df6a6bdc3e97f6cc3ef3e522669927fb3e973ca94cef85e7e5b4e141f9b10ce6d5a87ac785907f0bc570e9cd9333f4b85a4c52be8c72f6a14423b3aa11b53</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@30.0-jre?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@3.5.0?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>3.5.0</version>
      <description>Checker Qual is the set of annotations (qualifiers) and supporting classes
        used by the Checker Framework to type check Java source code.

        Please
        see artifact:
        org.checkerframework:checker</description>
      <hashes>
        <hash alg="MD5">4464def1ed5c10f248ebfe1bccbedf1a</hash>
        <hash alg="SHA-1">2f50520c8abea66fbd8d26e481d3aef5c673b510</hash>
        <hash alg="SHA-256">729990b3f18a95606fc2573836b6958bcdb44cb52bfbd1b7aa9c339cff35a5a4</hash>
        <hash alg="SHA-512">407d0ac59b02cbef7d93f25c8b287cd587232aa5ddfee6d2c7ba34d712565b0a5adfe52b5daa20d3e6c3ab1e7a5f8b08698078d9179185a1b35ada1eb92213bf</hash>
        <hash alg="SHA-384">01fb1d7a7440f807b2bdb697c709dfa5897edc0755152c0fef465cf77dd820623fccb410ad033e3d52d4b0bc57409ecf</hash>
        <hash alg="SHA3-384">626beff2173578c3a2ad732c81c48a9b091c9ffdea7d50f4b812fd14cd8299ab7a726b052808490b1022faca69aa6e91</hash>
        <hash alg="SHA3-256">4fbe95b196e75e549f66831e9b1f8f46cfe1793f4fda350857f5f24349d74af1</hash>
        <hash alg="SHA3-512">2c84365b1fcd16a765e49c5d8f30f28c3fe7cfe868ac32be726d8b9351c9053ffea23cfa1db9fb5c59c9928d22ad01c3c894d798e115bc446447228c7c4b24c6</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@3.5.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/typetools/checker-framework.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.3.4?type=jar">
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.3.4</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <hashes>
        <hash alg="MD5">67beeee58df00366100061c7da82f4c2</hash>
        <hash alg="SHA-1">dac170e4594de319655ffb62f41cbd6dbb5e601e</hash>
        <hash alg="SHA-256">baf7d6ea97ce606c53e11b6854ba5f2ce7ef5c24dddf0afa18d1260bd25b002c</hash>
        <hash alg="SHA-512">d48080d877aa121a7e46323f0af3581c583c6375ad3b4632332a63290c0a4bd454f908caf777448ba83288968d532fcdb5400ea2a84bc0549f4fd4c38a9bfd7a</hash>
        <hash alg="SHA-384">f034bbbaad111dc7935696875e09d103ae0e4d2e6ae1dab7f69cc93c6d1ebf48d73e7f42c5f7c0610fb43cf528c32049</hash>
        <hash alg="SHA3-384">dd8e705636f0ce876bb7d05cb94ffd233599f1e65e618c20a048fa9d1962c494c7c6b61b50cf0504d9db4021043772b7</hash>
        <hash alg="SHA3-256">6ea64e731417e1230c440c44f52fffa9b90682249b835e97ca9980ac76ea0742</hash>
        <hash alg="SHA3-512">9196dde8dbffc6e111d1b17c57709e453dc999e1f8d601cef8d8c1c9618ab1008ff80f132d139b47c3110cbcd6c4e8e565045e55ac43e5653517b0cf0069e2f9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.3.4?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/google/error-prone</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.bind</group>
      <name>jakarta.xml.bind-api</name>
      <version>2.3.3</version>
      <description>Jakarta XML Binding API</description>
      <hashes>
        <hash alg="MD5">61286918ca0192e9f87d1358aef718dd</hash>
        <hash alg="SHA-1">48e3b9cfc10752fba3521d6511f4165bea951801</hash>
        <hash alg="SHA-256">c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5</hash>
        <hash alg="SHA-512">adf6436a7a9dc6f64b97127861d7a89b78e82bea67f72bda800ef285163adcd84dbf006f679108a2a8c2eed013e0b771da2354087e0845479ff2b6318b881442</hash>
        <hash alg="SHA-384">bad8b9f52bf7a7e1d3974cb305a69c093fb32d2131539c18d34e471e3ec32bdd9dd136bb4b38bb14d84e99c562f208c7</hash>
        <hash alg="SHA3-384">8131aaf65f996cfa2c3f7d406caab3acf3e6650bcbbcd5595f8a457a211810ff110c1923876e068831a07388ddc26f33</hash>
        <hash alg="SHA3-256">a9e4179a6bfa8b363b9fd4f32f8892c4a7954ed1695d3f33ccef73ceffcaa1d4</hash>
        <hash alg="SHA3-512">9ecbc0f4aa9cff28d519cbf74c8234b5180ae6ff0d6de4efe2de126b3251d466a5ddb878e70b9968095a843c82721c93a4dec53bfe09e3700f4cfe2e38bcac0a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxb-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jaxb-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxb-api.git</url></reference><reference type="website"><url>https://www.eclipse.org</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.activation</group>
      <name>jakarta.activation-api</name>
      <version>1.2.2</version>
      <description>${project.name}</description>
      <hashes>
        <hash alg="MD5">1cbb480310fa1987f9db7a3ed7118af7</hash>
        <hash alg="SHA-1">99f53adba383cb1bf7c3862844488574b559621f</hash>
        <hash alg="SHA-256">a187a939103aef5849a7af84bd7e27be2d120c410af291437375ffe061f4f09d</hash>
        <hash alg="SHA-512">e3d846ff5f62ad9fef514f0726846c63d4aa74b2bb8f60c76258dba37701f83ae75872401071bf40da40697d43a8a6e36d08fa4ef39fe70797fb6f2b1712599f</hash>
        <hash alg="SHA-384">3e25702596eca7dd48f904b3985d64b4b394d162d3884a907d8b2ee647542808713a42a02f0eeff2c07518a206cc91cf</hash>
        <hash alg="SHA3-384">07196bf6c1ba4fe3e14e7690b521d3a156ee136a0b34d93f7a20d485c528c25ed5eeaec013172b08bdc63800fa94fe5d</hash>
        <hash alg="SHA3-256">5010f77dbc8c2a28269c7b5b662732ec4a01806f3af9af0b5a12882670303b6e</hash>
        <hash alg="SHA3-512">6e63931ef5638e4919b210ef3fffc731d3b91a34bd88cf4b4410e583e28d9e8652377b74dbdb63ba4b7b11b68ded509200737527412984c9d5bc6e5b4b938993</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaf/issues/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaf</url></reference><reference type="website"><url>https://www.eclipse.org</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.flywaydb/flyway-core@6.5.7?type=jar">
      <group>org.flywaydb</group>
      <name>flyway-core</name>
      <version>6.5.7</version>
      <description>Flyway: Database Migrations Made Easy.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">1c5e9f27f858860ea608a27314da2606</hash>
        <hash alg="SHA-1">58c28ead296b8e8152f2beae74ad468b98b3ec96</hash>
        <hash alg="SHA-256">e940146d5ea10512f43132c3c737a4362825476c07931410d63e636675d56588</hash>
        <hash alg="SHA-512">89d6a42356fdd49e24dcd71d16970dd6e6bf154a09ab8e6edc9f5d970631a717e2a3f633d3872b57c38ccdae18e673db192ab8a26a78e3c38fd69f22023fd606</hash>
        <hash alg="SHA-384">e48b9ad00802f06ec2ee7eefb0d798101027cdf9c826f3710b9c1314b9f3505ec7cb4a47396d0cbd0e655f154dbf2282</hash>
        <hash alg="SHA3-384">fa9e552efe51e68f5f4808a943ddb6a439a65d49fa3ce5c8fe5ddac5967d6e36fa68c7e572889cc6c16bb27a7dfa87e2</hash>
        <hash alg="SHA3-256">46fd1345182c0bfa1f999bf8608a82d171c0e9df0645075808618d2ba08e2fc5</hash>
        <hash alg="SHA3-512">0a1682345c9c910ee62a496777bf449e57030574fbc1cb8d08951b925c4fc91ee688379e57675cffb72fae209dee29fda8c0f9b04e9abeeb10d2a2305e58fe0f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.flywaydb/flyway-core@6.5.7?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/flyway/flyway</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.interceptor/javax.interceptor-api@1.2.2?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>javax.interceptor</group>
      <name>javax.interceptor-api</name>
      <version>1.2.2</version>
      <description>Project GlassFish Interceptor API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">d46f2dac1607941fbfb81eb7bc83157a</hash>
        <hash alg="SHA-1">b076d5887ff19f7311fd70cbe03fa3d3d8628a8e</hash>
        <hash alg="SHA-256">a4df5166bf344be3772f9cd81551ea1f03fe90100b1f6ed30713ea30740440b8</hash>
        <hash alg="SHA-512">0c949c10a81d3ac7310e18f14e5d1736d558ba0cbc06b82235efe60616a59225fabd523794eb542e95423f9e2dd86c56ce37740f482f8097509c94a568e2bbec</hash>
        <hash alg="SHA-384">f7d3d02f5f6f7607eca7e8bd4a461033beaa50dd9e6f017fc2a4c0650ec4540e9a5ca915aefb7aacbe1a764bfa6ada4f</hash>
        <hash alg="SHA3-384">72117f9570c3237668355982907ff3eba2627e434766826f0261999071b4e92d77fc7dac1b486aa86163c13e992a89f0</hash>
        <hash alg="SHA3-256">59cc4ce0f38a0711a5d35ed04dcdb8e5f95999d68adc2a049e2942d76e073eb9</hash>
        <hash alg="SHA3-512">b406864aee739a29e98811945efbf5d4e2b0e62a3f7eb81c587133911b25a418362fe325fa37e80e5dd01d9c8dd3d78a1893e359db61a8006e8c8b761a846881</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/javax.interceptor/javax.interceptor-api@1.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.oracle.com/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/javax.interceptor/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/javax.interceptor</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.postgresql/postgresql@42.4.2?type=jar">
      <publisher>PostgreSQL Global Development Group</publisher>
      <group>org.postgresql</group>
      <name>postgresql</name>
      <version>42.4.2</version>
      <description>PostgreSQL JDBC Driver Postgresql</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">22e07f2a7c4fa1100b341c29036c5a37</hash>
        <hash alg="SHA-1">974fecc1725156b7a646eca68656cbd945201d2f</hash>
        <hash alg="SHA-256">692b7e93f3a0e793d56138582aa2f8107430b8efce8c11faf44b0a20fce4890f</hash>
        <hash alg="SHA-512">7bdc8fc6c73cec9a192cc9163f31da7b462ec21009ab6ce3941e8c9b83a7bc805c2f23ef83908a4d855a1da8161587f0cf73afda99ab2e13026c1ba84861127a</hash>
        <hash alg="SHA-384">288bec2b4c1989b4c6cbda676b62ffae5e622323e123b8d9d6b756fb948aac1f80c5f241e27eaa472481e8d427bdfbcd</hash>
        <hash alg="SHA3-384">e1d1cc9f2c5affb374db23618edc70e3708bbe0be89c4d0d49e076de74a6833c4f597a60c51c2f6d979acaf54a035130</hash>
        <hash alg="SHA3-256">5a75945c06013f2cbc14df712f7e3fe29a8bce70eb4574ebb1dc1758b9ed7f53</hash>
        <hash alg="SHA3-512">1b39e3ff3aaa041c8a2696cf1919fa3cc326cafff9f83d88129346f8ac84a75dbd78697e6813040d82f349113f22d529a860bd3f1dd9186691042421c573718e</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
          <url>https://opensource.org/licenses/BSD-2-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.postgresql/postgresql@42.4.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jdbc.postgresql.org/</url></reference><reference type="issue-tracker"><url>https://github.com/pgjdbc/pgjdbc/issues</url></reference><reference type="mailing-list"><url>https://www.postgresql.org/list/pgsql-jdbc/</url></reference><reference type="vcs"><url>https://github.com/pgjdbc/pgjdbc</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.steady/plugin-gradle@3.2.5?type=pom">
      <group>org.eclipse.steady</group>
      <name>plugin-gradle</name>
      <version>3.2.5</version>
      <purl>pkg:maven/org.eclipse.steady/plugin-gradle@3.2.5?type=pom</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.build/gradle@4.2.1?type=jar">
      <group>com.android.tools.build</group>
      <name>gradle</name>
      <version>4.2.1</version>
      <description>Gradle plug-in to build Android applications.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">d115e8e4e8e963dd1986bf21b24e3cb9</hash>
        <hash alg="SHA-1">572d7e961572989ba62fa11f361d5e8c5669a417</hash>
        <hash alg="SHA-256">058d7c727442d3f2bbf325c52cf76d3490c5a2036b192390e3b972fc025dbcf8</hash>
        <hash alg="SHA-512">8f87ed8ada9c52b891ac18ae0fcf4f0dc12f8e11e689d69c2b2a564145bb92527e5eb9c8cd7b6262ade45164d52f58eafd0a7b5cda27057f486289d8930a2aa6</hash>
        <hash alg="SHA-384">3f5a4b140d58be3222b23a2d58c4ec551934d419127c82508b6df34e8ea9c5342ccb417786d94b19f46a5021f34cb536</hash>
        <hash alg="SHA3-384">05de6a89ac5509c23cd3168e3bb1f25e677a72129106228b8fc10389180a9efb78239e5d3efef48a3feba52f93a10670</hash>
        <hash alg="SHA3-256">e34143abce58f5f42f28257d9a5f325a5573b2b006d5a3f130496c88499ba48d</hash>
        <hash alg="SHA3-512">50ea882cf013217246147db0a37cf4b7e5b5a2aede11cf3c21a666194887a0d9c38da70c3e10b197e821ef9a8eb3591e8d81186a3c580e34fa33fec5cd127e9f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.build/gradle@4.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.build/builder@4.2.1?type=jar">
      <group>com.android.tools.build</group>
      <name>builder</name>
      <version>4.2.1</version>
      <description>Library to build Android applications.</description>
      <hashes>
        <hash alg="MD5">1c8cad9274380497ec7969a2b1dfe0bd</hash>
        <hash alg="SHA-1">f40605b579c3c348c2aa24f4cc2927cb32ac5a49</hash>
        <hash alg="SHA-256">7623c31b41671c49aa15d8775a1987d4f4bb54733571d5c3ec84aa1c7b67dc2f</hash>
        <hash alg="SHA-512">7ac77c5b5f1468317309a55331cff3f0ddd25e453c8cb03e7900881ef7fbad3e69debfcc056c330fa589179b3853929f81db4ff165d32a777c803668b848b977</hash>
        <hash alg="SHA-384">65a314ef05f30d742eaeee5e87999622c7a73caf96a5be0ed9ca8663f63770424895d98a004b147375443451a1f1b58e</hash>
        <hash alg="SHA3-384">000360f90d41166e799b9ff1e474650a62dd3f2233ae12f83dd15b19826b3d6409f02ed5cbf23e7de5a849e524b68865</hash>
        <hash alg="SHA3-256">6a2142af311183d79bffb3040b1eccdcaf7c0b26e00d62986956aa81dfdafe16</hash>
        <hash alg="SHA3-512">c8b65950926b73229310367903bc9e83d1066afc38064e710a4aa4c9129bec45f931dea679559fb0d104c89566516635c628d53ed8f3dfabce21eef5318601d4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.build/builder@4.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.build/builder-model@4.2.1?type=jar">
      <group>com.android.tools.build</group>
      <name>builder-model</name>
      <version>4.2.1</version>
      <description>Model for the Builder library.</description>
      <hashes>
        <hash alg="MD5">109ac8dd5a6712e6520e06263f75d086</hash>
        <hash alg="SHA-1">04f39d22c9d255667388c4fee54c1ec59688be37</hash>
        <hash alg="SHA-256">315dcbfc26b5da56d11b627b31ac82c9bfc02a95e656b9c4eb0fd633b15d64e2</hash>
        <hash alg="SHA-512">4803731256a9ca5f4ec41adff492926832898329db5ce751620c99cd7b55b916ba70527a415cd459a469df8ee0add362e800e90f856f26c12f459dfc5a7018d7</hash>
        <hash alg="SHA-384">f898c9099914f1f4d0df6ae527916b6de0bd38b75df4c0257cc70ac9d0b14ec306a608580f2b3d23be5960bcf4f94cf4</hash>
        <hash alg="SHA3-384">143e08ddaa171208edd8d3323ecbc3edf21d91410cec9c985cfc1ee1c65abc6f8bcedb22efc15aa8ad2fc22f83c5f5e0</hash>
        <hash alg="SHA3-256">9c732b3fa74269b061e83dea2c15def6a4968263c41e22b3aca2c76640bcd61a</hash>
        <hash alg="SHA3-512">bc17db378f8483ad2512eaae62082e06364f15f91d638fde281d9c4fb0168c817a07d9bd534a997d56a5d75ca079af249940ec55db2dc7394a29570987da3b53</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.build/builder-model@4.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.build/builder-test-api@4.2.1?type=jar">
      <group>com.android.tools.build</group>
      <name>builder-test-api</name>
      <version>4.2.1</version>
      <description>API for the Test extension point in the Builder library.</description>
      <hashes>
        <hash alg="MD5">40681fa1987e788b6ae973562187a9ad</hash>
        <hash alg="SHA-1">4ffccb1d6d40e885c50d548b1ef709fda8509074</hash>
        <hash alg="SHA-256">7daa32db5b483b750e3c36016443142825b46f867e4750f19d54da659552604c</hash>
        <hash alg="SHA-512">bc95979fa68fe71f099c009ce5877c657fd1e66655a0ff9941900b699053b5ecfc356aa42c142167474835746c6332244969c8e5b8ab3f70df735339bbadb4ec</hash>
        <hash alg="SHA-384">a254ead946b74dce0159a56ca66a2a4eaeae4d56ad799f119f406f2305dce434d9e36889d41401d64277e9629aa44218</hash>
        <hash alg="SHA3-384">9d62b2519208fe614aaabc6d39221eb04811c3d96a195fee4c8b5648e0e559c1f10e39f2eb7fb0195a6c9047b20e0c0d</hash>
        <hash alg="SHA3-256">87a4580f2129f107b58d9b1e7c96a574cb99e042640264d6e37dde929a651e58</hash>
        <hash alg="SHA3-512">c1fc3aed7964235ef1972df54d91ad452e239c96fdd746eb2a9ebfa45fb34e082cf8bef77a3f47ec742e8a88c07c1450f1071cc1f6223d52ea66e6ce4011c774</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.build/builder-test-api@4.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools/sdklib@27.2.1?type=jar">
      <group>com.android.tools</group>
      <name>sdklib</name>
      <version>27.2.1</version>
      <description>A library to parse and download the Android SDK.</description>
      <hashes>
        <hash alg="MD5">b05516cf63470a9c9a7a9ef29e50f20b</hash>
        <hash alg="SHA-1">6218ad99ca8df65a7a478545e41f6da405f9099e</hash>
        <hash alg="SHA-256">a25e87f7bc176f4afc254b12c9b798eb5f22c921ebcb09fcfc014786e2c87845</hash>
        <hash alg="SHA-512">d045d3896eb2fcfcdb55a2cd860ce66a3b3a3775e38a2a2654cb339ec4c541294628cca68d12bf8a9dd26175f6979495d4e17634368084d776b76d3e44ac7dd2</hash>
        <hash alg="SHA-384">60baedaa1b1d70a231bbd4ada043cc78c1dc73f4f79dd29ae00167e01eb1106c6a75f0f99112d1f6d3a373fbd0625cf3</hash>
        <hash alg="SHA3-384">87bbcca4afe77cbe996dd27c6f88c4a53e205543e164fea8242f3c0aba0bfff903048a65278497c417cdef75e4ce4095</hash>
        <hash alg="SHA3-256">593f0c9500b65c55f9e2a9412d31bc715356ffc9590fa627ea56bc62be8497a4</hash>
        <hash alg="SHA3-512">c731f552ce56693bfd139b7b68ad0178b53ad0da4c5d85e15cf2d02480b2c111fb24d5bf8c97f812a5106ede5c3db924b78142b910c478d9f548a7592b708a44</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools/sdklib@27.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools/dvlib@27.2.1?type=jar">
      <group>com.android.tools</group>
      <name>dvlib</name>
      <version>27.2.1</version>
      <description>A Library to manage the Android device database XML files.</description>
      <hashes>
        <hash alg="MD5">5282a74b447cc81f1f161480e7b9b352</hash>
        <hash alg="SHA-1">f65e54f58c599151d934f5477c89c2ab267a79c5</hash>
        <hash alg="SHA-256">00d012a78bc785327cea1c531332eee99c71e5746257dd006fb5793344caf2cd</hash>
        <hash alg="SHA-512">dc727b864e4a5d6e82586188c36a26041fd9056c90be6555510353f1bc34ef9497b8c44e647eac226ef4d330277a58c15da299db3b26b9353a15710feadf00d1</hash>
        <hash alg="SHA-384">8f2dfd0563c93087ff19924eb92971ed28104c1f94ff795f8c0ea43cfa3111538e01a7a9af86ee08110c2fa1380cb91f</hash>
        <hash alg="SHA3-384">908ffed81264da63c6cef0657ccc19f11e76b398be890fe2052824ca656caa8151a7b214da93f4b715561ef9b1e657f3</hash>
        <hash alg="SHA3-256">d3ef118c6b2930f786413fafd7991c73ad63e15f4cc0e58b7d9cb59b4e708354</hash>
        <hash alg="SHA3-512">dbfeb2972713ab3ff698e73227d05c787fe7685092067b4ccd50abaa44eb00794549ed9e4e40f279401b23d5b91f22a87b73799adb20ec6f45276a0da4b2704a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools/dvlib@27.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools/repository@27.2.1?type=jar">
      <group>com.android.tools</group>
      <name>repository</name>
      <version>27.2.1</version>
      <description>A library for downloading and managing package repositories</description>
      <hashes>
        <hash alg="MD5">78952d3a5c93f9afa0885161f9a5595c</hash>
        <hash alg="SHA-1">54de33de8655ac6a61f4b68a09276cf535ee3f29</hash>
        <hash alg="SHA-256">fcf13eccdf769380376f675595ab2ec527de9190137da252c896ff9444886ef8</hash>
        <hash alg="SHA-512">63e5182efe8b1b6d81c933bded30b88991f36bb87839123791fc1f09456cd8d193891693d0adba48adca7c513aa5ac1f97ae24e1dc2b2ee27aa72a5f8cb3b45d</hash>
        <hash alg="SHA-384">b16139d6e99d4d0784a98909744b1a2ca4af089a977008a5ab92392cad80009ffb9b1bed9a5fb82de09b4bda4a796312</hash>
        <hash alg="SHA3-384">721e3941f365b0deb8f22eded5552a54ce6bf9747667e4550d19af4f418c83aa83e6a138d8b66a6afc9adb677921de4f</hash>
        <hash alg="SHA3-256">04ec34d155f0c38371840b0d48ad5d9aa77cbfdb34e34969f5349556c7aeba50</hash>
        <hash alg="SHA3-512">ca71e0eeb2cf940b7debb46bc7c303e5141b3b6cbe5c5874be47e4196e2d8cd45087464a36be5fe1e3391bd742ee6ca3b11373ceba6132a6518dcdba68a0654b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools/repository@27.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.activation/javax.activation@1.2.0?type=jar">
      <publisher>Oracle</publisher>
      <group>com.sun.activation</group>
      <name>javax.activation</name>
      <version>1.2.0</version>
      <description>${project.name}</description>
      <hashes>
        <hash alg="MD5">be7c430df50b330cffc4848a3abedbfb</hash>
        <hash alg="SHA-1">bf744c1e2776ed1de3c55c8dac1057ec331ef744</hash>
        <hash alg="SHA-256">993302b16cd7056f21e779cc577d175a810bb4900ef73cd8fbf2b50f928ba9ce</hash>
        <hash alg="SHA-512">b4cbdd8fd1703e4b2e1e691db78fbcf2232d836f740d1821c4c191a14f9472508e27a40d06e4b6b153964af68032959c22945ba169a0ca4018b7748162f420a6</hash>
        <hash alg="SHA-384">7e64f03db2d4f9bacde713ca8aadfcf55e327d92b3cfa54b8cb2f2ffa0cc478d3c7e16f23230ae8266f0dace035142d4</hash>
        <hash alg="SHA3-384">b41aa6abfccc16e1f21760b4b3dbec7422f917fcd0c072d109c3024b1c40793820820940dfe07bfa50e00b47c3a0d504</hash>
        <hash alg="SHA3-256">ab6207acdd72036b3a5c6e647776b7466e089212602962d87eeb2ac1845508a1</hash>
        <hash alg="SHA3-512">e9fea84495f286e0f0ec1de6d002cae9e4676b0d2a9ac4706d155ac6d5ed515a76f3fcf0b8c22161f3cb456e048cce9171e3e42edc83888776173c8e2004a035</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/com.sun.activation/javax.activation@1.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.oracle.com</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/activation/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/activation</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.jimfs/jimfs@1.1?type=jar">
      <publisher>Google Inc.</publisher>
      <group>com.google.jimfs</group>
      <name>jimfs</name>
      <version>1.1</version>
      <description>Jimfs is an in-memory implementation of Java 7's java.nio.file abstract file system API.</description>
      <hashes>
        <hash alg="MD5">2a66dd6ae1115e7547be594d52ea7546</hash>
        <hash alg="SHA-1">8fbd0579dc68aba6186935cc1bee21d2f3e7ec1c</hash>
        <hash alg="SHA-256">c4828e28d7c0a930af9387510b3bada7daa5c04d7c25a75c7b8b081f1c257ddd</hash>
        <hash alg="SHA-512">a915da137c45e2ce1aca552b3658545a50c893c9dc971a1992d1e05b9c7901ee22d5b19f9489353ed4de149a8a72d150e1605ad164e52ce4ff97753969794751</hash>
        <hash alg="SHA-384">f6ceeefe9ca5151fca7529a2824a1e01b36c555bb1fee209b8699ae049b4f405cc6e52cd6954d086fe90d4c99606d043</hash>
        <hash alg="SHA3-384">9a0e89986f744b773e95a95a04ac023fc566bd3faff83262a5bc44b78d94f25d1a16bbf657b100078a55cfec2618dfcf</hash>
        <hash alg="SHA3-256">caf267439bfcec46c735cca54b5959a7404d2e23389b0e0eb047fb2c967cb66f</hash>
        <hash alg="SHA3-512">016f2eeec65f1ddc6e459cd22a29db84e01c9ad1b47ebf5cdee61a8fd5fa3f48043515d7cdcf0d36043cf879010278ca50b89ae92ff73d197aab1e0d19f1a2e0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.jimfs/jimfs@1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.google.com/</url></reference><reference type="issue-tracker"><url>http://github.com/google/jimfs/issues</url></reference><reference type="vcs"><url>http://github.com/google/jimfs/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools/sdk-common@27.2.1?type=jar">
      <group>com.android.tools</group>
      <name>sdk-common</name>
      <version>27.2.1</version>
      <description>sdk-common library used by other Android tools libraries.</description>
      <hashes>
        <hash alg="MD5">5d94b0da75417e7a146e82d57db8725c</hash>
        <hash alg="SHA-1">63928bf7ade493ec02d74295aa5b21c26a0c9cb7</hash>
        <hash alg="SHA-256">fcfe5fcc903e3a8037a53b3dd8ccf2ca021cd3e7b6820a1d289a7c20c427bcc0</hash>
        <hash alg="SHA-512">1e2422b865d88be07961714cbe8b9c66ad8674051f0dd0c9532f6fad592fa40692637a2d4bdaf639c051853124fabb7384cffe89ba32e7ffea3140a8005d6540</hash>
        <hash alg="SHA-384">c3b4c1be8bdc0d7132c3e66776de309e5be1dcc239b4295bd550ca161fd79352389ffa1b037c9bbc3c96c1e48f3105db</hash>
        <hash alg="SHA3-384">ecb0d1f3cb9d44d1ea074cd6e20449d99906f34156ed30308178fad0f735f2069c3d6dd48173d480e37c05aaa520da2b</hash>
        <hash alg="SHA3-256">436b41c427ffed000782a0b606000fa721b225729165c2425b017487836209ad</hash>
        <hash alg="SHA3-512">0d9d9624a5598302c10f3dd9762a6028853a38f6c3796f3f51bf271fdbce8b0ead2e5973b8c3e9f3d26ca21240fdbcb9a3ff7ed06e7fe437c20a022c9d325108</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools/sdk-common@27.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.analytics-library/shared@27.2.1?type=jar">
      <group>com.android.tools.analytics-library</group>
      <name>shared</name>
      <version>27.2.1</version>
      <description>Helper Library for tracking usage analytics.</description>
      <hashes>
        <hash alg="MD5">8d319baf0cdb8acf15d8cda82887a4a0</hash>
        <hash alg="SHA-1">a821362358ade7d43dce2934486c08253747427e</hash>
        <hash alg="SHA-256">1e88737c2d846d126479de3d487643fb7d1f154faabbf46afc6c87c95016bdf9</hash>
        <hash alg="SHA-512">e292afce707fabb9bf040b91bc716cce16b92c3be1d52eadf4286e66299833402d3df9d4d89d8c1d1e47693cb034bc80d9eac4af8d35a5961e202b5b6a9e30cc</hash>
        <hash alg="SHA-384">b4e3ba8e85d23cea7a760e225672086a4e3e16c2846eb7700021e97e2534d0d4ddbab2daa8c9e2f190b0fdc13eafd9f3</hash>
        <hash alg="SHA3-384">04ec9abbf37560a6a80930ab38a72bee9390108887d04bb0032d8a76646e0f60848fe88b97d6612c461da1bd48e7e0f2</hash>
        <hash alg="SHA3-256">99ffc47842a3ea6e8f0ffa13bed77a37f7065fbb068b1a86ada3be0208d5772f</hash>
        <hash alg="SHA3-512">749b4a51c764b501c6f5979d17225019b6116242b58ea92bbde1f1b3affa2a5bab34e6e14c36b1c5e8530a3342869d50ac661b40255b0eb95c33a3bd509dc6b3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.analytics-library/shared@27.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.java.dev.jna/jna-platform@5.6.0?type=jar">
      <group>net.java.dev.jna</group>
      <name>jna-platform</name>
      <version>5.6.0</version>
      <description>Java Native Access Platform</description>
      <hashes>
        <hash alg="MD5">3c345206c4f2243e5d1d7caceb9243cd</hash>
        <hash alg="SHA-1">d18424ffb8bbfd036d71bcaab9b546858f2ef986</hash>
        <hash alg="SHA-256">9ecea8bf2b1b39963939d18b70464eef60c508fed8820f9dcaba0c35518eabf7</hash>
        <hash alg="SHA-512">e55cb2eb60742d4a1de61e5d85b4c71d1a6769ef793b9cb5454ed1775ed593201e3c833e42ea033c99ee256217fde17bac5b93c8f12cbb90795c14956eb31d61</hash>
        <hash alg="SHA-384">84699857ef1cfa8fe2f28948ea9dfcad919baeb23b9f9924a4d892b6fd1f35a07dabef13dac94789a2819c6085068403</hash>
        <hash alg="SHA3-384">9b0eef31d59f23cb1edd2eae298627133dbb8e6c41dc9bf6b7ffcedde0f3d77d75855cf1ed7ca3f1c48a88d073847ae2</hash>
        <hash alg="SHA3-256">a97bc213427a2cc8099b5ea6db10ba9db07132db7320b92a9bf36ace8dcc57fb</hash>
        <hash alg="SHA3-512">5066f9068db1960ee9733c11cb5cd5975ec20c2742529985dca03931709329fd4e9df7d97074b5f2319756039e3b10804edd043836746c29a13d25ebfede2aaa</hash>
      </hashes>
      <licenses>
        <license>
          <name>LGPL, version 2.1</name>
          <url>http://www.gnu.org/licenses/licenses.html</url>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.java.dev.jna/jna-platform@5.6.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/java-native-access/jna</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.java.dev.jna/jna@5.6.0?type=jar">
      <group>net.java.dev.jna</group>
      <name>jna</name>
      <version>5.6.0</version>
      <description>Java Native Access</description>
      <hashes>
        <hash alg="MD5">56892d6f4d27019833fd53b7cc57ec86</hash>
        <hash alg="SHA-1">330f2244e9030119ab3030fc3fededc86713d9cc</hash>
        <hash alg="SHA-256">5557e235a8aa2f9766d5dc609d67948f2a8832c2d796cea9ef1d6cbe0b3b7eaf</hash>
        <hash alg="SHA-512">f250d92a70ef686466d44592a10513420dc6d6ec188e479f4ceb5ee6615505f3aad2941949364c89f09781b3f8bb09e0679f779ce81c1231f714f9a4f7d769ba</hash>
        <hash alg="SHA-384">5056dabe84e2923c4ed2daeae55808e4de01074c7251b5a3eaf0045dcbebfbf02618d116cb4841f3d3d6185929b4ab67</hash>
        <hash alg="SHA3-384">fdfdc50f3d2c6f8121ae9b12ec790c7a4c4e0cc45277324d429ed5da38969a8d9600367fa204a7ef12ed70f3e7ef219d</hash>
        <hash alg="SHA3-256">30d7f5e60e3deb930a6513bf2e94e4706ea7cad20e7e10acd7d6ce6a1d05459c</hash>
        <hash alg="SHA3-512">8772429dc8d2e68cd0de832a96ed76e39390d6d7f9e25a042cd5f4168a7faee8db79ea74461d023ad0d16980b40cc734a96bab760466d90a1a1c5f7f9e11e94a</hash>
      </hashes>
      <licenses>
        <license>
          <name>LGPL, version 2.1</name>
          <url>http://www.gnu.org/licenses/licenses.html</url>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.java.dev.jna/jna@5.6.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/java-native-access/jna</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jetbrains.intellij.deps/trove4j@1.0.20181211?type=jar">
      <group>org.jetbrains.intellij.deps</group>
      <name>trove4j</name>
      <version>1.0.20181211</version>
      <description>Fork of trove4j library used in IntelliJ Platform.</description>
      <hashes>
        <hash alg="MD5">5cc726d08f3d05f7a7cadd4c20c2de78</hash>
        <hash alg="SHA-1">216c2e14b070f334479d800987affe4054cd563f</hash>
        <hash alg="SHA-256">affb7c85a3c87bdcf69ff1dbb84de11f63dc931293934bc08cd7ab18de083601</hash>
        <hash alg="SHA-512">1c805efe0dd5700941d20f02d6ba8dd79c54bffe3b0147d82af9b7525dbdcc97eee5b3258cbce161a39a699c28574ba43ba401dbf3ad3d73600293146949d512</hash>
        <hash alg="SHA-384">a3ec0b67cec580f96e952cc33e184e49d78ec792c5d19ccecc306751ad14605affb709b4a0a95741029a985bfb41affd</hash>
        <hash alg="SHA3-384">5ceb87dc6783bd5148f011f92dcc6f79e0a894d3ea1cac1d09aeec9ebdd210917c612e9f3081c71eabe6f90ddea6974a</hash>
        <hash alg="SHA3-256">ed4cb3c40de4ff800cfb0865696ea8c84a8d126539ca78c7135b896bf3c1b047</hash>
        <hash alg="SHA3-512">9629c8aa2822a3bb9273f146a6a57eedbfa4909c458412d818eada71bf707067e9bfe5909f72144a4b28913da3914a43ede05cae697fb1b897faf3b537c83e05</hash>
      </hashes>
      <licenses>
        <license>
          <name>GNU LESSER GENERAL PUBLIC LICENSE 2.1</name>
          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jetbrains.intellij.deps/trove4j@1.0.20181211?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/JetBrains/intellij-deps-trove4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/xerces/xercesImpl@2.12.0?type=jar">
      <group>xerces</group>
      <name>xercesImpl</name>
      <version>2.12.0</version>
      <description>Xerces2 is the next generation of high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces introduces the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program.

    The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual.

    Xerces2 is a fully conforming XML Schema 1.0 processor. A partial experimental implementation of the XML Schema 1.1 Structures and Datatypes Working Drafts (December 2009) and an experimental implementation of the XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010) are provided for evaluation. For more information, refer to the XML Schema page.

    Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1.

    Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.</description>
      <hashes>
        <hash alg="MD5">b89632b53c4939a2982bcb52806f6dec</hash>
        <hash alg="SHA-1">f02c844149fd306601f20e0b34853a670bef7fa2</hash>
        <hash alg="SHA-256">b50d3a4ca502faa4d1c838acb8aa9480446953421f7327e338c5dda3da5e76d0</hash>
        <hash alg="SHA-512">e9d62dc311df808f88ac63b427bb40567c19cec618a33d0a9c7c830b1bb7c64dae263a5ee6c824d8e51a63cd24f49fe2ef4e2563d6e6aa0400f63e9bb35dce97</hash>
        <hash alg="SHA-384">4638b651e5f29f0e82dfa308924859f707ba7877610688710dd77c5ae5e53e3e4a3168f962bb3d985f4e5b9236776988</hash>
        <hash alg="SHA3-384">bdcedc76039beedc082ca899f067b091d31dd98544bba2e79f0841dd51833ba27641eb0cb268356b1e291e7ae8a99396</hash>
        <hash alg="SHA3-256">0288ce50309db0b4e1801962cf13db0f3c9bda069b904710daebaa162fb37828</hash>
        <hash alg="SHA3-512">092f009fe5dc0238d8df05f35138017570097932183ee7b08aa039bd112877f47e0bcc73550de390a54c3a09539e8ba02404a2e9bb11148e6d45938383252dd8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/xerces/xercesImpl@2.12.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://svn.apache.org/repos/asf/xerces/java/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/xml-apis/xml-apis@1.4.01?type=jar">
      <group>xml-apis</group>
      <name>xml-apis</name>
      <version>1.4.01</version>
      <description>xml-commons provides an Apache-hosted set of DOM, SAX, and 
    JAXP interfaces for use in other xml-based projects. Our hope is that we 
    can standardize on both a common version and packaging scheme for these 
    critical XML standards interfaces to make the lives of both our developers 
    and users easier. The External Components portion of xml-commons contains 
    interfaces that are defined by external standards organizations. For DOM, 
    that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for 
    JAXP it's Sun.</description>
      <hashes>
        <hash alg="MD5">7eaad6fea5925cca6c36ee8b3e02ac9d</hash>
        <hash alg="SHA-1">3789d9fada2d3d458c4ba2de349d48780f381ee3</hash>
        <hash alg="SHA-256">a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad</hash>
        <hash alg="SHA-512">8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268</hash>
        <hash alg="SHA-384">bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce</hash>
        <hash alg="SHA3-384">c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace</hash>
        <hash alg="SHA3-256">09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc</hash>
        <hash alg="SHA3-512">1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>SAX-PD</id>
          <url>http://www.saxproject.org/copying.html</url>
        </license>
        <license>
          <name>The W3C License</name>
          <url>http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip</url>
        </license>
      </licenses>
      <purl>pkg:maven/xml-apis/xml-apis@1.4.01?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/bugzilla/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/xml-commons-dev/</url></reference><reference type="vcs"><url>https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools/common@27.2.1?type=jar">
      <group>com.android.tools</group>
      <name>common</name>
      <version>27.2.1</version>
      <description>common library used by other Android tools libraries.</description>
      <hashes>
        <hash alg="MD5">b4bcd47cad27c5ff049acdd765cd13c7</hash>
        <hash alg="SHA-1">59809f064b774204b35635db19f97a79e64588c8</hash>
        <hash alg="SHA-256">54fb5c771da68137e91a2a474d896efe2797cbeab69d6f449f60e4edc8f42f46</hash>
        <hash alg="SHA-512">bc7eaa199c4e399035ae622148b90b1285d7fbb6c1fb2ad97920c7a9ecd78055d5be4d991d1a6a1d37f0a79df9f0c17f7dce1004ef529e13fada23d7f112f204</hash>
        <hash alg="SHA-384">da84754933e4038defd7b33cc2ba8168cae457e861a5ff275c1f3e68cc56ec3b2c81128149acd928149f07d4cc061157</hash>
        <hash alg="SHA3-384">f5e5e811ddfe680c70a194182b0938f5cbf535edd9c7cae8060ad22a6ca2f40fc053bbcddd3b18ec8a5782edb64adc55</hash>
        <hash alg="SHA3-256">e805ee4297ea1c1f63632283aa0acf96fbdbd70812004c4ab0dfe397fe6aef38</hash>
        <hash alg="SHA3-512">b2cc8fef462d6c2af4ee4da9ae9d95dd76a6ddcb765e3727465d458c4718f21fc932040c906678ebbf28afe2ae9446df882abfc0929c260ad28d62b2416b2ebb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools/common@27.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.build/manifest-merger@27.2.1?type=jar">
      <group>com.android.tools.build</group>
      <name>manifest-merger</name>
      <version>27.2.1</version>
      <description>A Library to merge Android manifests.</description>
      <hashes>
        <hash alg="MD5">fa4ae1187ce5c1f99964dfd1fca28ef1</hash>
        <hash alg="SHA-1">79540210e63306f1ed4abe6ebed3e4e9359f0f19</hash>
        <hash alg="SHA-256">cde7e801b72b798611ba33e384734452bf997ea599b75a3ba4c7476e3702f6aa</hash>
        <hash alg="SHA-512">75be119f745b132aa4ef4a8e59aea18bfa99afe9331b894a5cba9ea90170ba53d5702ee1bdb1f8db163181b522966f2f70de26f57a64bce5e5f192b36c166301</hash>
        <hash alg="SHA-384">4aaa4a4c0c5953bac4b0198a0d39858593790e2d1e470c59ebdc02e99e7865240a85b47d68bf2bbf32a4ad7364b72ff4</hash>
        <hash alg="SHA3-384">9628b987d9dda7d74c71b6cb8bb8848afde5978f552569272130dc6401c009fb9479a00c864d986ce0fb49365b5d6cc4</hash>
        <hash alg="SHA3-256">7df462370d5e4a679b2acd9b310e4451df006d82763dc6bc99e46311711fb2ab</hash>
        <hash alg="SHA3-512">d287cff1cf023592dbd0b3d61bf9c7074e9b0d91c4024622e78e1a107aeaffe6faca2c1df1d4fb6b23d253a47073e78bb020b1e9959d5a26ce01c6868a7f496c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.build/manifest-merger@27.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.sf.kxml/kxml2@2.3.0?type=jar">
      <publisher>Stefan Haustein, Oberhausen, Rhld., Germany</publisher>
      <group>net.sf.kxml</group>
      <name>kxml2</name>
      <version>2.3.0</version>
      <description>kXML is a small XML pull parser, specially designed for constrained environments such as Applets, Personal Java or MIDP devices. In contrast to kXML 1, kXML 2 is based on the common XML pull API.</description>
      <hashes>
        <hash alg="MD5">04a03b3a4f1ef0e3fda28bf1792e2ee7</hash>
        <hash alg="SHA-1">ccbc77a5fd907ef863c29f3596c6f54ffa4e9442</hash>
        <hash alg="SHA-256">f264dd9f79a1fde10ce5ecc53221eff24be4c9331c830b7d52f2f08a7b633de2</hash>
        <hash alg="SHA-512">f97d418d4c2892fa184f5be83166ac2cd771fd10d7625104d9b054ec0ff361927a2ac2539d38f326f61373b6d700a3b5075605763562ac0ae6714903773cd1cb</hash>
        <hash alg="SHA-384">961f81219fe04900852844c5d86f5ccfb816fb70cce2032ed63048477ab571e2fc9153283178a86704d1f4ff91015d37</hash>
        <hash alg="SHA3-384">95518ac11af688c996dc4e61ad6dce3ef516bb418d379a8b3e988676f5fcce154b74a094fab509f159213207d8854e9b</hash>
        <hash alg="SHA3-256">989bacf9f120cc10c10b0c7f885de3d3e98aac3064644d793e28adbaecfaff2d</hash>
        <hash alg="SHA3-512">a0b211754ffef3b458e5a1df916df62990f7143379aee14815b2986d40a809e36b9c22e23af401eed5297d11e7b9a24a3c60590f1dc8dcf93cc1656d631d2c39</hash>
      </hashes>
      <licenses>
        <license>
          <name>BSD style</name>
          <url>http://kxml.cvs.sourceforge.net/viewvc/kxml/kxml2/license.txt?view=markup</url>
        </license>
        <license>
          <name>Public Domain</name>
          <url>http://creativecommons.org/licenses/publicdomain</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.sf.kxml/kxml2@2.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://kxml.sourceforge.net/</url></reference><reference type="vcs"><url>http://kxml.cvs.sourceforge.net/viewvc/kxml/kxml2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.ddms/ddmlib@27.2.1?type=jar">
      <group>com.android.tools.ddms</group>
      <name>ddmlib</name>
      <version>27.2.1</version>
      <description>Library providing APIs to talk to Android devices</description>
      <hashes>
        <hash alg="MD5">f53ba8bac306911a77160b4703dd50a4</hash>
        <hash alg="SHA-1">f8fa36cfb13aa6f5b682f250f03a94393fe9e98b</hash>
        <hash alg="SHA-256">757b43f32f4c2a57fbc4bfd34e4100be808fcdda240fcba812edbb6702a2b668</hash>
        <hash alg="SHA-512">aa4668fbf3e805758e5d4d002c9b5dcade1398d3961fa4d63ddadc5c08c8e5a1d281ad80f55dff91ad55440acea3812a1ab680913707f4007f94a8d04c29d33a</hash>
        <hash alg="SHA-384">632ef15581b2ef54ce85cdc6e200bad5435e6a4e69bd3b74e22725e737c2926f6dbddf64ed6db0b58a6e7a04781eb34c</hash>
        <hash alg="SHA3-384">89390c1b2648c5990ef1f84f763ee7320d4d0bab94c3c337a78913bbf95748bd87fc6b49e8630514ad2565591aac2889</hash>
        <hash alg="SHA3-256">030c4d8661265a653a61348b09a744a44264b29f5a1921e72562d1eb711e381b</hash>
        <hash alg="SHA3-512">538ad751e1bedb16ff9edbf15653a619b488f73def0d617aa84d0ef6bff0c87c70853ec85d406a6d90164dc62b8a20e9f7968bb3b8b8c9bbf530b7cfe7e22e22</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.ddms/ddmlib@27.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android/zipflinger@4.2.1?type=jar">
      <group>com.android</group>
      <name>zipflinger</name>
      <version>4.2.1</version>
      <description>Library used to build and incrementally modify zip files</description>
      <hashes>
        <hash alg="MD5">b626a12ecfb819c3e704c2ee6fd5c265</hash>
        <hash alg="SHA-1">9005c12d9c9ab8f1981eb9c270464ed995d29d6b</hash>
        <hash alg="SHA-256">a00f8e0126c19695c779971ea8ecce9374cb696cc78fce62028749938ba461ef</hash>
        <hash alg="SHA-512">f279684a60d6c4a42d2f27e8e045b872cabeb28494fe1713c865dffd9453edc8df66563f7ed77943d0e6660bad57d87bb4a5466c9ce01fa0d9af2c352246fc68</hash>
        <hash alg="SHA-384">7ffb6ba1b705c0c459adb24333006251c8b273a39f0a79788bf6d28d01e9540d0465984761ca3aaba0a6860c3d87d610</hash>
        <hash alg="SHA3-384">cb948e6ef357248f74bffc17c1b2365bde2ffaca7c8477391417b4ea4a4c92ea62bdcb65da553ce9aec97b7b809e16e8</hash>
        <hash alg="SHA3-256">4127af18f367a89d75e28f55e9690a0afe3d3bb223e9bbfa703494a809fe99a7</hash>
        <hash alg="SHA3-512">28439728d7b43cc4b41b7057e1801cfa8e28c502b2a525a2662abc579e0867d16640955d7fc9f381d63eb3bf1acdf07c96eafc785b294c02cf42fa4cdef56cbb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android/zipflinger@4.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android/signflinger@4.2.1?type=jar">
      <group>com.android</group>
      <name>signflinger</name>
      <version>4.2.1</version>
      <description>Library used to sign APKs</description>
      <hashes>
        <hash alg="MD5">ac51698392ae64ece02635621e0148fc</hash>
        <hash alg="SHA-1">748d78d00ab3a432f7dc7511c51807219441448d</hash>
        <hash alg="SHA-256">90ddb3e00cbeabff00fc014947a4de2504567e43eafabdb0f920c99d9ee29572</hash>
        <hash alg="SHA-512">ca24f635d4c17590bb9c1f9a1ca65a14721f8a5bacfa2a874c715f6ac11b46f973d518337a6d90b1e51f1761469a4c0edc32e12876076589d9971746efc11ed2</hash>
        <hash alg="SHA-384">8830624b30b083f944bfd6feb2dbca81443525dd1286232780cc5f4addb535ebf4edbe81c6ab73b4f3f2b7a1614b4fb2</hash>
        <hash alg="SHA3-384">d15d80ba654e973ac804f88aa75141d8f5d30f971bde442b22d11f489128f9f5e8ee4d85c01f25ec2f167bafd4d4d44b</hash>
        <hash alg="SHA3-256">b0552a842e7cf3165dfb6535836f4e8313a76c1c270f1c150703dc0d1b993a1e</hash>
        <hash alg="SHA3-512">9a9b7f7cf3d9f0abfecf521c4b5612751526ac82bb04251ee119641965582319aa766eb9e9333bb13f6e18bc733e1db77702921742235e1afcce096c5d586752</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android/signflinger@4.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.analytics-library/protos@27.2.1?type=jar">
      <group>com.android.tools.analytics-library</group>
      <name>protos</name>
      <version>27.2.1</version>
      <description>Library containing protobufs for usage analytics.</description>
      <hashes>
        <hash alg="MD5">4ded4cb485fe6b4efaca069a3256a8fa</hash>
        <hash alg="SHA-1">45417b17a24015da5e888d0480014da3132d08e0</hash>
        <hash alg="SHA-256">1ce0868dad3694e63f6203777444f36c335737a5836dda91e81185baa843c1db</hash>
        <hash alg="SHA-512">c76b83bd4e702a7cc404e9d1e6d98064a9cedd08e5d70caae496d760fe8f5d3ad99e28de64a2936ec2ca32e23e9dccea000c229651fc896b110cc39e666b210e</hash>
        <hash alg="SHA-384">b36946a2fb0c5dd1839f4324184fce0f9bacc72e266c4ce7291a997e0147d5becfe3b29fd25f63d82cdc80b4d0a03e64</hash>
        <hash alg="SHA3-384">349530bc1a06c5c04c1cebb7513c5c884359f6e6356635d9d937a9579f960ca68483fd5471f33956c4ed6d5c31c73d35</hash>
        <hash alg="SHA3-256">65e9b848158b887b39a0a2b9507ec50b5719fc1bd6745909c25381231abbbfe2</hash>
        <hash alg="SHA3-512">a0035744c328d618c50efb8cae100d10558be5d5dd0166b80641c6b50a30b39791991c9b2b22dd4854b9d844414f1e64f050f22a86260768bb025c3b3dbfcc22</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.analytics-library/protos@27.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.analytics-library/tracker@27.2.1?type=jar">
      <group>com.android.tools.analytics-library</group>
      <name>tracker</name>
      <version>27.2.1</version>
      <description>Library for tracking usage analytics.</description>
      <hashes>
        <hash alg="MD5">39c00a5b733841a5a579f8f746940e9f</hash>
        <hash alg="SHA-1">1e7d97d4c33cfee548c98e53964e8cb3a83f2b8a</hash>
        <hash alg="SHA-256">1beca5db6495219d8924cabc5704a1e097eccc627f78bd764985bd3f7a174e5c</hash>
        <hash alg="SHA-512">1be037303770db645278db53d94861b7465d924056b81aac939978b3592087d8ab40bf630db15054476fa3c20825c806e5b43ad009ecf1d0d1498c5a54e40082</hash>
        <hash alg="SHA-384">1146a72022fbf72701d0c82674958b928acd934fac6afcd523d40850ba2ff12a35ccd3b41ad618ea82686757390aad3b</hash>
        <hash alg="SHA3-384">026b1402f0a60b1f2a5bdb7b9373f3959cb31d60fb5f94f5dc020449cc2a329991518db927f94e4141ca32c15973a2db</hash>
        <hash alg="SHA3-256">53df591ace2129e7aa1848c8c83eef534eaa5e8f6885f228afa1c7e6ca72ff78</hash>
        <hash alg="SHA3-512">46d6ecfec7e7ecf111b85a7d6dfaffa2093f15b150cdb709e3b81cdb421baa03d86af5432f319058a8c8fe4555b0e0f2d534c465460107c13c938dc92aafac40</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.analytics-library/tracker@27.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.build/apksig@4.2.1?type=jar">
      <group>com.android.tools.build</group>
      <name>apksig</name>
      <version>4.2.1</version>
      <description>Library for signing APKs and for checking that APK signatures verify on Android</description>
      <hashes>
        <hash alg="MD5">b5ccfb5bf162f18f39d0efeb0f260f08</hash>
        <hash alg="SHA-1">a41647afcefced7a855fd1616db37f1c9574990e</hash>
        <hash alg="SHA-256">d8ea8eb467d310850fa80bbcc2b0f9daa8ceec1d1397d26a282f0b1f79b76c89</hash>
        <hash alg="SHA-512">2becc4b72ae3fbddf590ad83a4a085d2906a0b5dbcd431a12a9e8f4d24afff6a2fc97757613e2224ecd76a4c224856c3d622f1cb9fa013bf643ae46e03b756a8</hash>
        <hash alg="SHA-384">2fe95b5c4e5afee92283d17fe9b9b5b659197d2ea48dac459edd26b75a223aaf2a736a6fa43d686e5b82bc526d775fc8</hash>
        <hash alg="SHA3-384">7f8c8f93dc45eb7f29e823acfa42c38e9ebcea3bc1fbea4cd3d029257571054b870f55864f293c4a68c8a8c5cf202c96</hash>
        <hash alg="SHA3-256">2c335fe3dd9fe156402a096f69c3b99b9b7509da2eec4795169c6d2d6e154f45</hash>
        <hash alg="SHA3-512">b853d204105a396cf52235ff0518fb93e5e69e3b6ea7aa1951701400ba72ebdee97c194b668f572898923b9cf080f337974123deafe10aa3fb7aca0a4aaf020d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.build/apksig@4.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.build/apkzlib@4.2.1?type=jar">
      <group>com.android.tools.build</group>
      <name>apkzlib</name>
      <version>4.2.1</version>
      <description>Library used to incrementally build and sign APKs</description>
      <hashes>
        <hash alg="MD5">1682371408feea87f9db8eb242134351</hash>
        <hash alg="SHA-1">a19c241e678e42a5bc3ff3a206c76f8438a3f4db</hash>
        <hash alg="SHA-256">3278f75167831fab7108f181f9aee89b2fde7d4c630d553ddee30f275701a0ba</hash>
        <hash alg="SHA-512">6f05bbbe86e8686725945e842e8aaefbe7f943504ed82cfa1e3fa3730f8fe05584532a682dd9a563b5dee456a931eb055aa17b12fdacc70f1efe88bd3efc29c8</hash>
        <hash alg="SHA-384">16cbbca10a77a4ad3b0eb4d9511b914377da7bdd18576c987f109d1d6a4f59ef781425533f136b7abcbe16a3cabba29e</hash>
        <hash alg="SHA3-384">6e85e16d2a9ad91ef5a6eea60d4a766122e408d43542826dfbe15eb237dc542c36b5557adde637713e97374f4fcdd628</hash>
        <hash alg="SHA3-256">76803ec66e5aa819de80982bb1ab38234a575d2cb555abebd3cef731a36b7243</hash>
        <hash alg="SHA3-512">7019f49eb3b8b22f6b0352ddb7a81de6e22dfb5b606d3902ec33e6d026596141117628a7f4ba77b8fde2e4c2e2c6558b5db50c8254e8f0bab5585080e7155a2d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.build/apkzlib@4.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.squareup/javawriter@2.5.0?type=jar">
      <publisher>Square, Inc.</publisher>
      <group>com.squareup</group>
      <name>javawriter</name>
      <version>2.5.0</version>
      <description>A utility class which aids in generating Java source files.</description>
      <hashes>
        <hash alg="MD5">900f1a447597237cabd9896fb5cd8db9</hash>
        <hash alg="SHA-1">81241ff7078ef14f42ea2a8995fa09c096256e6b</hash>
        <hash alg="SHA-256">fcfb09fb0ea0aa97d3cfe7ea792398081348e468f126b3603cb3803f240197f0</hash>
        <hash alg="SHA-512">0d1df927a41b762b30bdc520ae6ea465ded1385a2b0a0d91dfcac8c0d87388089d8a881361060d1df0fe833944864fc23f9fe38c30d9ce106cc3e846f072dcf3</hash>
        <hash alg="SHA-384">7be18e96bfe57056df5fbd791b0d3ee958d999015ec358f2c325eb92af86830867510a578925273d66b080658c674eb7</hash>
        <hash alg="SHA3-384">b40feb9b4496bd3017141753c166154cc73d6ce843e3b3abfa8c8eaadc11b5b3e625b1686a799b650741bc06fa747570</hash>
        <hash alg="SHA3-256">b2bfdb25026df4b92efeca51f45c28371f54d960c8ccfbb76ae5b9e469f5dc19</hash>
        <hash alg="SHA3-512">068ccb766b87c7637f12ae383a69f41626325ce4c2796bf445f73cf3ac7b75ad2bf43a4184ac2d592f763572370fafa9431e513d024f88d387ad9bc90db53ddd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.squareup/javawriter@2.5.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://squareup.com</url></reference><reference type="issue-tracker"><url>http://github.com/square/javawriter/issues</url></reference><reference type="vcs"><url>http://github.com/square/javawriter/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.56?type=jar">
      <group>org.bouncycastle</group>
      <name>bcpkix-jdk15on</name>
      <version>1.56</version>
      <description>The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 to JDK 1.8. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.</description>
      <hashes>
        <hash alg="MD5">17b2b704b3ad9b36a6fca1ace60a2a06</hash>
        <hash alg="SHA-1">4648af70268b6fdb24674fb1fd7c1fcc73db1231</hash>
        <hash alg="SHA-256">7043dee4e9e7175e93e0b36f45b1ec1ecb893c5f755667e8b916eb8dd201c6ca</hash>
        <hash alg="SHA-512">6cbc73005b662440c395d81d44d0f52a3e20550f64be3d4fe413c344257c6ef31f8080421b247273f8be42e724de370b1f1b2f0dae58a47010ef4c890d8cf5b8</hash>
        <hash alg="SHA-384">8147d3692b03ac84ccdd20f8ff7f3d319583434ad1a0178ab31d6433a3ed11c6e05967b26bbaf0420f400a32fb5941c5</hash>
        <hash alg="SHA3-384">899934416d5f5c3cfe0377b41d1403730c760b6d9edec6079e73a70ec8b92616055c37fb1fee3b227a6dae360cd9cc65</hash>
        <hash alg="SHA3-256">e57c428533d3222b66f93c6bd530ee3bd0e4584c32d5ad50424072f6e8de2d98</hash>
        <hash alg="SHA3-512">a6f07a263da0a69665d916d9b41f42d74061630c5ff83e8c407fa3b9aa47708c23a0a3c3c2b9f953af66b60374556c8e89eed2bb7ff3176fc4f603f957f0fffa</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>http://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.56?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://www.bouncycastle.org/jira/secure/Dashboard.jspa</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.56?type=jar">
      <group>org.bouncycastle</group>
      <name>bcprov-jdk15on</name>
      <version>1.56</version>
      <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8.</description>
      <hashes>
        <hash alg="MD5">3c1bc7aaf3449308e34296546078d9f7</hash>
        <hash alg="SHA-1">a153c6f9744a3e9dd6feab5e210e1c9861362ec7</hash>
        <hash alg="SHA-256">963e1ee14f808ffb99897d848ddcdb28fa91ddda867eb18d303e82728f878349</hash>
        <hash alg="SHA-512">47e5f73d2b66891cf21412b807481fff4b1a844ff247ba170e7bab25a7f6303cbd5ada22e7382ba20ee344d8cc3a1909a3d255f4b24defe9357523b4a122db68</hash>
        <hash alg="SHA-384">c9de4efe55d8737d5c84e7253cabe2de7b7d72180ef4c0a645ede19f627d3ebce7c0c4f19e51412b7e0a16d6c6255d32</hash>
        <hash alg="SHA3-384">ef69f74fbf1f5416c90038f07aad6aa83e60932cf8a31400554e0380c134921ed8638528b4339edd5e8b7d1df4f62a3f</hash>
        <hash alg="SHA3-256">ab4e77030ace3c79f45602cf94baf81ae18305ae83037c5a37077a752cb5bfab</hash>
        <hash alg="SHA3-512">24ea4d76cc78baecafd8baeae0e201201463d920c102fe20f8dd29ff307785194dc27323215dd24680b77bbb1e65841f8150f047a3b8f007c9b04f4860b4a181</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>http://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcprov-jdk15on@1.56?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://www.bouncycastle.org/jira/secure/Dashboard.jspa</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/it.unimi.dsi/fastutil@8.4.0?type=jar">
      <group>it.unimi.dsi</group>
      <name>fastutil</name>
      <version>8.4.0</version>
      <description>fastutil extends the Java Collections Framework by providing type-specific maps, sets, lists and priority queues with a small memory footprint and fast access and insertion; provides also big (64-bit) arrays, sets and lists, and fast, practical I/O classes for binary and text files.</description>
      <hashes>
        <hash alg="MD5">74803ff50bd95b5d1e55a2879a5e70e8</hash>
        <hash alg="SHA-1">60fbeaa50799581f6244fcff1cebba0353ec0141</hash>
        <hash alg="SHA-256">2ad2824a4a0a0eb836b52ee2fc84ba2134f44bce7bfa54015ae3f31c710a3071</hash>
        <hash alg="SHA-512">59a2782979d20fe990b4f3c12e167b7d617385a5bcde8100f3dad8fb3390204407b0edbafd83b5cb6ee0b128d4c8c315c037cbe22d99cefd7a7bd065331fad80</hash>
        <hash alg="SHA-384">36ded3097425e4665010cb4145516524ddbf5ae18934b9650563c542875a92567cc228855a0aec80835cb75900979c22</hash>
        <hash alg="SHA3-384">a8ef18863cbed03a345d801bc0a155e0d3ef25caac3368005bbd3514861408375264a2144871e6502666770c3efc4662</hash>
        <hash alg="SHA3-256">099ece8d91ceb106ae05884d95e41c1d191fb9ccd55ab49e8c7ade85369581f7</hash>
        <hash alg="SHA3-512">11665d273d344d0eae5434eedf574577014685464b93fa454bce4fbb00358f88040cfeeb821761f896844609b3d5e88bc516f60831f07561941906159647a987</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/it.unimi.dsi/fastutil@8.4.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/vigna/fastutil</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.googlecode.json-simple/json-simple@1.1?type=jar">
      <group>com.googlecode.json-simple</group>
      <name>json-simple</name>
      <version>1.1</version>
      <description>A simple Java toolkit for JSON</description>
      <hashes>
        <hash alg="MD5">eb342044fc56be9ba49fbfc9789f1bb5</hash>
        <hash alg="SHA-1">5e303a03d04e6788dddfa3655272580ae0fc13bb</hash>
        <hash alg="SHA-256">2d9484f4c649f708f47f9a479465fc729770ee65617dca3011836602264f6439</hash>
        <hash alg="SHA-512">f9caafc041eea982d5ba266482418dca05d46fb992bef3f076a83d564765083a0870e30f68e7c6fc8c80ebd3c88b087eecd2f8455c12daaf7db3b5a975b622e4</hash>
        <hash alg="SHA-384">8b08037bb87aef9ba1d6236332834b6ab24602084097f10416de8b40e14a0d2108ec0fa877348655b8ccdc3598d47341</hash>
        <hash alg="SHA3-384">b7d5578beb966f002e851c9bcda5fc487e0c2cbeb14e49fea7ac3b02ad9ff5636ac9e16abb017c6a841b68eca52d2413</hash>
        <hash alg="SHA3-256">ac4609e5fae460fc0586b14c6171e4f5e738ea25c6772a279bd0e21e1efcc95c</hash>
        <hash alg="SHA3-512">4a80925f23a26e7a91e94bc28c6c6e5e5bc5e633842f33b4ee0eed8402f76d41f3a89d0761719bf2b9c964b64aa900bd7c53d0d972c15a7a6fdebef8b6b62266</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.googlecode.json-simple/json-simple@1.1?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.build/aapt2-proto@4.2.1-7147631?type=jar">
      <group>com.android.tools.build</group>
      <name>aapt2-proto</name>
      <version>4.2.1-7147631</version>
      <description>Android Asset Packaging Tool 2. Protocol Buffer Files</description>
      <hashes>
        <hash alg="MD5">71599b12725f8a7aaed120af50657ea7</hash>
        <hash alg="SHA-1">5b444efbd34ad1dc57615030de678423d6df7bf7</hash>
        <hash alg="SHA-256">1c315f59f7f9a1f0b479d59682880e6c6968bd7df41ddac4cc30b6c16e31b8b5</hash>
        <hash alg="SHA-512">89c2d52b9be94b9b8c3e796b45123a52a3c4aca3806e409c6e7f1d1b257160699b5f84383fb2e2413dcc20e96311beb516f89c0f54d067ad7a6814fe86ad7101</hash>
        <hash alg="SHA-384">95cdada06451bfaf45e8c63ed5bbf8d37e51996c4bcbab26e474eebe9ad4ddc53839eac44e73eeb3f44734cbc7f3e0a7</hash>
        <hash alg="SHA3-384">5e0e0d44b3fb44cd4f6e6636f762cbe0e6c61ff7e371b488c127d8fe8a56fb50feb9b2f1cae7db59a288eafbe046f2c6</hash>
        <hash alg="SHA3-256">9a4762fb0cb7d215fffb675903acd90f9c3765af0b4bec21341055b56da23e63</hash>
        <hash alg="SHA3-512">de00d5b2c51e100f2230d5b0260b0099998501299539d97b97b772bebcc88cbebf3e81e143be6911a15df1d758af02efb01d36b4cad8b9a46cb184919373af79</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.build/aapt2-proto@4.2.1-7147631?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.build/aaptcompiler@4.2.1?type=jar">
      <group>com.android.tools.build</group>
      <name>aaptcompiler</name>
      <version>4.2.1</version>
      <description>Compiler for Android Resources, to be used by AAPT2.</description>
      <hashes>
        <hash alg="MD5">a819b2b407daaf55ab0959694be8d13b</hash>
        <hash alg="SHA-1">a0b00ce0fa756ec6b0b070018745db8e274492e6</hash>
        <hash alg="SHA-256">3eb1563fa0f5e3a1dc009ee2fd6b3ed88c9e091c9fb3794010491f056a6e32a3</hash>
        <hash alg="SHA-512">c97f77660f4db64e224695edc44c44f3f1b558c17ebc334c4fc21ce0d5cb3cd6591d4ac69af37eb979b49e4012804f9ff7ef949ffa1e46b8b0275559f39fac3e</hash>
        <hash alg="SHA-384">352e9077b0b13e7c57af210f533c67d6ac4a70d905f3d7456b565d2a6c821ca28590ff2062d606ab99354da319ba229b</hash>
        <hash alg="SHA3-384">a3f41e654bf30713affda4518ac75bd1fc7492456f2fc9e5f180f835c760addf7436317eeaf692871b99dbc3b927749c</hash>
        <hash alg="SHA3-256">4b49a4b53609c8f972270ef429410c6a780a15b489ef71e9af823aa64930e38d</hash>
        <hash alg="SHA3-512">ce7d53060597477b3d84291cbed841c12eec1891deafd5fd93c38aeb3747ead6e24fb81efb7ce9576a5c190320a0bd5b09893b9a92806c1aa28c51485220bf35</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.build/aaptcompiler@4.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.layoutlib/layoutlib-api@27.2.1?type=jar">
      <group>com.android.tools.layoutlib</group>
      <name>layoutlib-api</name>
      <version>27.2.1</version>
      <description>Library to use the rendering library for Android layouts: layoutlib</description>
      <hashes>
        <hash alg="MD5">449414c8d1e9e15282fa7414e73561dd</hash>
        <hash alg="SHA-1">959a2b023b211fbe465cd37ad2ac06e52cbc8d87</hash>
        <hash alg="SHA-256">4b6e1395c13d3312324490ce767cb154e9a9046cd89ca921dc0a0e4edd88c07f</hash>
        <hash alg="SHA-512">791dc4c3dcfc704c006aee696659f10592ebe9ed7a33126f5dda6c7d8ed43522a49449b7361f4154f1ef51c91a0e8aa3a2dd526a93f375810bc9118b2ef851af</hash>
        <hash alg="SHA-384">abeb99cc2d2e8d942d9da4dbdf52badd5d3322a01337a254d6eaa943737bb58a3031dc3f17d80d3cd6ba45be243b5ad2</hash>
        <hash alg="SHA3-384">ac3de08dab36924855b2dfef0f975cf8a80fd63423208b2206d537b0088ff05ad314a912788a4e8d76598b4b6943d8c0</hash>
        <hash alg="SHA3-256">fe75419c2a09362aed4860032be57a45f9487e374b7b735382423097698b86cf</hash>
        <hash alg="SHA3-512">1b13c83ad01f5f6a65dd6d381ec014551aebb725b7fdccd18329b3a44ef4489a860806c62b16ee2644dd11f1a38513a5fd6b5d9cfcbc89c956f8881d31b66acd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.layoutlib/layoutlib-api@27.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jetbrains/annotations@13.0?type=jar">
      <group>org.jetbrains</group>
      <name>annotations</name>
      <version>13.0</version>
      <description>A set of annotations used for code inspection support and code documentation.</description>
      <hashes>
        <hash alg="MD5">f4fb462172517b46b6cd90003508515a</hash>
        <hash alg="SHA-1">919f0dfe192fb4e063e7dacadee7f8bb9a2672a9</hash>
        <hash alg="SHA-256">ace2a10dc8e2d5fd34925ecac03e4988b2c0f851650c94b8cef49ba1bd111478</hash>
        <hash alg="SHA-512">5622d0ffe410e7272e2bb9fae1006caedeb86d0c62d2d9f3929a3b3cdcdef1963218fcf0cede82e95ef9f4da3ed4a173fa055ee6e4038886376181e0423e02ff</hash>
        <hash alg="SHA-384">6bcde3a6e471d416522e6288474bc4f9115e2e8abf8ce5d300829bee4aa98dff73be7d8c6f0607f3d6d423c7f5abbf90</hash>
        <hash alg="SHA3-384">f4d5a5d5a76b24c4751c8c52f2879b097d2430c3571c59b4630e8c871c9bdb08e24e803a14c24fc8d3378417f29b7244</hash>
        <hash alg="SHA3-256">b4a80ea81c4bc7e364e07981465f547e8ed83031806eaf3b97dfb38f894f5b6f</hash>
        <hash alg="SHA3-512">15b23bce818b4399b334dd632eb85de5a1b70c47fb9260561e70b1f726211c83bddbc957f3b4c32a1d8c687f9bc6c38d0a638c731cb5daf5b619aa725d6050c2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jetbrains/annotations@13.0?type=jar</purl>
      <externalReferences><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/JetBrains/intellij-community</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.analytics-library/crash@27.2.1?type=jar">
      <group>com.android.tools.analytics-library</group>
      <name>crash</name>
      <version>27.2.1</version>
      <description>Helper Library for uploading crash reports.</description>
      <hashes>
        <hash alg="MD5">1cef91409f338280f0fa87ae536e62ab</hash>
        <hash alg="SHA-1">640d33b81bd696d1c25d08b2887f3d19fd26a0da</hash>
        <hash alg="SHA-256">dc9cc72f113633f1eb03817ffadc4ecb3f7a15320ef213a3e71aa2715c678aa2</hash>
        <hash alg="SHA-512">07e0c2f61c6a31a515f714597e046b8b82b199f12db22b7d2724951fa4e6bc892ae6f51baaa839b0c95020a84310545c1d07fed16b4908b9d4ac2528c2c724c2</hash>
        <hash alg="SHA-384">9db990983564bf0802af05b3f4b1ca7788d6eac2997b93a26d7b444a8a28a42162d9ef4384d98bf4cf40ff8eefac5ccc</hash>
        <hash alg="SHA3-384">b5fd5563866baa5f1f72299de3293fdf4cccd01adf12fb65193f8e5efabdfc5697faf9b1992bb9af73c1cb35d5ae954c</hash>
        <hash alg="SHA3-256">22f88cf8abac4ae9f421b53c55df31ad3fb30bdd903e945a21c3afdb836262ac</hash>
        <hash alg="SHA3-512">f46d655b6399c30aa9a0ab27c41cac1f8852ce10be41ce60e7d03acb624036fb4c67bde2788f65f93cf2fdab158f4f35609f689797ec37da4c2d4d05b5f1ebbe</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.analytics-library/crash@27.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools/annotations@27.2.1?type=jar">
      <group>com.android.tools</group>
      <name>annotations</name>
      <version>27.2.1</version>
      <description>annotations used throughout the Android tools libraries.</description>
      <hashes>
        <hash alg="MD5">e0e98c532ad1ca9ec859a469c556f496</hash>
        <hash alg="SHA-1">afac51efb78c3eef296a4ff0dfef56c6d0d6dfb8</hash>
        <hash alg="SHA-256">898149a83a49f20913f47b77aa78fa6a9c42c58673b0cfca377f8b870eee63b0</hash>
        <hash alg="SHA-512">03a89425529aa7492201f5ad3b77604e4ddfe6adeb561e63622192ea10de015a72c7e36dc2c5baf0ff018adcd86803c3047772fdbf020081325d5d1195760770</hash>
        <hash alg="SHA-384">397b58f65c6c360867b4cbe7d95931cc2894a6413488f8d22235a3d01e2aeecd5c39986f1f00a3fd7930827fcc6417ab</hash>
        <hash alg="SHA3-384">f4448a35822581b416ed841145b17475e1429122e025e854fc18c23bab626fe0789f69c9c30ede1d9390d806cd117e74</hash>
        <hash alg="SHA3-256">d2e1761136910e7f6e09b0d9434f7188a12f6be52b483fbad8a40ad45c5385f4</hash>
        <hash alg="SHA3-512">31b2569073573f970f9c9059dbf909877770985e1586b68ce1c3bb2a9ff1f4513f4045dab7265709e063c3c6c89317136fc131d4745bb6bc2bf5f271d184ab3e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools/annotations@27.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpmime@4.5.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpmime</name>
      <version>4.5.6</version>
      <description>Apache HttpComponents HttpClient - MIME coded entities</description>
      <hashes>
        <hash alg="MD5">420691e1f1627f04fbc4b52eccddddd5</hash>
        <hash alg="SHA-1">164343da11db817e81e24e0d9869527e069850c9</hash>
        <hash alg="SHA-256">0b2b1102c18d3c7e05a77214b9b7501a6f6056174ae5604e0e256776eda7553e</hash>
        <hash alg="SHA-512">9841db7779b647de4668ded9b79e8c510a653076384fc3059ef186ea5d82828e149de48c016b5cb89a1beabe60981429265a8324be3108473c57af77a62abd6a</hash>
        <hash alg="SHA-384">1fee5082585e0485ad87f25385b172a308468838a35da8b2485e285193721ddaabc2f2eac1cb9e170cd73b35b1b1522d</hash>
        <hash alg="SHA3-384">4d7d325baa52a50d286655c6ee18d82b37939cafd971864e8a3ce99fc9ade4f3fcb255998242c834ca142aec5ecfd008</hash>
        <hash alg="SHA3-256">f51b42b7c36cb650d58854044983e2c243ef8ab77b65d27872af2c6ededfbe9f</hash>
        <hash alg="SHA3-512">e6fe7d3561f5eaa68d646ac750b5ae6094a91b5c7cc0d6df8a422190b8b0bb7a36a32d4073c700436a5987ab5ea7fe045a727cb9c5cc8be64273ae55ac65f70e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpmime@4.5.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.apache.org/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCLIENT</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="vcs"><url>https://svn.apache.org/viewvc/maven/pom/tags/apache-18</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.lint/lint-gradle-api@27.2.1?type=jar">
      <group>com.android.tools.lint</group>
      <name>lint-gradle-api</name>
      <version>27.2.1</version>
      <description>Lint integration API for Gradle</description>
      <hashes>
        <hash alg="MD5">b4edf2240291923c29483abded3b21d5</hash>
        <hash alg="SHA-1">0710a95892d4fb9830be3a362027cb444cdd6329</hash>
        <hash alg="SHA-256">59618021a9252e39a2000cbd8cee23347d262d2e05ab9561fb615e56c4511c35</hash>
        <hash alg="SHA-512">fb49388516726f23a976cb6cf626a038c1c43cff7c11dda8e1bbc22860d72fc37a11162339bf5128dcaff97a86158ee14763576af88ca078b97f79134216276a</hash>
        <hash alg="SHA-384">c2a45f3a2062ed0384899c4d703a41f26b37389a42ec16fcab3358879cc23f693fab2b460b24dae7d2cc119485ae1126</hash>
        <hash alg="SHA3-384">fca553cf91b1ae3402c7bd4e9af7a667ea22aee7d519d87382c9c623aa35968d10f8d31f6017dc2f4535ba7a5969f29a</hash>
        <hash alg="SHA3-256">48546798da91d9032da5e80b5ecae30d2d40dcdc9c2e19fec45145c59daef242</hash>
        <hash alg="SHA3-512">839aa8056274363353c4acbd6f9d1ed3f19f596a9d8c1e6fd00d1a428195020e82d2e167286d237d60962564b35ab7e11d660633ef57397f6f7ac16f04062a76</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.lint/lint-gradle-api@27.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.lint/lint-model@27.2.1?type=jar">
      <group>com.android.tools.lint</group>
      <name>lint-model</name>
      <version>27.2.1</version>
      <description>Lint build system model</description>
      <hashes>
        <hash alg="MD5">e4cae9090c57d833f699fce8c7825b4a</hash>
        <hash alg="SHA-1">97f0f1057777e12b2ea4ab6810730e6f1466a54a</hash>
        <hash alg="SHA-256">1530bcd47ca17b7b8245cc3f5dd8e4630538c139f9c98ebda508cab1ed9dd1dd</hash>
        <hash alg="SHA-512">ebf53e0dfc97916f756021c73b8cc71943769798cd1accb49dd8b5fbec1756fd34f372b5df7d118642e749dac9585db73e7e2f1ff6261c4e235613a11518220b</hash>
        <hash alg="SHA-384">d08c5e6c7f5ab6e0079f05360186528619f684bbb35911bf0d67d6c0edd519c11070aba76307a7a7b4fc21a1cc2018c8</hash>
        <hash alg="SHA3-384">e9f9664773ab6ec855a7f6cec5db8f28663ed6da6f022d7cb34e07fb176a0a8e6815fb3d2f4703c83080634086d29ff6</hash>
        <hash alg="SHA3-256">c1210c8c27d4244832f6b4b6d81d6506bd0230fd227eafc3cceb9c572263f433</hash>
        <hash alg="SHA3-512">6afb4e17ea667143d15b461e2c6f66b80f66e374be4ee4f96ded8dbdeeab04e47174b8bcb9b32c4b1c9742266ab3fd0f432a333441a669d6206b27916b3faa77</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.lint/lint-model@27.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.4.31?type=jar">
      <group>org.jetbrains.kotlin</group>
      <name>kotlin-reflect</name>
      <version>1.4.31</version>
      <description>Kotlin Full Reflection Library</description>
      <hashes>
        <hash alg="MD5">a970b96602f05c10546cfc086007fed0</hash>
        <hash alg="SHA-1">63db9d66c3d20f7b8f66196e7ba86969daae8b8a</hash>
        <hash alg="SHA-256">91fad0b42974a7d5811e30a61f05706e176b144235717c6de7e81e3a781028f2</hash>
        <hash alg="SHA-512">877c69ac4b8f27cf655c2e65930d9547394428607b55db3613737daf09272ed8858720cdfefa6af47dd9d79e9e8121236d9abf453d8ac6b64fb81b589182fee9</hash>
        <hash alg="SHA-384">deb1c95ab5d3edaf93cf2e9058bbea57315321c5c78542dbc361ebd00cf52457d1052c1bec4878a8525db37333615fc8</hash>
        <hash alg="SHA3-384">8308ec55a08e289c9d5c3ce992a66bf03e12c6141705285f851e2158684af37e148f2393bc93e6b0f9a36ac7dba1d30c</hash>
        <hash alg="SHA3-256">8acd1b715b3de8510a201a3f81423768b6575c8e8b0c9bd6ccc6a14f850c39cc</hash>
        <hash alg="SHA3-512">0633a3d8edb2ada70462b4b82e2e1d6682e10244c82bf6dfd1051080a54319385f32ef10ff348d3e17ef3168582abff36527d20fb470e6ff53b4c7861796606c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.4.31?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/JetBrains/kotlin</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.build/gradle-api@4.2.1?type=jar">
      <group>com.android.tools.build</group>
      <name>gradle-api</name>
      <version>4.2.1</version>
      <description>APIs to customize Android Gradle Builds</description>
      <hashes>
        <hash alg="MD5">29ef4930b5e4689ea3faaffe351bfe94</hash>
        <hash alg="SHA-1">2dd4c353611fba9faa35e9afb396fbd219cd3867</hash>
        <hash alg="SHA-256">1e199938ec9e838852bef9a3e276da5258da875decff307a851eced06b7b297e</hash>
        <hash alg="SHA-512">37ceb7301c947c6b51a0ae62cc0f5a8ff3fa5a09510c2927ef8707a873f31e9d95c7296356e047e425b2a493be2f202b73733be0adbf401cfb706734b1bdbc1d</hash>
        <hash alg="SHA-384">c6bf39bc8c562ee62824061824790e0ca3587f0e94118869e088540ba487f0a6ef3f773afddaa79caa64da91b1f85818</hash>
        <hash alg="SHA3-384">c1efeb00f9c5427b47be5beeb37b97f7542dda7284549c8c0dc768fb4da8aad33713d6a0867970ddbe8b74b1ebc20540</hash>
        <hash alg="SHA3-256">57a22f6f0a36e5a07e535ab9b26d583206cb276f84c2411281ed73fc390a57e2</hash>
        <hash alg="SHA3-512">0a4b7dea4762ac0cc3e64066cd490e1bdf4599c4c8760ab6d61b82f3b4584e7ee7ad8ea6e5b0884f974b994e3f0975ec5c2d4fcc43f453151d05602125cd1868</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.build/gradle-api@4.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/androidx.databinding/databinding-compiler-common@4.2.1?type=jar">
      <group>androidx.databinding</group>
      <name>databinding-compiler-common</name>
      <version>4.2.1</version>
      <description>Common library that can be shared between different build tools</description>
      <hashes>
        <hash alg="MD5">a1e940dad991c394d72a25572aa66530</hash>
        <hash alg="SHA-1">aaba33f6adc2ef79619b4d6401c46d277992fa71</hash>
        <hash alg="SHA-256">f387c65ebf3b413a89b640fe106c9b8b5165f787637bbf8840b7803f97e9ed48</hash>
        <hash alg="SHA-512">d5e70b44695278b7a3077afb06a50d830add294e74ebba0f3a16bb2c5c1c02d8e41d13f40d7554198c630671ebb7ab0168c96bc48d52ff1ab1b5f606b31e09cd</hash>
        <hash alg="SHA-384">8d7d6cfcb5b2a7a8615000690cd07fb2d2700feb9fa5fb11f5063868bb172472a1eaba00e2e2b6069411a726c6c4ea7e</hash>
        <hash alg="SHA3-384">f006bd93999ddfc6c9c6a22620b97e91de5a2eb1f4cb9cd8eff17eddee765bc9c3dad58df135eb22d29cb5ae5aba2e95</hash>
        <hash alg="SHA3-256">851fa4721a16d8e758d27fa5ae543d102dfdbdf432aec3d0827cb8f4e20a4ce3</hash>
        <hash alg="SHA3-512">c8d9ed57211d4fbe1c66d2cbb186ce437f55d8975b19c4a47ac3e928951487392dd0405d558271fa18060a94e4c835ec84e478ad8e535b566899ed9bb882932f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/androidx.databinding/databinding-compiler-common@4.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/androidx.databinding/databinding-common@4.2.1?type=jar">
      <group>androidx.databinding</group>
      <name>databinding-common</name>
      <version>4.2.1</version>
      <description>Shared library between Data Binding runtime lib and compiler</description>
      <hashes>
        <hash alg="MD5">6e94f15cde86f832b9caa1f5e591ca5c</hash>
        <hash alg="SHA-1">07cd151c60e0967a321e5731b714faf89fb95319</hash>
        <hash alg="SHA-256">4c10017bc927f42627397c4ad2ab46b3bdb9b28e4e86c0bdb62d898aeeff1415</hash>
        <hash alg="SHA-512">cf10e24bd8da2f4f8d9e73f587a9aac0f7622ca1e680bd51bb3ea01f0488eb0919c5fcc8cf0150d39c5df2805d05e867920994fa6555667865f17b1d513d80d1</hash>
        <hash alg="SHA-384">925255b6c9000e04d1f0076f1dde6ae42ce49adb0fb78ea02f8c815439b0ce9714f808cba23825f60cfc38987b4fbf37</hash>
        <hash alg="SHA3-384">fce7aa72b96d2a329cb6d83b9972ff5f32b8d0c546d5a0d676ab72edb18e6c05087c7dcf01baffeac5d0ba86cc7a7482</hash>
        <hash alg="SHA3-256">4390fa7cd7b58aeefa3502eb13c22d62c5b63edbf35cb55688d9436716b0c007</hash>
        <hash alg="SHA3-512">d29597d08d64969b1a482895eff3350401b00e958aad2132068147534ccffbfbd6688de26cd44e9e46fa4a2585ea5a2f2e9bc1df441be966d292df1f0c2b3d98</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/androidx.databinding/databinding-common@4.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.databinding/baseLibrary@4.2.1?type=jar">
      <group>com.android.databinding</group>
      <name>baseLibrary</name>
      <version>4.2.1</version>
      <description>Shared library between Data Binding runtime lib and compiler</description>
      <hashes>
        <hash alg="MD5">12da4c31a0441949f93ff92ee22b60dc</hash>
        <hash alg="SHA-1">a59d2bbfff5e546e7bc60844512d4f2ec4e06619</hash>
        <hash alg="SHA-256">efef9b153c42eb4b78f7a9cdb00ba8ddc6c81c5a0c792d3cf8788b99a35f3f64</hash>
        <hash alg="SHA-512">cdf1eb43ef87f84ccefbb43c0d8fc04bbb38a0849aa6d22787854db258a6ba4bac8d763078127cf1b93fdfb25c8379019cad37da72915a109e5716d5d90f552c</hash>
        <hash alg="SHA-384">0725d20631761a40aebd0ad82f2430df694a22f9eee621cb2d170953c77e767e85e939af0db0ea58aced4090fe29e2e0</hash>
        <hash alg="SHA3-384">a1843ba327b843f18a1d2d79f58b58e0500a147ee283de2ce2c27c8d00fb48d36c2bdeea64e07d5165132d5b01fe34a9</hash>
        <hash alg="SHA3-256">dc373005ed1157c8f29bf2565d198a487d207a37893aa96d1edc14b4f592bc3c</hash>
        <hash alg="SHA3-512">1a7e28ce4e1329a5e10e49fa7520036ced0641288ce7689001a262b5f2c3e58f3ed2d76312d4beabdcc2d1446ac4d3dccf7bfaf1e1c2b6a11873f1ff5c635f17</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.databinding/baseLibrary@4.2.1?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.googlecode.juniversalchardet/juniversalchardet@1.0.3?type=jar">
      <group>com.googlecode.juniversalchardet</group>
      <name>juniversalchardet</name>
      <version>1.0.3</version>
      <description>Java port of universalchardet</description>
      <hashes>
        <hash alg="MD5">d9ea0a9a275336c175b343f2e4cd8f27</hash>
        <hash alg="SHA-1">cd49678784c46aa8789c060538e0154013bb421b</hash>
        <hash alg="SHA-256">757bfe906193b8b651e79dc26cd67d6b55d0770a2cdfb0381591504f779d4a76</hash>
        <hash alg="SHA-512">62278bb82d1dcbf64e92e5314ff1ce481e34e3d4bcc2aad54d410b339f00b33ceb8aaddf6ed86e839d924f17d25948a0ae4a37015724076048d14e1aa66c942d</hash>
        <hash alg="SHA-384">17ad5525fd595e689360c705f2e193e82857968fa99ea8641a1fb6ae1b25c2a5c693e4c136fd90cbee1e9121913bd54c</hash>
        <hash alg="SHA3-384">04bf9b2cdf53e90b443abbc20dd17557af4b5bb13528b3f2333525d0832b94745fba2758df52fe0b0ddb9fc4d551f7e9</hash>
        <hash alg="SHA3-256">3b62397adb580090f5c226f4d4bedf4e01d505fd34615df83210cb7a3dc29e68</hash>
        <hash alg="SHA3-512">c4b850c0dfe6d9235c2402b8d5b20e8e793a851665e8d12fe60aae10024c5a5ff5b91ab07d1cfcb752144ac5402e56d73ecec472837a39ef973b86235853d332</hash>
      </hashes>
      <licenses>
        <license>
          <id>MPL-1.1</id>
          <url>http://www.mozilla.org/MPL/MPL-1.1.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.googlecode.juniversalchardet/juniversalchardet@1.0.3?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://code.google.com/p/juniversalchardet/source/browse/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar">
      <group>org.jetbrains.kotlin</group>
      <name>kotlin-stdlib-jdk8</name>
      <version>1.4.31</version>
      <description>Kotlin Standard Library JDK 8 extension</description>
      <hashes>
        <hash alg="MD5">7a11cd5fe40b6103e529d281b57b03a9</hash>
        <hash alg="SHA-1">e613be5465ef1e6fd0468707690b7ebf625ea2fe</hash>
        <hash alg="SHA-256">b2f8364435ebcb0106ff9d4415a11ffdef8ec7786ee6e5ed465a01556cbd1683</hash>
        <hash alg="SHA-512">2ae074efbc1c02bb502bc5d4c7f30e4b00d222d31bcd0b4dc0ffc19046ba60f4e1d18c4db107c60861d41eb95cedeb8e1d731608a0ade966bdb2a921ffb5c558</hash>
        <hash alg="SHA-384">24a725d283a832ccece7e563377513ddb8cb0dac4b8a66c0ce0714b2044a58c7ca184643dc41af34e085dd41d76be363</hash>
        <hash alg="SHA3-384">d9d432a41db6a7f3b63b53e68c9e5bd25261787ecb81e4806edf640b6268c6e882a6fcc2762afe580e7f7a22c2300f24</hash>
        <hash alg="SHA3-256">55bf89b9627860d949b33ef84b4bccb4d697e237ace244de3fafc46c39b956f6</hash>
        <hash alg="SHA3-512">e477fd52bd9b53d77fcc8b7ceb711e2e4aadda09266658bdcedde84dbc0abfee35287197a62441f36486015d114df262a92f4403527f165c83ef29c97684de13</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/JetBrains/kotlin</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.4.31?type=jar">
      <group>org.jetbrains.kotlin</group>
      <name>kotlin-stdlib</name>
      <version>1.4.31</version>
      <description>Kotlin Standard Library for JVM</description>
      <hashes>
        <hash alg="MD5">f3d746fbfc44a2ee06403d42622e0018</hash>
        <hash alg="SHA-1">a58e0fb9812a6a93ca24b5da75e4b5a0cb89c957</hash>
        <hash alg="SHA-256">76a599d88b167e8ac90879b6daa722c6ad3452ba714c9aba19bd196544b97f1c</hash>
        <hash alg="SHA-512">0f20c70556c245903558107d24ef517f770f0984e124548f88162fb86914573c8cde538e45b3b12e18594b6964b7826948cb577859483f2fe122222474eae293</hash>
        <hash alg="SHA-384">93dde73e34cfb6f0cce57910c316daca04460f94ea479b2b7128d90f3c99322414fdf79b11f9edfed7e2aa692b0ff72a</hash>
        <hash alg="SHA3-384">aa61bc22096839c6bcff61a7389ca28671b0e00a24b066ec843e870d12009bff0b846c1aad924953172d4d2ddff162e2</hash>
        <hash alg="SHA3-256">e8da14ac6885ab93227a0ca665c61de8c0151f4c7d7be3806b0a7a8c6b735f93</hash>
        <hash alg="SHA3-512">b4057575eb42e669911c301ca707349d32acc557887360353eff99d2b41fc28645ae40af300ffebc9892db5a795b83cfccb47707821042855f92c84087fb8d83</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.4.31?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/JetBrains/kotlin</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.4.31?type=jar">
      <group>org.jetbrains.kotlin</group>
      <name>kotlin-stdlib-common</name>
      <version>1.4.31</version>
      <description>Kotlin Common Standard Library</description>
      <hashes>
        <hash alg="MD5">db67651389ca7f657990d4f69985f7fc</hash>
        <hash alg="SHA-1">6dd50665802f54ba9bc3f70ecb20227d1bc81323</hash>
        <hash alg="SHA-256">57962f44371a746b678218a0802a8712c6255206de9a69ede215e3aa4b044708</hash>
        <hash alg="SHA-512">9b6afed55003cc51b6f4dc662b4eccf8dd70050c6ffe38b8de48ad4b9c56de8f0120e546e0b606af5758239d35bf46a33e57913e1c2c011c97c83c658553aa91</hash>
        <hash alg="SHA-384">ae8eb5936a4fcfb2491a7059ec1f9ca19a037ac2ecf0b332a48864a0c95695349cd8bdbeace18178c8cfe18e7df57695</hash>
        <hash alg="SHA3-384">708688aea6c3abf3d03f63f43ff1d0d2530f05b57ee5dae185f34ca17b3fc2bc2cf2a48942a31bedd5d13edcfa0dc110</hash>
        <hash alg="SHA3-256">7bcfedd841c7d3720f8cb96f2ee4089da1dab9978e9d53b4696bf5d8dcd57869</hash>
        <hash alg="SHA3-512">5d4f195ef276907bb0ddd516f07aca6e9504b82b1c1554508f785b553cf416ecab1e93c9ac17913c7f171572be49683632880862226facbb3ade12afe4a53b59</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.4.31?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/JetBrains/kotlin</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.4.31?type=jar">
      <group>org.jetbrains.kotlin</group>
      <name>kotlin-stdlib-jdk7</name>
      <version>1.4.31</version>
      <description>Kotlin Standard Library JDK 7 extension</description>
      <hashes>
        <hash alg="MD5">b471182f952997b2ed62911d28321c7a</hash>
        <hash alg="SHA-1">84ce8e85f6e84270b2b501d44e9f0ba6ff64fa71</hash>
        <hash alg="SHA-256">1f966e54e86cf4b7d7014afdce04e0f3ee4625084cda3494edccc7b84af52664</hash>
        <hash alg="SHA-512">2b2a88686de991924b488ab0bfa250b432efbf4da2df5fa9cd62d6d983c8bdb8a17909f02561263966734a72ea07e6f2849aa95719deed2294e6ec28a99c6f52</hash>
        <hash alg="SHA-384">bb11751e75bf5a47e89890e7b7bc6852dbbe6683d78bc09135e4e231b9013b4b76d087f5a9f89249c8607bc3680c086b</hash>
        <hash alg="SHA3-384">1e814a0ea41566dd17c46b3bc42ed264979168d6de661831ec60bb64a87153c8cccff83aedd117a811f32d32b00824fd</hash>
        <hash alg="SHA3-256">60cb557a16bff3d6ecdb3fb08390e1e2324edd1dfd3faceb679879aba579eee9</hash>
        <hash alg="SHA3-512">555a72779de1dbee18f179ef91618c0dbec2927ea2d4fd112f191e886a79f1f7816dbdba6e3e505aca4863afc398114982d18ac2dd9a8340aca6af7d2e9078a6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.4.31?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/JetBrains/kotlin</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.build/transform-api@2.0.0-deprecated-use-gradle-api?type=jar">
      <group>com.android.tools.build</group>
      <name>transform-api</name>
      <version>2.0.0-deprecated-use-gradle-api</version>
      <description>Deprecated, use gradle-api</description>
      <hashes>
        <hash alg="MD5">bb3cff3fec88b7172642c0fe85f59202</hash>
        <hash alg="SHA-1">47f6c56527c42425742fa9b56ffd3fd80763fe03</hash>
        <hash alg="SHA-256">4de4a3d05e1c534c2db9e4588bf34082bb2bd232d8abb9727c430290ce225740</hash>
        <hash alg="SHA-512">f7af126566e550c43586db59bb020a2f85387d4e60b533b2a04f988e75350584cc557e49ea3f1237327e487e2a50de98196514eb218c6ce83661d2291d2cde54</hash>
        <hash alg="SHA-384">1417c0c960c4b1498dc050fecaaf60b4932110c28e0f0e6cd05ca32c35e021b3b91ba51074432d14f1336cebc0e78da5</hash>
        <hash alg="SHA3-384">2420b525d003f90519204b5b4618ac95255eed1c2d120f26005cd9a4d1053abd94678e1c01dc1d15390766e694ac3e1a</hash>
        <hash alg="SHA3-256">b3214ebd7567b239bbd3408df23d96b20092c4a0b2f43da85d0f7f4958a13ac9</hash>
        <hash alg="SHA3-512">f4f8ed8763444751e758099f507d63e72a939ed6c7b41b02745ec34464fbdc198a4137fd155f4b952777e900428c960738ec5d53ee6ceb8da44aa411b2588578</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.build/transform-api@2.0.0-deprecated-use-gradle-api?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://android.googlesource.com/platform/tools/base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm@7.0?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm</name>
      <version>7.0</version>
      <description>ASM, a very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">4cdf9fd77ce48671ff9fd607f2a8a93c</hash>
        <hash alg="SHA-1">d74d4ba0dee443f68fb2dcb7fcdb945a2cd89912</hash>
        <hash alg="SHA-256">b88ef66468b3c978ad0c97fd6e90979e56155b4ac69089ba7a44e9aa7ffe9acf</hash>
        <hash alg="SHA-512">b31699f50485ddc4e84466064cf5789a3e61bafbec53c4b9cb19ffef07b36722d3efdca8722884fd6d6dedaca65db4dd6f71cd886bba599e8a77971955167a60</hash>
        <hash alg="SHA-384">ece91dc20be47d396ae9218b789cd41aa8290ce79b60369c42f2e974647b5fd32898181a0f44b08275e32f07ea9a411f</hash>
        <hash alg="SHA3-384">8b9b0416bf4739b698ff8c5ab97c8d70f535ea92f88d2227680b01b2d508ad59a9c364d8a21bd96d78884834d4312ebe</hash>
        <hash alg="SHA3-256">6e99b37e75db90a648fef1f1ae8aafda0f6cf597ec282236f03ec978dd7e11e4</hash>
        <hash alg="SHA3-512">dd99c004f99697944316707aedd3822f86c27b0cf42ceda83b8807daab2f495e1b79d6e5bdfffaaa833a7f7626585947787f665ebf35b607316bde9499ceb7c6</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm@7.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.ow2.org/</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm-analysis@7.0?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm-analysis</name>
      <version>7.0</version>
      <description>Static code analysis API of ASM, a very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">eb378b389aef721ccd1486c1701e8454</hash>
        <hash alg="SHA-1">4b310d20d6f1c6b7197a75f1b5d69f169bc8ac1f</hash>
        <hash alg="SHA-256">e981f8f650c4d900bb033650b18e122fa6b161eadd5f88978d08751f72ee8474</hash>
        <hash alg="SHA-512">1a6ca169e9e2d29256f9c45570d89e5b039eaf7d405ccb3f7f79926552f2a0818975ce2c6adce3f1f59e28172e4303a1c790c52ab06263c61c9c8181ff279cee</hash>
        <hash alg="SHA-384">bdf9db7f450616fe8abe758198f198776e648f19900e9cfa159308529b963244562a825264c4859fbe89cb8f348c6ca4</hash>
        <hash alg="SHA3-384">8b9895306a8949b0326c46a97f522f2a54bc19c918f9da91a5f9ddf831b5bdb0a7527c089c483fe4018253188d6d5381</hash>
        <hash alg="SHA3-256">64c0a75eda17462e5587d402f7bb418704444413410b6bfc1f03b750ca9cc162</hash>
        <hash alg="SHA3-512">1be3ba5233fea8f1c52dc89a0ba28c3133dac217e9508dad11ad136f29f01ce83b99bbc5cd3ccd08742f614b2209d592c00d30057d805f05c0160e07fc43647b</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm-analysis@7.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.ow2.org/</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm-commons@7.0?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm-commons</name>
      <version>7.0</version>
      <description>Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">770446a3d6e7f26ded138b5f04eae84f</hash>
        <hash alg="SHA-1">478006d07b7c561ae3a92ddc1829bca81ae0cdd1</hash>
        <hash alg="SHA-256">fed348ef05958e3e846a3ac074a12af5f7936ef3d21ce44a62c4fa08a771927d</hash>
        <hash alg="SHA-512">ca97b49eece30da774055b58a63c6e4f65a6bc4c0f40a829dcaf7164fbffdec10c6b2d9a22df0a0918fdc83a47ea9906294aa99d3f170b35fd9e0632578c80b2</hash>
        <hash alg="SHA-384">5096769c920a15959e64671e1b2191f4df6ea4a5b4b1e5655534818f57d6fe8cf4217683e845d214b863af8308a54fb2</hash>
        <hash alg="SHA3-384">0f7aa8e2f7af53541d20fa5d574e336c1317e72471b9eefb4ba0205a383309a22649521d3ba4be5ef99e21339f4ecc76</hash>
        <hash alg="SHA3-256">df6aa823d566fb89cd1c8b3eba64b882ce9f3ef3a85b97072065bcf6208a635f</hash>
        <hash alg="SHA3-512">eb3cd224e64ab158a71ed31eb7eb80d687da6f8daf39b26cdbf5ce4a6637d13d292a472e1b11534e867eb95fd6b0a6441ab0c3c2d039f6fe4dcd13124315bbf9</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm-commons@7.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.ow2.org/</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm-util@7.0?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm-util</name>
      <version>7.0</version>
      <description>Utilities for ASM, a very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">e3fa78c498141910fa0dacbda87b182c</hash>
        <hash alg="SHA-1">18d4d07010c24405129a6dbb0e92057f8779fb9d</hash>
        <hash alg="SHA-256">75fbbca440ef463f41c2b0ab1a80abe67e910ac486da60a7863cbcb5bae7e145</hash>
        <hash alg="SHA-512">6b9630ad4c5f6abc2724f9d85a7c0e81e524f8b0bf25273dd5578edc20efc7ab400095cd48e904d2536071181a8e9f39635ff3fee0986bd078016d2dff8241b1</hash>
        <hash alg="SHA-384">87e29c6f412647d551dcddd6d6f4e42ba0989690df6ab8c144291fcce433707c5be5211c91a4d30839a9aef881767eba</hash>
        <hash alg="SHA3-384">49fd228b1e6c5573791e2d5739e099f74a64134c40edf1363d269df5934c182d9464939dc1a1ca00c5b92437ca949530</hash>
        <hash alg="SHA3-256">0f5190b7c02c225c67a8536f15699b84d1f78294be63da5b7e5e31ef58d2b0c2</hash>
        <hash alg="SHA3-512">6416b584be3f084c616e6c84f69499279a9afbe694108cca9e1f6132baeadcac08c3bbc610414e935b991369576c53a33671dca848064d89690e0d9a9e4c33ab</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm-util@7.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.ow2.org/</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.sf.jopt-simple/jopt-simple@4.9?type=jar">
      <group>net.sf.jopt-simple</group>
      <name>jopt-simple</name>
      <version>4.9</version>
      <description>A Java library for parsing command line options</description>
      <hashes>
        <hash alg="MD5">39c6476e4de3d4f90ad4ca0ddca48ec2</hash>
        <hash alg="SHA-1">ee9e9eaa0a35360dcfeac129ff4923215fd65904</hash>
        <hash alg="SHA-256">26c5856e954b5f864db76f13b86919b59c6eecf9fd930b96baa8884626baf2f5</hash>
        <hash alg="SHA-512">fd04c19bce810a1548b2d2eaadb915cff2cbc81a81ec5258aafc1ba329100daedc49edad1fc7b254ab892996796124283d7004b5414f662c0efa3979add9ca5f</hash>
        <hash alg="SHA-384">4243f57f3c37f2a357134dc4e75c1141088ee77b4341bc8865d25f38bf63bfa7173bc95a33961378504cc0cd328be7b6</hash>
        <hash alg="SHA3-384">86c5705458fdefc71e6b76d328f38700541ceeece7908552bbed25d2a283636018a4eac1c1664ec5accbf9cd16c6e2b0</hash>
        <hash alg="SHA3-256">e77a0c4c75d8f5c4efcb6462e960c2c4f105deb138e5fbbb8c889ebff52d7b6a</hash>
        <hash alg="SHA3-512">a35f74cb2d400dc2a7b54120ff71d939d4edb4af613e4bf3e238522822d9338f1215b1c5d65633dacb4c92d49c6a78f04b97f521ab88abd2f998ae95d2dfd29b</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.sf.jopt-simple/jopt-simple@4.9?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://github.com/pholser/jopt-simple/issues</url></reference><reference type="vcs"><url>http://github.com/pholser/jopt-simple</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.sf.proguard/proguard-gradle@6.0.3?type=jar">
      <group>net.sf.proguard</group>
      <name>proguard-gradle</name>
      <version>6.0.3</version>
      <description>ProGuard is a free Java class file shrinker, optimizer, obfuscator, and preverifier.</description>
      <hashes>
        <hash alg="MD5">746019c6d91972bcac32b7ffc37837b7</hash>
        <hash alg="SHA-1">e5becf2356695a396b788110e386c38bad523bfc</hash>
        <hash alg="SHA-256">cc12b1168e521491dd0e687cfebec11a4af874b22af70e10cf2a05b47ca00c8f</hash>
        <hash alg="SHA-512">416903aefe5d652cfb7c139d5c16c0a7ba26ba7d592ecfbadca1df72eb98848781665e6d034d0377c1db7c1da746e3e39e01d08137411bd0101e025d6760ae3c</hash>
        <hash alg="SHA-384">3fe13f0263c9f183861fa5cb07b4f3a1c287761d7773614405a392ba5202d463b7a45f9bb2b927109b4a2890d61714ca</hash>
        <hash alg="SHA3-384">ae64def66533f2892a2b307a5c4c025be2b4e1273f91dae368b5e130af40fe9a4da478823949d7a30b878f894a952769</hash>
        <hash alg="SHA3-256">ea7e4591e0064d1fca199d00b777d7fbb3e821e1cab7c6117f60d9f86afb8ed2</hash>
        <hash alg="SHA3-512">2db9d756dc9f5831e040d227e4c8ef21396f69f918dfd6d2db6ca710821ef1415f208cfa15d6de451eec67cd9c26867833766cb8c5305bab138316acaf513a1f</hash>
      </hashes>
      <licenses>
        <license>
          <name>GNU General Public License, Version 2</name>
          <url>http://www.gnu.org/licenses/gpl-2.0.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.sf.proguard/proguard-gradle@6.0.3?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://sourceforge.net/p/proguard/bugs/</url></reference><reference type="vcs"><url>http://hg.code.sf.net/p/proguard/code</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.sf.proguard/proguard-base@6.0.3?type=jar">
      <group>net.sf.proguard</group>
      <name>proguard-base</name>
      <version>6.0.3</version>
      <description>ProGuard is a free Java class file shrinker, optimizer, obfuscator, and preverifier.</description>
      <hashes>
        <hash alg="MD5">a5b0635dabbe4f57e9793bbcf96ac8b2</hash>
        <hash alg="SHA-1">7135739d2d3834964c543ed21e2936ce34747aca</hash>
        <hash alg="SHA-256">75bc89695fa66e75374ecda439b802406f0ab1d826dd386eed0a23b1f0a9d264</hash>
        <hash alg="SHA-512">b16059cc7ea1b0a9419e304e7bb87ac1ae8528711d3121a78a3389b623689540c70f7e09022922150f6e5cca4b453ba1956490811cd21d51e122d9bb527c411a</hash>
        <hash alg="SHA-384">03ed3ef3bcb1763c98c4509d6e7bd0bb8b7e211059bbc800127774cba21e77cb34acb29e984a8643ce3569402062b157</hash>
        <hash alg="SHA3-384">a365efac080fe459ebfdf3a7c6a34b6c0e92ea913ebf92f2a7e526ba4b9ec8d41ac944fd0b90c564264b0e36a7225d86</hash>
        <hash alg="SHA3-256">268325f1d6f80bc87b2c9743e93288c7cce8b71a37c83b934d86b96ecc9bab4f</hash>
        <hash alg="SHA3-512">c366708c940fc2a786f1f333ebd07d4a03739507898083a0ebb7e995fdb2973500b3a3abb0fcdd59d656fe8f7cdda5264236544754e7e31e4ff38a2fc3b00317</hash>
      </hashes>
      <licenses>
        <license>
          <name>GNU General Public License, Version 2</name>
          <url>http://www.gnu.org/licenses/gpl-2.0.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.sf.proguard/proguard-base@6.0.3?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://sourceforge.net/p/proguard/bugs/</url></reference><reference type="vcs"><url>http://hg.code.sf.net/p/proguard/code</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.build/bundletool@1.1.0?type=jar">
      <group>com.android.tools.build</group>
      <name>bundletool</name>
      <version>1.1.0</version>
      <hashes>
        <hash alg="MD5">c881469cf5926da3af7c07d30df0a74f</hash>
        <hash alg="SHA-1">582c071113a4447a8f9743a0dea8558f5c499c61</hash>
        <hash alg="SHA-256">4cb02a7963fa7c82c302fdcde679b336e669e928f5bbad00457d9c562ef1cd30</hash>
        <hash alg="SHA-512">980296986860fd0af3f1805e50396909e0a47319a1afeb899dc199a767cddbfa2d43c15f647a8937a05001dc7c401e301f399885f4afe9274e1c6e1899e76a87</hash>
        <hash alg="SHA-384">98749d4db72345d40c9355d4db09485a158e830b1717822d581228a68430ddd5eb59926a912cbf7823e46a627b17357f</hash>
        <hash alg="SHA3-384">46220f596cc720071590640fece71ad5cd4ba576c61caafa4ecb62243c6657096422e3185d5eb360e2ac873ce324ae44</hash>
        <hash alg="SHA3-256">037260a21cb70842fd7284e73715b2a74a2186928dcde668e8a1ec8d352ce8b5</hash>
        <hash alg="SHA3-512">51f5300aa39bdb5ae37f09192f75f0218454e39e4fdad5a351b1a0cadf6f908beda5a7669d278dca84fafb152fcb48753b185ec25599bd69af4ace45d1f4cacf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.build/bundletool@1.1.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.auto.value/auto-value-annotations@1.6.2?type=jar">
      <publisher>Google, Inc.</publisher>
      <group>com.google.auto.value</group>
      <name>auto-value-annotations</name>
      <version>1.6.2</version>
      <description>Immutable value-type code generation for Java 1.6+.</description>
      <hashes>
        <hash alg="MD5">df4979e8a486e4ecd145adcf03e445c9</hash>
        <hash alg="SHA-1">ed193d86e0af90cc2342aedbe73c5d86b03fa09b</hash>
        <hash alg="SHA-256">b48b04ddba40e8ac33bf036f06fc43995fc5084bd94bdaace807ce27d3bea3fb</hash>
        <hash alg="SHA-512">37fc4689f2885261fecee345300934025fd65b9e43a65a696c9046c3d2919c1c09f30dcbe0b74099f9307a5248dd08030edd4233637e3db3ab40a16b30cb23b4</hash>
        <hash alg="SHA-384">b23b057c217591781ee233078b8ee56915ea3d8ae79e81689d9cbfc95f972466c82e2f1cb881cc1ec5f6d751b06b0060</hash>
        <hash alg="SHA3-384">1c1bcea90a93e01bdbb75920327ae6ff3a313cb87c9a86c73510a0c8f75d2f17647b5f7850708539a355f6216adfa8d5</hash>
        <hash alg="SHA3-256">3f47ec976ddba7e0af02b1cc57003ce80eb6a4da2e07dc57d39b819d120e2989</hash>
        <hash alg="SHA3-512">ccb942164bbfd25a7e5cded5af4e20f7e45332d9a84b2438464faddf21016d98403b4be79844a176795d002e2bc50a4b77043333e777350397fc1cebd90609c6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.auto.value/auto-value-annotations@1.6.2?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://github.com/google/auto</url></reference><reference type="website"><url>http://www.google.com</url></reference><reference type="issue-tracker"><url>http://github.com/google/auto/issues</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.dagger/dagger@2.28.3?type=jar">
      <publisher>Google, Inc.</publisher>
      <group>com.google.dagger</group>
      <name>dagger</name>
      <version>2.28.3</version>
      <description>A fast dependency injector for Android and Java.</description>
      <hashes>
        <hash alg="MD5">ef0f824a008de1689a451d402afdbfc8</hash>
        <hash alg="SHA-1">10d83810ef9e19714116ed518896c90c6606d633</hash>
        <hash alg="SHA-256">f1dd23f8ae34a8e91366723991ead0d6499d1a3e9163ce550c200b02d76a872b</hash>
        <hash alg="SHA-512">0ab9b4b48db3393127c4979f7f9ed9af63a1d9ceab8eade10ba9c6a7f480204c9951740fe400e8940afb28089d4915ab8670565cd381c70d4b10ffb65e3383dc</hash>
        <hash alg="SHA-384">9d561ea96425a28f2b8c0c8b3d08fbeff8fcb23ae30035485fa0ac574161e1b47de810d0ca5a4f2f006b1f14762f452e</hash>
        <hash alg="SHA3-384">6703a6bc773062ea3d1daa08ed1706c192b263476a061c62ab71232c2492dffaf46dfb62337d1e14565f95404bee9423</hash>
        <hash alg="SHA3-256">51f67e7a289845d3be8acbfa909acd2c4fd3bfe4637c551d4f1bd35ba3a7fd88</hash>
        <hash alg="SHA3-512">b8f4aecf6d635f9ad3a04518cf589c18e1b0f5c52adbfa71fd5066626eb8b723abca705162b4b69e8f3cc01413fb9af5a2c7b037d16fe6d9130b915a9ec4b741</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.dagger/dagger@2.28.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.google.com</url></reference><reference type="issue-tracker"><url>https://github.com/google/dagger/issues</url></reference><reference type="vcs"><url>https://github.com/google/dagger/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.build.jetifier/jetifier-core@1.0.0-beta09?type=jar">
      <group>com.android.tools.build.jetifier</group>
      <name>jetifier-core</name>
      <version>1.0.0-beta09</version>
      <description>Android Jetifier Core</description>
      <hashes>
        <hash alg="MD5">a6b614ed04be204ab4ca983b36e1a737</hash>
        <hash alg="SHA-1">c98ee0e5579aed97e17f605a89b101115a2f5a61</hash>
        <hash alg="SHA-256">9bb3a91e871e784446e4dd1e1d1dea5c322e271cba8278c1dec3669a66aee858</hash>
        <hash alg="SHA-512">de9c1c73a9b5393bc38bb6d942148312f325537b1d57df49ac82eb17ee31e61ee72435244f21f76154da57859a5ee15a3a3e3c40a8be81b5afb4ecc72fadba97</hash>
        <hash alg="SHA-384">fcc7d17ebfba5e1bb382fc0b62bd168791ce6662884895b5d1f6f523f452bbcf3d8231f3c81bab5012eb267799b496ae</hash>
        <hash alg="SHA3-384">940784281e3ab9b13f3375d856d61baef10152f9cc6c0056548320804829ffd74dd9838e6a56e6d4b0a5e69c755e283b</hash>
        <hash alg="SHA3-256">68d0ff451444fdcf31821528f51479252836b672e5cf3db77240bfe8b26818a4</hash>
        <hash alg="SHA3-512">75e0632cacdf254b5a57b96efd0540e9f24f9eebbdbb990f850d3eeafb2061991d5868794c1f9c38f255aa8111d159a9e972e925de106f7c875e72a3ee45b2bd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.build.jetifier/jetifier-core@1.0.0-beta09?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://source.android.com</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.android.tools.build.jetifier/jetifier-processor@1.0.0-beta09?type=jar">
      <group>com.android.tools.build.jetifier</group>
      <name>jetifier-processor</name>
      <version>1.0.0-beta09</version>
      <description>Android Jetifier Processor</description>
      <hashes>
        <hash alg="MD5">e61c807b62018a2951fb9ad632ef2fb9</hash>
        <hash alg="SHA-1">fb2a015ff56e24939a88593ac73b84e627864476</hash>
        <hash alg="SHA-256">1838f9ee70120e64f45612ca071972ac83ddc118185abffbce3932a4710325eb</hash>
        <hash alg="SHA-512">44769eb08bf1841d5ed454d600cf0384238a5d59756d7e607083cf4f3a5d53f99595cc5fbebed6d904592fe014230bcba94dd44fc0a9961e28bb68f87a7eeeca</hash>
        <hash alg="SHA-384">68c205ab0e0352365d24c23627a0c729a0f4b25ddd2f4a37c4ee6d8c2679696e1993ba5bcd89540b5be398c179f7c502</hash>
        <hash alg="SHA3-384">d215d4ad58731184464d3fb631d7d968243227822acf77c1c48e671b00ee06b7233e84fd63edebca650e2e2b22cf2d6e</hash>
        <hash alg="SHA3-256">acb69d3d149c30be8de968c7e88e58ba542dd133ec0993f771339b327ba4588e</hash>
        <hash alg="SHA3-512">d13ff9d5f1e16385f35ae0cecad5895f48040874153e3cab95ac771edc46c493cc4951037c25d3e56bc3d9cf42d074053a81b9826a7f147fa6ad935791149f78</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.android.tools.build.jetifier/jetifier-processor@1.0.0-beta09?type=jar</purl>
      <externalReferences><reference type="vcs"><url>http://source.android.com</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar">
      <publisher>JDOM</publisher>
      <group>org.jdom</group>
      <name>jdom2</name>
      <version>2.0.6</version>
      <description>A complete, Java-based solution for accessing, manipulating, 
		and outputting XML data</description>
      <hashes>
        <hash alg="MD5">86a30c9b1ddc08ca155747890db423b7</hash>
        <hash alg="SHA-1">6f14738ec2e9dd0011e343717fa624a10f8aab64</hash>
        <hash alg="SHA-256">1345f11ba606d15603d6740551a8c21947c0215640770ec67271fe78bea97cf5</hash>
        <hash alg="SHA-512">315791dc16bc6240d81da7fee9ae325102ff7db19a57805335d189bc747abc4d1c80144589ebf956613b93b2263c7565fdf171aca0c6c598616eb3f0bdf4cc58</hash>
        <hash alg="SHA-384">6240f6747c788c1d512aa1383ff5648dc1c528504010d1dea0667cfa7b291e5521ad70521a8753e52c057edbdc190d36</hash>
        <hash alg="SHA3-384">5905840ddfa1bdad2bf8cc3b61a0509c438de94585473b5e4a4dccd8c653fe0a97b094b6703b502605b1141ad6b83d23</hash>
        <hash alg="SHA3-256">e46ea1f3ddd97c9e6a5714ed0e4f981962f4c11c28ec96f63edff801c202921a</hash>
        <hash alg="SHA3-512">4db8ae655765f69ffd94f4cfbf1d637a9159bb015af198902449ad0f9654b41aa3ec8695e36c358ce36ec7d3ebb67feafd955be6eefdb5d72f308e95a97ab8a9</hash>
      </hashes>
      <licenses>
        <license>
          <name>Similar to Apache License but with the acknowledgment clause removed</name>
          <url>https://raw.github.com/hunterhacker/jdom/master/LICENSE.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jdom/jdom2@2.0.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jdom.org</url></reference><reference type="mailing-list"><url>http://jdom.markmail.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.squareup/javapoet@1.10.0?type=jar">
      <publisher>Square, Inc.</publisher>
      <group>com.squareup</group>
      <name>javapoet</name>
      <version>1.10.0</version>
      <description>Use beautiful Java code to generate beautiful Java code.</description>
      <hashes>
        <hash alg="MD5">58f542814fa3501790a57c212f20dafe</hash>
        <hash alg="SHA-1">712c178d35185d8261295913c9f2a7d6867a6007</hash>
        <hash alg="SHA-256">20ef4b82e43ff7c652281a21313cf3b941092467add3fa73509c26f6969efdab</hash>
        <hash alg="SHA-512">67fe213b5ddd71fca4e28758025b34feb82fe7b5e5f50aa9c652714c21fddf0bf6fbd0c21c555e6824f5ff989a1feefc448a0cb376b2fa7c684abff70d51769c</hash>
        <hash alg="SHA-384">ca019700d32113ada83dca632f532c4f838b86aeee22ca30cd03c730ae14c57fd43ac873ae2713bce7067d634cb53088</hash>
        <hash alg="SHA3-384">af84f36d1679e78975cf87bb02ce77eb70698e937225ff9464250a8c1560de70938d6c675d602abab2860177bb5d5087</hash>
        <hash alg="SHA3-256">ff8dfc5b06ca179b3338d46e18b2c2517afd16aa7ac03e314a309f70cb01afb6</hash>
        <hash alg="SHA3-512">0fd2e2d3bc64d134878303ffd0a1b194b12f80153b92deaecbb782af3f299e617d60467d2307303a2a30a15bba48b7dcccc85129af8799771e978c3064f0e889</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.squareup/javapoet@1.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://squareup.com</url></reference><reference type="issue-tracker"><url>http://github.com/square/javapoet/issues</url></reference><reference type="vcs"><url>http://github.com/square/javapoet/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar">
      <group>com.google.protobuf</group>
      <name>protobuf-java</name>
      <version>3.10.0</version>
      <description>Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an
    efficient yet extensible format.</description>
      <hashes>
        <hash alg="MD5">ee4e91af9399c52cdad88bd078f5a71a</hash>
        <hash alg="SHA-1">410b61dd0088aab4caa05739558d43df248958c9</hash>
        <hash alg="SHA-256">161d7d61a8cb3970891c299578702fd079646e032329d6c2cabf998d191437c9</hash>
        <hash alg="SHA-512">19ab3bca6cf7cdc255248e20b4d8347e049919ce3848214b99495adec810a63f8f866975e33498f15fbaf3765b8b1ec9df28cc5030d9c6d7930b288f684783a0</hash>
        <hash alg="SHA-384">5fdfc9e37c6027eed0cbace8915764af36560454d774de485c9f348df65a7e21c0b2d32106c37bf5cbc33a8eaf492273</hash>
        <hash alg="SHA3-384">5931fa5756acb48017e9ef9916b2e6c4269ef583f6368ed4e9958646dd2ebf1c5a748e201ea673a0240af7ae9feea023</hash>
        <hash alg="SHA3-256">19230575172d85efa1ea68eae59cb0e6aa9308d7e64556a7364cba5d19cad5d6</hash>
        <hash alg="SHA3-512">3c67f581a56aa2d8e7f0a6723395b030db3b62c8b8c10433501cbe602c2ae28729e2aa03a44cf478a440729f59d4c947e3430c308c0708dfc53314f348dbf44a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/protocolbuffers/protobuf</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.protobuf/protobuf-java-util@3.10.0?type=jar">
      <group>com.google.protobuf</group>
      <name>protobuf-java-util</name>
      <version>3.10.0</version>
      <description>Utilities for Protocol Buffers</description>
      <hashes>
        <hash alg="MD5">2e87271cc08f426faf26f474f7308a74</hash>
        <hash alg="SHA-1">a68c906db83e93babbb4024ce91e7441bb7598dd</hash>
        <hash alg="SHA-256">619b0b0dc344cb141e493cbedc5687c8fb7c985e609a1b035e621bfab2f89021</hash>
        <hash alg="SHA-512">9f34853b22f70138e82e88bafe2480ad37b8716ad9c0558ce17c787dff75dd563cfa0d8fc75b306bb84c18c4e55e8a1636a3bd27e9a6328ae193c1480448eec8</hash>
        <hash alg="SHA-384">13ba4abfae62f251cf62732063c9d12229cec4d898ec86aa498af309e3952671a1596b5b2cf3358ced6f1db806fba440</hash>
        <hash alg="SHA3-384">67f141bd526eee32ca6e2bc1b274f6bf79345db2f3b168686299b178677b6ae351710887f56270894d0a360ea421f4db</hash>
        <hash alg="SHA3-256">ccda6c4c88448309d081732e28f2b026797dc782563005fba1ec91b359288708</hash>
        <hash alg="SHA3-512">8e0e03e4e57fca340cfa08279e88cb1075e61a4793189d19002ec50d2cc8cd642be09c4bbf76aeb549533d854c262041ab04402f49c18eaab1266d4fa0b9f4d2</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.protobuf/protobuf-java-util@3.10.0?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/protocolbuffers/protobuf</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.crypto.tink/tink@1.3.0-rc2?type=jar">
      <group>com.google.crypto.tink</group>
      <name>tink</name>
      <version>1.3.0-rc2</version>
      <description>Tink is a small cryptographic library that provides a safe, simple, agile and fast way to accomplish some common cryptographic tasks.</description>
      <hashes>
        <hash alg="MD5">db3c9fedcd9cc7daf4c09657c0bba262</hash>
        <hash alg="SHA-1">c7efb1ecc3b667b8a0789a1b019b06269037e19b</hash>
        <hash alg="SHA-256">3aa576b5671d0e26d83d7fdb7186810b5672f00bf8e72184260bcc7c2d7dc07a</hash>
        <hash alg="SHA-512">a598e6f9f0bd9ea49cbc89029b39d520472237a27e379573673ab545844ffe3d71ae1a0a0660c2615442ef5d72a0c7427e1b4bd21cbc565024e1324e94f80f98</hash>
        <hash alg="SHA-384">02453ec0b7b38a3729fec2ccd67a38477ded796260b5cce989054d62a7f68f76153e5647d6fefb5ed4cb9574adc30ec9</hash>
        <hash alg="SHA3-384">5440f104eb2bef8b164cb07323d715ea2cb6a0066080278b70b28695c9e0696b97e1965e40cb98c6e90f8f12756794ac</hash>
        <hash alg="SHA3-256">54c041a200633145630ad630807a3fb556a0bd2587fe478d430e8f1bd5d77bb6</hash>
        <hash alg="SHA3-512">0312502554709374c729464924ce0ee3fdf4acbf60ddb3ffdaa0746eb7b1637d1289322659ba16b5697210e71fb087588a599998a9e3c4c77b92a0f660c5f81c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.crypto.tink/tink@1.3.0-rc2?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/tink/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/group/tink-users</url></reference><reference type="vcs"><url>https://github.com/google/tink.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.json/json@20180813?type=jar">
      <group>org.json</group>
      <name>json</name>
      <version>20180813</version>
      <description>JSON is a light-weight, language independent, data interchange format.
		See http://www.JSON.org/

		The files in this package implement JSON encoders/decoders in Java.
		It also includes the capability to convert between JSON and XML, HTTP
		headers, Cookies, and CDL.

		This is a reference implementation. There is a large number of JSON packages
		in Java. Perhaps someday the Java community will standardize on one. Until
		then, choose carefully.

		The license includes this restriction: "The software shall be used for good,
		not evil." If your conscience cannot live with that, then choose a different
		package.</description>
      <hashes>
        <hash alg="MD5">0b1d8d278105d260dd8f5a97d80bfd5a</hash>
        <hash alg="SHA-1">8566b2b0391d9d4479ea225645c6ed47ef17fe41</hash>
        <hash alg="SHA-256">518080049ba83181914419d11a25d9bc9833a2d729b6a6e7469fa52851356da8</hash>
        <hash alg="SHA-512">f95d5ace1435e8c889e937ec75f32e3a6715a134bd2eae9e8a1b1decd9c306836b2a24324ee1abf445a53209c2311c62d41896f4a5a7730932ce9acdccf90682</hash>
        <hash alg="SHA-384">5ccc68d1d1bd2ff863189925abd8c03d2932d32cc8d104db310bd1768a11d86578ed28030b4079f48c249eb294ab9b60</hash>
        <hash alg="SHA3-384">784b8d82cc6560ca628fecaee2f8b2c0e00e03ab1754c9da89b4258a7fb0191436ed9da34d54f162e79ba3521d790d6f</hash>
        <hash alg="SHA3-256">fb0bdba8443b4552bcf224841689f5e40be43f62727ec805621c661021661e42</hash>
        <hash alg="SHA3-512">e617ba9cc7f5ca6d303280fd5c14dded476cbbea4c5f1741cfc389cb8440574771bead563978a1f49e0dec045357a3e89a1efebe4ae7183f91bed814ecbf0e9b</hash>
      </hashes>
      <licenses>
        <license>
          <id>JSON</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.json/json@20180813?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/douglascrockford/JSON-java.git</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.testing.platform/core-proto@0.0.8-alpha01?type=jar">
      <group>com.google.testing.platform</group>
      <name>core-proto</name>
      <version>0.0.8-alpha01</version>
      <description>The AndroidX Test Library provides an extensive framework for testing Android apps</description>
      <hashes>
        <hash alg="MD5">c4ca15c622b6ecbf566cd8ea28a90a55</hash>
        <hash alg="SHA-1">f107a202fcbb34706f08e7fb8c31ea25bf504d7c</hash>
        <hash alg="SHA-256">2deaa8c40f27c8af158ae2c2132927cd9be345deb1450da49aca29cb168289cd</hash>
        <hash alg="SHA-512">19899c81d88c9a591c305b1e295284e11363ab94c6a667225cadc00f0b3565205349a93c7717152506e4a5545bc26e523c45b6b3a3341be37eb3704110f8405a</hash>
        <hash alg="SHA-384">f460c4aacfb104837974ab73de303c2edfa6e3aa667607f8f6d95e49627092c92a5e12c4ee151e96e649a85e39384889</hash>
        <hash alg="SHA3-384">bd6a231d037bebab042a31418f6c30c5ed78b403b92bc9327ecaaeddb9ad3be8f065f666ad4156185120c4d471a3c6da</hash>
        <hash alg="SHA3-256">1e02d047e6bfd265c64a7428d8f5cb3a7b2d274d0c9afcfea4a7daf66d5cce95</hash>
        <hash alg="SHA3-512">30975d228c4b1b32ceeb463ea2037684cf6d6e3cdd61a5a55c420d1eee4531ad46235a953aca68cbce7b84863392cc4853563cdd3968a178ad40bb357d02853b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.testing.platform/core-proto@0.0.8-alpha01?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar">
      <group>com.google.flatbuffers</group>
      <name>flatbuffers-java</name>
      <version>1.12.0</version>
      <description>Memory Efficient Serialization Library</description>
      <hashes>
        <hash alg="MD5">26ecc1a330e441f909226a338d4bef65</hash>
        <hash alg="SHA-1">8201cc7b511177a37071249e891f2f2fea4b32e9</hash>
        <hash alg="SHA-256">3f8c088b4dd04a9858721f2e162508c94db0dd86f961e306ee63ef2eda871bf7</hash>
        <hash alg="SHA-512">20750e91441c074ca28f72b0b6494e8f0bfbc94caff04eb49727efc6b28e453c84732f24acc52cf36b36ba66b57a145d003e87f749c5c4518ddc6f9247b8ab47</hash>
        <hash alg="SHA-384">7af7d2e03ae71bea1ebac6cc9c2926b9f952c48a124db160ee2327f2f7e6b2e3ba153e5924971788392fc278b0e04ee9</hash>
        <hash alg="SHA3-384">f52d13b7971ff376414123865fef4def1cf674d12cde8159f77ab4a795438a1c623fd966a014cea9a17cb313aafa7fe2</hash>
        <hash alg="SHA3-256">5a1eaf3b52f2b67805156d2c4ec964dc97598fb4d134446fd0ca13b45a6f4b6a</hash>
        <hash alg="SHA3-512">294e6a25c027d9dc81be912e60923f2ea20eb3f705233840e4c5bae4775c3476d57a6bc73f320f3407f0f7796a2e926b21c3207181ebb90cbaff6d9c272ae61c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/google/flatbuffers</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.tensorflow/tensorflow-lite-metadata@0.1.0-rc2?type=jar">
      <group>org.tensorflow</group>
      <name>tensorflow-lite-metadata</name>
      <version>0.1.0-rc2</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <hashes>
        <hash alg="MD5">81dd4a19e1838d552b1da1a70b1db1de</hash>
        <hash alg="SHA-1">7aa9b3e16d85c2aae5eff741265315a37c9f731a</hash>
        <hash alg="SHA-256">2c2a264f842498c36d34d2a7b91342490d9a962862c85baac1acd54ec2fca6d9</hash>
        <hash alg="SHA-512">eb5ce0e80d98c1b60a52b699c7c7bc7c908852785e94e0f5aa54eaca751a7dd8eb1eefa330a14479c1ff13bb3cde2856c67afe8ff5572be0f4120e5cf1b884b8</hash>
        <hash alg="SHA-384">522e7f0619a1d6f79681addeac1a0d9df53db120c9420215632a6894e8c9aec78e877ebc975b555a238a03600b196b08</hash>
        <hash alg="SHA3-384">5fdd11059314c53d83d1b328e29ab317dbd0b1a54ca6f8c0d6285c87156f1b744f40b35a9f53b300e2f3a56c742c4f29</hash>
        <hash alg="SHA3-256">5d1c98185ca4260f46c58c3ac6fabe3ae13e860aa8d73108592e16d173ff3119</hash>
        <hash alg="SHA3-512">536417385574140e7808776280cafc5b0981e0c98d4734f7e59b0ff3d6a75f58047e09b7440ea0c055e5d910afc8788ea94cfff640ad33d76d8296fed2bec490</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.tensorflow/tensorflow-lite-metadata@0.1.0-rc2?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://svn.sonatype.org/spice/tags/oss-parent-7</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.eclipse.steady/root@3.2.5?type=pom">
      <dependency ref="pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/shared@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang-java@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang-java-reach@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang-java-reach-wala@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang-java-reach-soot@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang-python@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/repo-client@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/patch-analyzer@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/patch-lib-analyzer@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/kb-importer@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/cli-scanner@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/plugin-maven@3.2.5?type=maven-plugin"/>
      <dependency ref="pkg:maven/org.eclipse.steady/frontend-apps@3.2.5?type=war"/>
      <dependency ref="pkg:maven/org.eclipse.steady/frontend-bugs@3.2.5?type=war"/>
      <dependency ref="pkg:maven/org.eclipse.steady/plugin-gradle@3.2.5?type=pom"/>
    </dependency>
    <dependency ref="pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.steady/shared@3.2.5?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar"/>
      <dependency ref="pkg:maven/commons-configuration/commons-configuration@1.10?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar"/>
    <dependency ref="pkg:maven/commons-configuration/commons-configuration@1.10?type=jar">
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.1?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.eclipse.steady/shared@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"/>
      <dependency ref="pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.4?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar"/>
      <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.11?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar"/>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.11?type=jar"/>
    <dependency ref="pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar"/>
    <dependency ref="pkg:maven/commons-cli/commons-cli@1.4?type=jar"/>
    <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
    <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.11?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.11?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar"/>
    <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar">
      <dependency ref="pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.steady/lang-java@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.bitbucket.mstrobel/procyon-compilertools@0.5.36?type=jar"/>
      <dependency ref="pkg:maven/ch.uzh.ifi.seal/changedistiller@0.0.4?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject.extensions/guice-assistedinject@4.2.3?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jdt.core.compiler/ecj@4.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.bitbucket.mstrobel/procyon-compilertools@0.5.36?type=jar">
      <dependency ref="pkg:maven/org.bitbucket.mstrobel/procyon-core@0.5.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.bitbucket.mstrobel/procyon-core@0.5.36?type=jar"/>
    <dependency ref="pkg:maven/ch.uzh.ifi.seal/changedistiller@0.0.4?type=jar"/>
    <dependency ref="pkg:maven/com.google.inject.extensions/guice-assistedinject@4.2.3?type=jar">
      <dependency ref="pkg:maven/com.google.inject/guice@4.2.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.inject/guice@4.2.3?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@27.1-jre?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@27.1-jre?type=jar">
      <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@2.5.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.2.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@2.5.2?type=jar"/>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.2.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.jdt.core.compiler/ecj@4.6.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.steady/lang-java-reach@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.eclipse.steady/lang-java@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"/>
      <dependency ref="pkg:maven/com.ibm.wala/com.ibm.wala.core@1.4.3?type=jar"/>
      <dependency ref="pkg:maven/com.ibm.wala/com.ibm.wala.util@1.4.3?type=jar"/>
      <dependency ref="pkg:maven/com.ibm.wala/com.ibm.wala.shrike@1.4.3?type=jar"/>
      <dependency ref="pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.ibm.wala/com.ibm.wala.core@1.4.3?type=jar">
      <dependency ref="pkg:maven/com.ibm.wala/com.ibm.wala.util@1.4.3?type=jar"/>
      <dependency ref="pkg:maven/com.ibm.wala/com.ibm.wala.shrike@1.4.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.ibm.wala/com.ibm.wala.util@1.4.3?type=jar"/>
    <dependency ref="pkg:maven/com.ibm.wala/com.ibm.wala.shrike@1.4.3?type=jar">
      <dependency ref="pkg:maven/com.ibm.wala/com.ibm.wala.util@1.4.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.steady/lang-java-reach-wala@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.eclipse.steady/lang-java-reach@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.steady/lang-java-reach-soot@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.eclipse.steady/lang-java-reach@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/ca.mcgill.sable/soot@4.1.0?type=jar"/>
      <dependency ref="pkg:maven/de.fraunhofer.sit.sse.flowdroid/soot-infoflow@2.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@30.1.1-jre?type=jar"/>
      <dependency ref="pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/ca.mcgill.sable/soot@4.1.0?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.smali/dexlib2@2.3.4?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm@7.1?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm-tree@7.1?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm-util@7.1?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm-commons@7.1?type=jar"/>
      <dependency ref="pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar"/>
      <dependency ref="pkg:maven/xmlpull/xmlpull@1.1.3.4d_b4_min?type=jar"/>
      <dependency ref="pkg:maven/de.upb.cs.swt/axml@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/ca.mcgill.sable/polyglot@2006?type=jar"/>
      <dependency ref="pkg:maven/de.upb.cs.swt/heros@1.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.5?type=jar"/>
      <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
      <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.4.0-b180725.0427?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.4.0-b180830.0438?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.smali/dexlib2@2.3.4?type=jar"/>
    <dependency ref="pkg:maven/org.ow2.asm/asm@7.1?type=jar"/>
    <dependency ref="pkg:maven/org.ow2.asm/asm-tree@7.1?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm@7.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.ow2.asm/asm-util@7.1?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm@7.1?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm-tree@7.1?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm-analysis@7.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.ow2.asm/asm-analysis@7.1?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm-tree@7.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.ow2.asm/asm-commons@7.1?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm@7.1?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm-tree@7.1?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm-analysis@7.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/xmlpull/xmlpull@1.1.3.4d_b4_min?type=jar"/>
    <dependency ref="pkg:maven/de.upb.cs.swt/axml@2.0.0?type=jar"/>
    <dependency ref="pkg:maven/ca.mcgill.sable/polyglot@2006?type=jar"/>
    <dependency ref="pkg:maven/de.upb.cs.swt/heros@1.2.0?type=jar">
      <dependency ref="pkg:maven/org.functionaljava/functionaljava@4.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.functionaljava/functionaljava@4.2?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.5?type=jar"/>
    <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
    <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.4.0-b180725.0427?type=jar">
      <dependency ref="pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.4.0-b180830.0438?type=jar">
      <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@2.4.0-b180830.0438?type=jar"/>
      <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.jvnet.staxex/stax-ex@1.8?type=jar"/>
      <dependency ref="pkg:maven/com.sun.xml.fastinfoset/FastInfoset@1.2.15?type=jar"/>
      <dependency ref="pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@2.4.0-b180830.0438?type=jar"/>
    <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.7?type=jar"/>
    <dependency ref="pkg:maven/org.jvnet.staxex/stax-ex@1.8?type=jar"/>
    <dependency ref="pkg:maven/com.sun.xml.fastinfoset/FastInfoset@1.2.15?type=jar"/>
    <dependency ref="pkg:maven/de.fraunhofer.sit.sse.flowdroid/soot-infoflow@2.10.0?type=jar">
      <dependency ref="pkg:maven/org.soot-oss/soot@4.3.0?type=jar"/>
      <dependency ref="pkg:maven/net.sf.trove4j/trove4j@3.0.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.soot-oss/soot@4.3.0?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar"/>
      <dependency ref="pkg:maven/xmlpull/xmlpull@1.1.3.4d_b4_min?type=jar"/>
      <dependency ref="pkg:maven/ca.mcgill.sable/polyglot@2006?type=jar"/>
      <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
      <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.4.0-b180725.0427?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.4.0-b180830.0438?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.sf.trove4j/trove4j@3.0.3?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@30.1.1-jre?type=jar">
      <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.8.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.5.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.8.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.5.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.steady/lang-python@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.steady/repo-client@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.eclipse.steady/shared@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.tmatesoft.svnkit/svnkit@1.9.3?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jgit/org.eclipse.jgit@4.11.7.201903122105-r?type=jar"/>
      <dependency ref="pkg:maven/commons-configuration/commons-configuration@1.10?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.tmatesoft.svnkit/svnkit@1.9.3?type=jar">
      <dependency ref="pkg:maven/de.regnis.q.sequence/sequence-library@1.0.3?type=jar"/>
      <dependency ref="pkg:maven/org.tmatesoft.sqljet/sqljet@1.1.11?type=jar"/>
      <dependency ref="pkg:maven/net.java.dev.jna/jna@4.1.0?type=jar"/>
      <dependency ref="pkg:maven/net.java.dev.jna/jna-platform@4.1.0?type=jar"/>
      <dependency ref="pkg:maven/com.trilead/trilead-ssh2@1.0.0-build221?type=jar"/>
      <dependency ref="pkg:maven/com.jcraft/jsch.agentproxy.connector-factory@0.0.7?type=jar"/>
      <dependency ref="pkg:maven/com.jcraft/jsch.agentproxy.svnkit-trilead-ssh2@0.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/de.regnis.q.sequence/sequence-library@1.0.3?type=jar"/>
    <dependency ref="pkg:maven/org.tmatesoft.sqljet/sqljet@1.1.11?type=jar">
      <dependency ref="pkg:maven/org.antlr/antlr-runtime@3.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.antlr/antlr-runtime@3.4?type=jar"/>
    <dependency ref="pkg:maven/net.java.dev.jna/jna@4.1.0?type=jar"/>
    <dependency ref="pkg:maven/net.java.dev.jna/jna-platform@4.1.0?type=jar">
      <dependency ref="pkg:maven/net.java.dev.jna/jna@4.1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.trilead/trilead-ssh2@1.0.0-build221?type=jar"/>
    <dependency ref="pkg:maven/com.jcraft/jsch.agentproxy.connector-factory@0.0.7?type=jar">
      <dependency ref="pkg:maven/com.jcraft/jsch.agentproxy.core@0.0.7?type=jar"/>
      <dependency ref="pkg:maven/com.jcraft/jsch.agentproxy.usocket-jna@0.0.7?type=jar"/>
      <dependency ref="pkg:maven/com.jcraft/jsch.agentproxy.usocket-nc@0.0.7?type=jar"/>
      <dependency ref="pkg:maven/com.jcraft/jsch.agentproxy.sshagent@0.0.7?type=jar"/>
      <dependency ref="pkg:maven/com.jcraft/jsch.agentproxy.pageant@0.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.jcraft/jsch.agentproxy.core@0.0.7?type=jar"/>
    <dependency ref="pkg:maven/com.jcraft/jsch.agentproxy.usocket-jna@0.0.7?type=jar">
      <dependency ref="pkg:maven/com.jcraft/jsch.agentproxy.core@0.0.7?type=jar"/>
      <dependency ref="pkg:maven/net.java.dev.jna/platform@3.4.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.java.dev.jna/platform@3.4.0?type=jar"/>
    <dependency ref="pkg:maven/com.jcraft/jsch.agentproxy.usocket-nc@0.0.7?type=jar">
      <dependency ref="pkg:maven/com.jcraft/jsch.agentproxy.core@0.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.jcraft/jsch.agentproxy.sshagent@0.0.7?type=jar">
      <dependency ref="pkg:maven/com.jcraft/jsch.agentproxy.core@0.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.jcraft/jsch.agentproxy.pageant@0.0.7?type=jar">
      <dependency ref="pkg:maven/com.jcraft/jsch.agentproxy.core@0.0.7?type=jar"/>
      <dependency ref="pkg:maven/net.java.dev.jna/platform@3.4.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.jcraft/jsch.agentproxy.svnkit-trilead-ssh2@0.0.7?type=jar">
      <dependency ref="pkg:maven/com.jcraft/jsch.agentproxy.core@0.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jgit/org.eclipse.jgit@4.11.7.201903122105-r?type=jar">
      <dependency ref="pkg:maven/com.jcraft/jsch@0.1.54?type=jar"/>
      <dependency ref="pkg:maven/com.jcraft/jzlib@1.1.1?type=jar"/>
      <dependency ref="pkg:maven/com.googlecode.javaewah/JavaEWAH@1.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.jcraft/jsch@0.1.54?type=jar"/>
    <dependency ref="pkg:maven/com.jcraft/jzlib@1.1.1?type=jar"/>
    <dependency ref="pkg:maven/com.googlecode.javaewah/JavaEWAH@1.1.6?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.2?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.steady/patch-analyzer@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/repo-client@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang-java@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang-python@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.steady/patch-lib-analyzer@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.eclipse.steady/lang-java@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang-python@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.steady/kb-importer@3.2.5?type=jar">
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.4?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang-java@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang-python@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/com.jayway.jsonpath/json-path@2.7.0?type=jar"/>
      <dependency ref="pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.jayway.jsonpath/json-path@2.7.0?type=jar">
      <dependency ref="pkg:maven/net.minidev/json-smart@2.4.7?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.minidev/json-smart@2.4.7?type=jar">
      <dependency ref="pkg:maven/net.minidev/accessors-smart@2.4.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.minidev/accessors-smart@2.4.7?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.ow2.asm/asm@9.1?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.steady/cli-scanner@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang-java-reach@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang-java-reach-wala@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang-java-reach-soot@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang-python@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.steady/plugin-maven@3.2.5?type=maven-plugin">
      <dependency ref="pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang-java-reach@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang-java-reach-wala@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang-java-reach-soot@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-core@3.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.6.4?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.12?type=jar"/>
      <dependency ref="pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-core@3.8.4?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@3.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@3.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-resolver-provider@3.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject/guice@4.2.2?classifier=no_aop&amp;type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-model@3.8.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.8.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@3.8.4?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@3.8.4?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@3.8.4?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.4.1?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.8.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.8.4?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.8.4?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.8.4?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@3.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-resolver-provider@3.8.4?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar">
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.inject/guice@4.2.2?classifier=no_aop&amp;type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.6.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ant/ant@1.10.12?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant-launcher@1.10.12?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ant/ant-launcher@1.10.12?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.steady/frontend-apps@3.2.5?type=war">
      <dependency ref="pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.steady/frontend-bugs@3.2.5?type=war">
      <dependency ref="pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.steady/rest-lib-utils@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.eclipse.steady/lang-java@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang-python@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-web@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-data-rest@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.7?type=jar"/>
      <dependency ref="pkg:maven/org.springdoc/springdoc-openapi-ui@1.2.32?type=jar"/>
      <dependency ref="pkg:maven/com.jeantessier/dependency-finder@1.2.1-beta5-log4j?type=jar"/>
      <dependency ref="pkg:maven/oro/oro@2.0.8?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@30.1.1-jre?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant@1.10.12?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.21?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.6?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.6?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.gson/gson@2.8.9?type=jar"/>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter@2.5.12?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.yaml/snakeyaml@1.28?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot@2.5.12?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-context@5.3.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-core@5.3.18?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-jcl@5.3.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-context@5.3.18?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-aop@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-expression@5.3.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-aop@5.3.18?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.18?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-expression@5.3.18?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.5.12?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot@2.5.12?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.5.12?type=jar">
      <dependency ref="pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar">
      <dependency ref="pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.17.2?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
    <dependency ref="pkg:maven/org.springframework/spring-jcl@5.3.18?type=jar"/>
    <dependency ref="pkg:maven/org.yaml/snakeyaml@1.28?type=jar"/>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-web@2.5.12?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-json@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-web@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-webmvc@5.3.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-json@2.5.12?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-web@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.12.6?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.12.6?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.12.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-web@5.3.18?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.12.6?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.6?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.12.6?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.6?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.6?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.12.6?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.6?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@2.5.12?type=jar">
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.60?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.60?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.60?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.60?type=jar"/>
    <dependency ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.60?type=jar"/>
    <dependency ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.60?type=jar">
      <dependency ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.60?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-webmvc@5.3.18?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-aop@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-context@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-expression@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-web@5.3.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-data-rest@2.5.12?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-web@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.data/spring-data-rest-webmvc@3.5.10?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.data/spring-data-rest-webmvc@3.5.10?type=jar">
      <dependency ref="pkg:maven/org.springframework.data/spring-data-rest-core@3.5.10?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-webmvc@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.6?type=jar"/>
      <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.data/spring-data-rest-core@3.5.10?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-tx@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.hateoas/spring-hateoas@1.3.7?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.data/spring-data-commons@2.5.10?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.plugin/spring-plugin-core@2.0.0.RELEASE?type=jar"/>
      <dependency ref="pkg:maven/org.atteo/evo-inflector@1.2.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.6?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.12.6?type=jar"/>
      <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-tx@5.3.18?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.hateoas/spring-hateoas@1.3.7?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-aop@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-context@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-web@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.plugin/spring-plugin-core@2.0.0.RELEASE?type=jar"/>
      <dependency ref="pkg:maven/com.jayway.jsonpath/json-path@2.5.0?type=jar"/>
      <dependency ref="pkg:maven/net.minidev/json-smart@2.4.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.plugin/spring-plugin-core@2.0.0.RELEASE?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-context@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-aop@5.3.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.jayway.jsonpath/json-path@2.5.0?type=jar"/>
    <dependency ref="pkg:maven/net.minidev/json-smart@2.4.8?type=jar"/>
    <dependency ref="pkg:maven/org.springframework.data/spring-data-commons@2.5.10?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.atteo/evo-inflector@1.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.5.12?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/io.micrometer/micrometer-core@1.7.10?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.5.12?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-actuator@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.12.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-actuator@2.5.12?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot@2.5.12?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.micrometer/micrometer-core@1.7.10?type=jar">
      <dependency ref="pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar"/>
      <dependency ref="pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar"/>
    <dependency ref="pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.15?type=jar"/>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
    <dependency ref="pkg:maven/commons-io/commons-io@2.7?type=jar"/>
    <dependency ref="pkg:maven/org.springdoc/springdoc-openapi-ui@1.2.32?type=jar">
      <dependency ref="pkg:maven/org.springdoc/springdoc-openapi-webmvc-core@1.2.32?type=jar"/>
      <dependency ref="pkg:maven/org.webjars/swagger-ui@3.25.0?type=jar"/>
      <dependency ref="pkg:maven/org.webjars/webjars-locator@0.38?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springdoc/springdoc-openapi-webmvc-core@1.2.32?type=jar">
      <dependency ref="pkg:maven/org.springdoc/springdoc-openapi-common@1.2.32?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-webmvc@5.3.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springdoc/springdoc-openapi-common@1.2.32?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-web@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/io.swagger.core.v3/swagger-models@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/io.swagger.core.v3/swagger-annotations@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/io.swagger.core.v3/swagger-integration@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/io.github.classgraph/classgraph@4.8.44?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.swagger.core.v3/swagger-models@2.1.1?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.swagger.core.v3/swagger-annotations@2.1.1?type=jar"/>
    <dependency ref="pkg:maven/io.swagger.core.v3/swagger-integration@2.1.1?type=jar">
      <dependency ref="pkg:maven/io.swagger.core.v3/swagger-core@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/io.swagger.core.v3/swagger-models@2.1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.swagger.core.v3/swagger-core@2.1.1?type=jar">
      <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.6?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.12.6?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.12.6?type=jar"/>
      <dependency ref="pkg:maven/io.swagger.core.v3/swagger-annotations@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/io.swagger.core.v3/swagger-models@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar"/>
      <dependency ref="pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar"/>
      <dependency ref="pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.12.6?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.yaml/snakeyaml@1.28?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.github.classgraph/classgraph@4.8.44?type=jar"/>
    <dependency ref="pkg:maven/org.webjars/swagger-ui@3.25.0?type=jar"/>
    <dependency ref="pkg:maven/org.webjars/webjars-locator@0.38?type=jar">
      <dependency ref="pkg:maven/org.webjars/webjars-locator-core@0.46?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.webjars/webjars-locator-core@0.46?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.jeantessier/dependency-finder@1.2.1-beta5-log4j?type=jar"/>
    <dependency ref="pkg:maven/oro/oro@2.0.8?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.21?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.steady/rest-backend@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.eclipse.steady/shared@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-web@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-data-rest@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"/>
      <dependency ref="pkg:maven/com.jayway.jsonpath/json-path@2.7.0?type=jar"/>
      <dependency ref="pkg:maven/org.springdoc/springdoc-openapi-ui@1.2.32?type=jar"/>
      <dependency ref="pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar"/>
      <dependency ref="pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@30.0-jre?type=jar"/>
      <dependency ref="pkg:maven/org.flywaydb/flyway-core@6.5.7?type=jar"/>
      <dependency ref="pkg:maven/javax.interceptor/javax.interceptor-api@1.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.21?type=jar"/>
      <dependency ref="pkg:maven/org.postgresql/postgresql@42.4.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.5.12?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-aop@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar"/>
      <dependency ref="pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3?type=jar"/>
      <dependency ref="pkg:maven/org.hibernate/hibernate-core@5.4.33?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.data/spring-data-jpa@2.5.10?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-aspects@5.3.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-aop@2.5.12?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-aop@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.aspectj/aspectjweaver@1.9.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.aspectj/aspectjweaver@1.9.7?type=jar"/>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.5.12?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter@2.5.12?type=jar"/>
      <dependency ref="pkg:maven/com.zaxxer/HikariCP@4.0.3?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-jdbc@5.3.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.zaxxer/HikariCP@4.0.3?type=jar"/>
    <dependency ref="pkg:maven/org.springframework/spring-jdbc@5.3.18?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-tx@5.3.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar"/>
    <dependency ref="pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3?type=jar"/>
    <dependency ref="pkg:maven/org.hibernate/hibernate-core@5.4.33?type=jar">
      <dependency ref="pkg:maven/org.jboss.logging/jboss-logging@3.4.3.Final?type=jar"/>
      <dependency ref="pkg:maven/org.javassist/javassist@3.27.0-GA?type=jar"/>
      <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.10.22?type=jar"/>
      <dependency ref="pkg:maven/antlr/antlr@2.7.7?type=jar"/>
      <dependency ref="pkg:maven/org.jboss/jandex@2.2.3.Final?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml/classmate@1.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.dom4j/dom4j@2.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jboss.logging/jboss-logging@3.4.3.Final?type=jar"/>
    <dependency ref="pkg:maven/org.javassist/javassist@3.27.0-GA?type=jar"/>
    <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.10.22?type=jar"/>
    <dependency ref="pkg:maven/antlr/antlr@2.7.7?type=jar"/>
    <dependency ref="pkg:maven/org.jboss/jandex@2.2.3.Final?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml/classmate@1.5.1?type=jar"/>
    <dependency ref="pkg:maven/org.dom4j/dom4j@2.1.3?type=jar"/>
    <dependency ref="pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final?type=jar">
      <dependency ref="pkg:maven/org.jboss.logging/jboss-logging@3.4.3.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar"/>
      <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"/>
      <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
    <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar"/>
    <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"/>
    <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.springframework.data/spring-data-jpa@2.5.10?type=jar">
      <dependency ref="pkg:maven/org.springframework.data/spring-data-commons@2.5.10?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-orm@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-context@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-aop@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-tx@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-orm@5.3.18?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-jdbc@5.3.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-tx@5.3.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-aspects@5.3.18?type=jar">
      <dependency ref="pkg:maven/org.aspectj/aspectjweaver@1.9.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.minidev/accessors-smart@2.4.8?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar">
      <dependency ref="pkg:maven/javax.activation/activation@1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.activation/activation@1.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@30.0-jre?type=jar">
      <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.5.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.3.4?type=jar"/>
      <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.5.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.3.4?type=jar"/>
    <dependency ref="pkg:maven/org.flywaydb/flyway-core@6.5.7?type=jar"/>
    <dependency ref="pkg:maven/javax.interceptor/javax.interceptor-api@1.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.postgresql/postgresql@42.4.2?type=jar">
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.5.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.steady/plugin-gradle@3.2.5?type=pom">
      <dependency ref="pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang-java-reach@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang-java-reach-wala@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.steady/lang-java-reach-soot@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.build/gradle@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools.build/gradle@4.2.1?type=jar">
      <dependency ref="pkg:maven/com.android.tools.build/builder@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.build/aapt2-proto@4.2.1-7147631?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.build/aaptcompiler@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.analytics-library/crash@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.lint/lint-gradle-api@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.build/gradle-api@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/androidx.databinding/databinding-compiler-common@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.build/transform-api@2.0.0-deprecated-use-gradle-api?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm@7.0?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm-analysis@7.0?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm-commons@7.0?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm-util@7.0?type=jar"/>
      <dependency ref="pkg:maven/net.sf.jopt-simple/jopt-simple@4.9?type=jar"/>
      <dependency ref="pkg:maven/net.sf.proguard/proguard-gradle@6.0.3?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.build/bundletool@1.1.0?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.build.jetifier/jetifier-core@1.0.0-beta09?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.build.jetifier/jetifier-processor@1.0.0-beta09?type=jar"/>
      <dependency ref="pkg:maven/com.squareup/javapoet@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java-util@3.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.crypto.tink/tink@1.3.0-rc2?type=jar"/>
      <dependency ref="pkg:maven/com.google.testing.platform/core-proto@0.0.8-alpha01?type=jar"/>
      <dependency ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.tensorflow/tensorflow-lite-metadata@0.1.0-rc2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools.build/builder@4.2.1?type=jar">
      <dependency ref="pkg:maven/com.android.tools.build/builder-model@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.build/builder-test-api@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools/sdklib@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools/sdk-common@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools/common@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.build/manifest-merger@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.ddms/ddmlib@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android/zipflinger@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android/signflinger@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.analytics-library/protos@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.analytics-library/tracker@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.build/apksig@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.build/apkzlib@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar"/>
      <dependency ref="pkg:maven/com.squareup/javawriter@2.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.56?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.56?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm@7.0?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm-commons@7.0?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm-util@7.0?type=jar"/>
      <dependency ref="pkg:maven/it.unimi.dsi/fastutil@8.4.0?type=jar"/>
      <dependency ref="pkg:maven/net.sf.jopt-simple/jopt-simple@4.9?type=jar"/>
      <dependency ref="pkg:maven/com.googlecode.json-simple/json-simple@1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools.build/builder-model@4.2.1?type=jar">
      <dependency ref="pkg:maven/com.android.tools/annotations@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools/annotations@27.2.1?type=jar"/>
    <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar">
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.4.31?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.4.31?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools.build/builder-test-api@4.2.1?type=jar">
      <dependency ref="pkg:maven/com.android.tools.ddms/ddmlib@27.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools.ddms/ddmlib@27.2.1?type=jar">
      <dependency ref="pkg:maven/com.android.tools/common@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/net.sf.kxml/kxml2@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools/sdklib@27.2.1?type=jar">
      <dependency ref="pkg:maven/com.android.tools.layoutlib/layoutlib-api@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools/dvlib@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools/repository@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpmime@4.5.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools.layoutlib/layoutlib-api@27.2.1?type=jar">
      <dependency ref="pkg:maven/com.android.tools/common@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/net.sf.kxml/kxml2@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools/annotations@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains/annotations@13.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools/dvlib@27.2.1?type=jar">
      <dependency ref="pkg:maven/com.android.tools/common@27.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools/common@27.2.1?type=jar">
      <dependency ref="pkg:maven/com.android.tools/annotations@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools/repository@27.2.1?type=jar">
      <dependency ref="pkg:maven/com.android.tools/common@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.sun.activation/javax.activation@1.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/com.google.jimfs/jimfs@1.1?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.sun.activation/javax.activation@1.2.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.jimfs/jimfs@1.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpmime@4.5.6?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools/sdk-common@27.2.1?type=jar">
      <dependency ref="pkg:maven/com.android.tools/sdklib@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.build/builder-test-api@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.build/builder-model@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.ddms/ddmlib@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.analytics-library/shared@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.56?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.56?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.4.31?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains.intellij.deps/trove4j@1.0.20181211?type=jar"/>
      <dependency ref="pkg:maven/xerces/xercesImpl@2.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools.analytics-library/shared@27.2.1?type=jar">
      <dependency ref="pkg:maven/com.android.tools.analytics-library/protos@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools/annotations@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools/common@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar"/>
      <dependency ref="pkg:maven/net.java.dev.jna/jna-platform@5.6.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools.analytics-library/protos@27.2.1?type=jar">
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.java.dev.jna/jna-platform@5.6.0?type=jar">
      <dependency ref="pkg:maven/net.java.dev.jna/jna@5.6.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.java.dev.jna/jna@5.6.0?type=jar"/>
    <dependency ref="pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.56?type=jar">
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.56?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.56?type=jar"/>
    <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.4.31?type=jar">
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.4.31?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar"/>
    <dependency ref="pkg:maven/org.jetbrains.intellij.deps/trove4j@1.0.20181211?type=jar"/>
    <dependency ref="pkg:maven/xerces/xercesImpl@2.12.0?type=jar">
      <dependency ref="pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"/>
    <dependency ref="pkg:maven/com.android.tools.build/manifest-merger@27.2.1?type=jar">
      <dependency ref="pkg:maven/com.android.tools/common@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools/sdklib@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools/sdk-common@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar"/>
      <dependency ref="pkg:maven/net.sf.kxml/kxml2@2.3.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.sf.kxml/kxml2@2.3.0?type=jar"/>
    <dependency ref="pkg:maven/com.android/zipflinger@4.2.1?type=jar">
      <dependency ref="pkg:maven/com.android.tools/annotations@27.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android/signflinger@4.2.1?type=jar">
      <dependency ref="pkg:maven/com.android.tools.build/apksig@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android/zipflinger@4.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools.build/apksig@4.2.1?type=jar"/>
    <dependency ref="pkg:maven/com.android.tools.analytics-library/tracker@27.2.1?type=jar">
      <dependency ref="pkg:maven/com.android.tools/annotations@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools/common@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.analytics-library/protos@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.analytics-library/shared@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools.build/apkzlib@4.2.1?type=jar">
      <dependency ref="pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.56?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.56?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.build/apksig@4.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.squareup/javawriter@2.5.0?type=jar"/>
    <dependency ref="pkg:maven/org.ow2.asm/asm@7.0?type=jar"/>
    <dependency ref="pkg:maven/org.ow2.asm/asm-commons@7.0?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm@7.0?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm-analysis@7.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.ow2.asm/asm-util@7.0?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm@7.0?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm-analysis@7.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/it.unimi.dsi/fastutil@8.4.0?type=jar"/>
    <dependency ref="pkg:maven/net.sf.jopt-simple/jopt-simple@4.9?type=jar"/>
    <dependency ref="pkg:maven/com.googlecode.json-simple/json-simple@1.1?type=jar"/>
    <dependency ref="pkg:maven/com.android.tools.build/aapt2-proto@4.2.1-7147631?type=jar">
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools.build/aaptcompiler@4.2.1?type=jar">
      <dependency ref="pkg:maven/com.android.tools.build/aapt2-proto@4.2.1-7147631?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.layoutlib/layoutlib-api@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jetbrains/annotations@13.0?type=jar"/>
    <dependency ref="pkg:maven/com.android.tools.analytics-library/crash@27.2.1?type=jar">
      <dependency ref="pkg:maven/com.android.tools/annotations@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpmime@4.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools.lint/lint-gradle-api@27.2.1?type=jar">
      <dependency ref="pkg:maven/com.android.tools/sdklib@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.lint/lint-model@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.build/gradle-api@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.4.31?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools.lint/lint-model@27.2.1?type=jar">
      <dependency ref="pkg:maven/com.android.tools/common@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools/sdk-common@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.build/builder-model@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar"/>
      <dependency ref="pkg:maven/net.sf.kxml/kxml2@2.3.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools.build/gradle-api@4.2.1?type=jar">
      <dependency ref="pkg:maven/com.android.tools.build/builder-test-api@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm@7.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.4.31?type=jar">
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.4.31?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains/annotations@13.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/androidx.databinding/databinding-compiler-common@4.2.1?type=jar">
      <dependency ref="pkg:maven/androidx.databinding/databinding-common@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.databinding/baseLibrary@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/com.googlecode.juniversalchardet/juniversalchardet@1.0.3?type=jar"/>
      <dependency ref="pkg:maven/com.squareup/javapoet@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools/annotations@27.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.android.tools.build.jetifier/jetifier-core@1.0.0-beta09?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/androidx.databinding/databinding-common@4.2.1?type=jar"/>
    <dependency ref="pkg:maven/com.android.databinding/baseLibrary@4.2.1?type=jar"/>
    <dependency ref="pkg:maven/com.googlecode.juniversalchardet/juniversalchardet@1.0.3?type=jar"/>
    <dependency ref="pkg:maven/com.squareup/javapoet@1.10.0?type=jar"/>
    <dependency ref="pkg:maven/com.android.tools.build.jetifier/jetifier-core@1.0.0-beta09?type=jar">
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.4.31?type=jar"/>
    <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.4.31?type=jar">
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.4.31?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools.build/transform-api@2.0.0-deprecated-use-gradle-api?type=jar"/>
    <dependency ref="pkg:maven/org.ow2.asm/asm-analysis@7.0?type=jar"/>
    <dependency ref="pkg:maven/net.sf.proguard/proguard-gradle@6.0.3?type=jar">
      <dependency ref="pkg:maven/net.sf.proguard/proguard-base@6.0.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.sf.proguard/proguard-base@6.0.3?type=jar"/>
    <dependency ref="pkg:maven/com.android.tools.build/bundletool@1.1.0?type=jar">
      <dependency ref="pkg:maven/com.google.auto.value/auto-value-annotations@1.6.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.dagger/dagger@2.28.3?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.auto.value/auto-value-annotations@1.6.2?type=jar"/>
    <dependency ref="pkg:maven/com.google.dagger/dagger@2.28.3?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.android.tools.build.jetifier/jetifier-processor@1.0.0-beta09?type=jar">
      <dependency ref="pkg:maven/com.android.tools.build.jetifier/jetifier-core@1.0.0-beta09?type=jar"/>
      <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar"/>
    <dependency ref="pkg:maven/com.google.protobuf/protobuf-java-util@3.10.0?type=jar">
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.crypto.tink/tink@1.3.0-rc2?type=jar">
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar"/>
      <dependency ref="pkg:maven/org.json/json@20180813?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.json/json@20180813?type=jar"/>
    <dependency ref="pkg:maven/com.google.testing.platform/core-proto@0.0.8-alpha01?type=jar"/>
    <dependency ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"/>
    <dependency ref="pkg:maven/org.tensorflow/tensorflow-lite-metadata@0.1.0-rc2?type=jar">
      <dependency ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"/>
    </dependency>
  </dependencies>
</bom>
