<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:3f8caef0-c273-305a-a011-f128b7d97ee2" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <timestamp>2025-11-11T20:44:12Z</timestamp>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-security-saml@4.1.4?type=bundle">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-security-saml</name>
      <version>4.1.4</version>
      <description>Apache CXF Runtime SAML Security functionality</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-security-saml@4.1.4?type=bundle</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-security-saml</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-security@4.1.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-security</name>
      <version>4.1.4</version>
      <description>Apache CXF Runtime Security functionality</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0ad7d191f2c7f09e3867e3f7e45b47f9</hash>
        <hash alg="SHA-1">bbe04280c2b5de005ef4df5a662f55927a5940a4</hash>
        <hash alg="SHA-256">b88a9d8abd6bcab9421f839f107515917e44d01f5d2ba7ca5f32774d9a8cd588</hash>
        <hash alg="SHA-512">f085f351e7f63277c76ac82a711cbfdada765b643a986d0b24730549d187065834712e6f4be383a44bc41af742eb3fc69df26a08d655ba755e0abe192fe0f190</hash>
        <hash alg="SHA-384">f631a8926a51ac96aa88a51df97c65b026876d70eec1c34858523341a1f3fa05439981ea3162ccc029cfab7e980c3862</hash>
        <hash alg="SHA3-384">83bc00f7aab94c11927e7824e9358b454e810f2cfd6c551c5c2ae6af4a8b0d39274162ef54fce496e82b6a1c8d061934</hash>
        <hash alg="SHA3-256">255535a9e3dc465d2c2ce0635bc72609fa22f876d661fdde4c6cd63d17b42aec</hash>
        <hash alg="SHA3-512">c57976cc7777fed3c4066d8612304b8eea88af3b83fe28bee11dfeb74c731ab8cf2e7cf9e551bb8e374854bb4f0608c4ad1ac8d75a242f6dc80cde190f078a2d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-security@4.1.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-security</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-core@4.1.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-core</name>
      <version>4.1.4</version>
      <description>Apache CXF Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e0a7da518abb3595b7f54a18b813a0d3</hash>
        <hash alg="SHA-1">066b8f063f2be33213b2c6d82badd91ec91f9db3</hash>
        <hash alg="SHA-256">fa448f6300d700380ab1f09e3fa8d0c120ef6f64b67fcf0b8feded0eceeb08ed</hash>
        <hash alg="SHA-512">379e19d69246b745ddf395186440e343bcf1d7b37584a53e847c2cb289e973bdfeaf83a2ad3791efa7d7e70aecfe7891fc797f09e0057ee19b56f98917c87839</hash>
        <hash alg="SHA-384">f07d3aa0377295d50d77d30d73feb799e7f9e45c268b0e6249778e10132e1717bdfe80f0b541e372bf996d92b83407f0</hash>
        <hash alg="SHA3-384">42261016f6b78d281e0e406e68634235d6b840a34acf881d57fdefb4f26c25ad5ff02ebe5940ddb006a866687139d3c9</hash>
        <hash alg="SHA3-256">b0be4c8c871f0f60fec5e93a3080daa010009abdc295170a9dfba009110d36f2</hash>
        <hash alg="SHA3-512">7c1fc8a429e2002c9ce8da42bb51880b7328c5b77349b12e0e33613b45ab93a6ef08a74586bf91dd4f4cfab80e18777cc2ffd68152f7ac632d80605c673cd37b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-core@4.1.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.annotation</group>
      <name>jakarta.annotation-api</name>
      <version>2.1.1</version>
      <description>Jakarta Annotations API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5dac2f68e8288d0add4dc92cb161711d</hash>
        <hash alg="SHA-1">48b9bda22b091b1f48b13af03fe36db3be6e1ae3</hash>
        <hash alg="SHA-256">5f65fdaf424eee2b55e1d882ba9bb376be93fb09b37b808be6e22e8851c909fe</hash>
        <hash alg="SHA-512">eabe8b855b735663684052ec4cc357cc737936fa57cebf144eb09f70b3b6c600db7fa6f1c93a4f36c5994b1b37dad2dfcec87a41448872e69552accfd7f52af6</hash>
        <hash alg="SHA-384">798597a6b80b423844d70609c54b00d725a357031888da7e5c3efd3914d1770be69aa7135de13ddb89a4420a5550e35b</hash>
        <hash alg="SHA3-384">9629b8ca82f61674f5573723bbb3c137060e1442062eb52fa9c90fc8f57ea7d836eb2fb765d160ec8bf300bcb6b820be</hash>
        <hash alg="SHA3-256">f71ffc2a2c2bd1a00dfc00c4be67dbe5f374078bd50d5b24c0b29fbcc6634ecb</hash>
        <hash alg="SHA3-512">aa4e29025a55878db6edb0d984bd3a0633f3af03fa69e1d26c97c87c6d29339714003c96e29ff0a977132ce9c2729d0e27e36e9e245a7488266138239bdba15e</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.ca</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/common-annotations-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/ca-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/common-annotations-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.6?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>jaxb-runtime</name>
      <version>4.0.6</version>
      <description>JAXB (JSR 222) Reference Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0e600d639f3a09ddd6fa91623a12b634</hash>
        <hash alg="SHA-1">fb95ebb62564657b2fedfe165b859789ef3a8711</hash>
        <hash alg="SHA-256">1c0d57f8c25f9605d5a2f7ad0a87581893776ac85b00b101b2651258edaa9118</hash>
        <hash alg="SHA-512">e19db2669e916992ea6acc75174070a4b5f04bb7788df03b1ede3340f5d63cf1c5055568ba1d7738e9e018716d10c3f6b26d1951faf8bba75f6ebb6ac6b16314</hash>
        <hash alg="SHA-384">a3f7264bbb6ea1722d21d12efc651c183b30498542258cf0ea096ce5c7eb17440fe5d3650afc8e976b55c3a3d0952d24</hash>
        <hash alg="SHA3-384">b6686499e954ca7caca8c1dabdffc33c3741b012f4a73b729899ffff67f4cddd5c22e7bcce87bf5337933626a4bda798</hash>
        <hash alg="SHA3-256">068377faca7e7c02a5687b7920f0661026dcd51c8b58faaf4de13db1673978be</hash>
        <hash alg="SHA3-512">f3f9a6944a1b547adbcd621fce28aa9ca07d9992e2ce224e4b4b06195205566737676981d9066ad205f8c008a5e8696d4f4895e9725a94c11bc022c525818d8b</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-runtime-parent/jaxb-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.6?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>jaxb-core</name>
      <version>4.0.6</version>
      <description>JAXB Core module. Contains sources required by XJC, JXC and Runtime modules.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e36c915cf47342b4fe31ffba3407b928</hash>
        <hash alg="SHA-1">8e61282303777fc98a00cc3affd0560d68748a75</hash>
        <hash alg="SHA-256">ebbd274207b4860d0dc6e2d44d6dbdb5945cede01222d2e50661d45f5d46c0f7</hash>
        <hash alg="SHA-512">f6ed3cc73361794a8e35fc04f09212aa21af9575f36f6440bf33a6d43708ded6142a9be51d9d08d6e5debc262d87c158f0e199ed041a78fb1e0086fd02868a28</hash>
        <hash alg="SHA-384">767a28dc25cc9a728576a9a3e6081e24c9018ee664c04782592e14546087e8cadacbc13cdf0b2eff88840b8be10958ca</hash>
        <hash alg="SHA3-384">2033beeccf8d5ae1775ffffe41e09a662e03a67d70fdded7fdabaf5f7b14d51de1f17a9a9b65ea96d3178c9a4b0c574d</hash>
        <hash alg="SHA3-256">5e456fe8925894b58ef10e9936ddd41cde7bd3476bfb5b0d76aba046ca1c9e5f</hash>
        <hash alg="SHA3-512">51d4c57f3e1cd5440d3714cb8fe147c74aa40773c5b2a8a804496d361037e6d8dfa86f02f19f4dbbbc327b2fdac30ec83fe82bf720a9db0f8516cb800a7ec62b</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/txw2@4.0.6?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>txw2</name>
      <version>4.0.6</version>
      <description>TXW is a library that allows you to write XML documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0bf7070aee3bb53640d2ea6441e059fb</hash>
        <hash alg="SHA-1">4f4cd53b5ff9a2c5aa1211f15ed2569c57dfb044</hash>
        <hash alg="SHA-256">fcc749785412ef3806fde1ce70f93ef5a0065dcc47fe449bc871db0795cb11af</hash>
        <hash alg="SHA-512">47eb0e4b199bb12804da94cf8a81a1e652e8ca31af68b65d52f1a0cda6e1c9b41276e4bc1e4ea510f83ecccff9978ff8bd05a56c5b16a4181d8e0673d608b2c4</hash>
        <hash alg="SHA-384">a28256c538462ea28a37dc01b60cf6d4dcba6d54146bdc762fbf4a0426bbbd3555c20d3164508dc8860ad7e652f80cc1</hash>
        <hash alg="SHA3-384">d220fc81c28a004c31e4469e27cb0d5d9b0e358bcbd3c0989e4b0065e7c081464c7091b8553c98cc060934305d468aa5</hash>
        <hash alg="SHA3-256">de4b8f8a5fe13b14d7ac56a8e1ae705f2160a6e873a997b72827ba5f124f7907</hash>
        <hash alg="SHA3-512">ea807533e719e593d7c3e12bc5eba7c84cebf01c398c1ff92122578a04849cc64b7ce300142261475e8d8a35cfaeb53faddd68b905c0309a21d5f27479b98ed3</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/txw2@4.0.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-txw-parent/txw2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.istack</group>
      <name>istack-commons-runtime</name>
      <version>4.1.2</version>
      <description>istack common utility code</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">535154ef647af2a52478c4debec93659</hash>
        <hash alg="SHA-1">18ec117c85f3ba0ac65409136afa8e42bc74e739</hash>
        <hash alg="SHA-256">7fd6792361f4dd00f8c56af4a20cecc0066deea4a8f3dec38348af23fc2296ee</hash>
        <hash alg="SHA-512">c3b191409b9ace8cccca6be103b684a25f10675977d38f608036ffb687651a74fd4581a66e1c38e588e77165d32614e4b547bff412379f7a84b926ccb93515bb</hash>
        <hash alg="SHA-384">9b8e20b08b109c485c654359ede00fcef74d85ac18f9c7978acd47bf630838d21ea193f79d144e66cf0f6992efd82ff8</hash>
        <hash alg="SHA3-384">81c4cf19a5d0f078263cc8f9320d4208da28e25b93c1f45885e237148a3a7c7266ba7586a1eb5cd3efc86be6f90082bc</hash>
        <hash alg="SHA3-256">218aa7dd7bca7cfdbee752bb1c2737a7066b47058a42b4ee466a14350bcd2741</hash>
        <hash alg="SHA3-512">74770476681a130a3057fdfa2df3977b8aa9bbf1a520d9481694d0e9e0635c2e88d74ff73bbb870de34d93d0a4b6eae7f030e4ba12fbcc51debde58897fdcb6c</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-runtime</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-istack-commons/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.woodstox</group>
      <name>woodstox-core</name>
      <version>7.1.1</version>
      <description>Woodstox is a high-performance XML processor that implements Stax (JSR-173),
SAX2 and Stax2 APIs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">971ff236679f7b35a7c13c0d02c0170e</hash>
        <hash alg="SHA-1">76baad1b94513ea896e0a17388890a4c81edd0e0</hash>
        <hash alg="SHA-256">02b9d022e9d47704ff8a7a859a0dbfd3b2882a8311eb7ff1e180f760ccda2712</hash>
        <hash alg="SHA-512">28105d6409766966123d4e212dba555c4776bfeb538093d3739ef113de5c6d6e92453aabc16915bfb76124a5dcc82b57f3cd13b42ea2e4038a4495285c642d3a</hash>
        <hash alg="SHA-384">ca02f505f335a975e71c4a549bc3707c35b3592d2ac2fc2cf8887dfde44ae76b753ad2174e4971bb33bb1ab6c8c6b3c7</hash>
        <hash alg="SHA3-384">1efac262497c761e493337361dbc388ac01634dbda5322a8ee7742b0b25a26cc039c3e3653bf2302fbc31883c8030703</hash>
        <hash alg="SHA3-256">10a216995fc4e318dcb0be7b9ae00c07536fbc81e6119f0bf1e36716146f674d</hash>
        <hash alg="SHA3-512">924b1cb6ba79666c4fc13f1b057b376de471cfe60e68daca71ed51355abbd0de6799441ddd81df786317dd2c533cc1d3a9671f759e3a480d99c2d772eaa5ddda</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/woodstox</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://central.sonatype.com/api/v1/publisher</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/woodstox/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/woodstox</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar">
      <publisher>fasterxml.com</publisher>
      <group>org.codehaus.woodstox</group>
      <name>stax2-api</name>
      <version>4.2.2</version>
      <description>Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6949cace015c0f408f0b846e3735d301</hash>
        <hash alg="SHA-1">b0d746cadea928e5264f2ea294ea9a1bf815bbde</hash>
        <hash alg="SHA-256">a61c48d553efad78bc01fffc4ac528bebbae64cbaec170b2a5e39cf61eb51abe</hash>
        <hash alg="SHA-512">1c0587ecb4c5a659ce2ae1fe36ffc12636a8ecba549a29f2cf91cb4d1d36a335c05f35776f480488d40d894230389f76aeeb363887026c6ef5c565995c17b7c6</hash>
        <hash alg="SHA-384">3b617db8307a081df858a4110f5b8fec51c06355762506cbc4be5557fb06959f0499f7e672103d46f71c66bae472a7bd</hash>
        <hash alg="SHA3-384">22a3150713f7072962e26c286a1ef97d849b10d7f1251c56ae34252f247127b56dd189daa758c64776b4196ee0060517</hash>
        <hash alg="SHA3-256">174868c81672068b42ccde35310d4dad60f457b795101e99588c28b0eebdefc2</hash>
        <hash alg="SHA3-512">c88de5a2137e3b63b632ef24799a677c998b76e736407f1e8c6af85d1b6a94c76bc20d26e6cac847d8383ab6760f1b5c2ae7574fba21e1e6a96de7cdd38f0e39</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/FasterXML/stax2-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/stax2-api/issues</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/FasterXML/stax2-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ws.xmlschema</group>
      <name>xmlschema-core</name>
      <version>2.3.2</version>
      <description>Commons XMLSchema is a light weight schema object model that can be used to manipulate or
        generate XML schema.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">67a17743abad9de9b18ee4b491ac976e</hash>
        <hash alg="SHA-1">34aaf48b18ae47015001237e93b5f3f05f1ece55</hash>
        <hash alg="SHA-256">ef6ee27d7bd5fff4950c6737b68263ed63dd088f8ed5f04245be49a5f6a06590</hash>
        <hash alg="SHA-512">77b020063365eb4df1c9fd6628031d5de7261288921b016302736deffbe5f0427af8c22dfeb5e3efd3f792c1790bba1c38e61dc8be43ccaff3051f010cdb8327</hash>
        <hash alg="SHA-384">8cc8d00ef7cd5b76d191bfc408d0d03ce60c9346ff5a119cab605568e792cb9fc2fc8d24fec0fccd67f0b1c5377bcc07</hash>
        <hash alg="SHA3-384">21462cad6440441043ed928be70876ed7f42d6f8d1087acec746b31e7a8c6b9c5c5505b58e27107ce9228798feb33b21</hash>
        <hash alg="SHA3-256">2a25e8760f087f0e1bcd8dccaa9992174a6b98325ffed282dfa68395d2eac41d</hash>
        <hash alg="SHA3-512">55f0873589b3893f25f3cfdfdc61e2f83db1249ef615a62b4a1e69c2b86f18657a1f50929f39016d24293f1f1caba204d0864b1ee285e01fce4192becddf3fdb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ws.apache.org/commons/xmlschema20/xmlschema-core/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/XMLSCHEMA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ws-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=ws-xmlschema.git;a=summary/xmlschema-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.eclipse.angus</group>
      <name>angus-activation</name>
      <version>2.0.3</version>
      <description>Angus Activation Registries Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ad20392145690b36b4f950fe31a31a2a</hash>
        <hash alg="SHA-1">7f80607ea5014fef0b1779e6c33d63a88a45a563</hash>
        <hash alg="SHA-256">a6bd35c538cf90fff941ad6258c40c08fca0b5c9c3f536c657114f27ce0527a7</hash>
        <hash alg="SHA-512">efb987b781f665589b2a524d86826ffcf37eaf105b2f823be124fded85bd118098c0749b5d268373d00b1d3b8bf0f89f86670444f9990b91948704a7052376e1</hash>
        <hash alg="SHA-384">4086b356cdf168e28a09dfa2ee9cd54926491438d556e4608508ae6a895929adf63f3a259779c83624a9bb1f886efb6d</hash>
        <hash alg="SHA3-384">7b79721ec0b28964fad4bf56ffc3be67d81b62e45a4ac703917094e281c125834b9bebcc0623176d4904c5b50c94450e</hash>
        <hash alg="SHA3-256">aecadbd33e92abf894ae28c8cc609f5f85e8af736621c44fb71b84ca34e91247</hash>
        <hash alg="SHA3-512">ebdc07c3b3cf0817f6d9ee54bb23461657f213648b70f6c7f634a1028cdf1522d5b5a7e2168130f72afa112f36cb08858d1c94bb67b40a0f051f567b4d696d1e</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/angus-activation/angus-activation</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/angus-activation/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/angus-activation/angus-activation</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.activation</group>
      <name>jakarta.activation-api</name>
      <version>2.1.4</version>
      <description>Jakarta Activation API 2.1 Specification</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bc1602eee7bc61a0b86f14bbbb0cc794</hash>
        <hash alg="SHA-1">9e5c2a0d75dde71a0bedc4dbdbe47b78a5dc50f8</hash>
        <hash alg="SHA-256">c9db52100ce6c8aac95cc39075f95720d2e561b11f8051b81c121ad4effd7004</hash>
        <hash alg="SHA-512">cd078772acb5ebf1f90f7c737f372b7e86a5ce31b995ed759526a9eee73fd89f97e506f9a208ba3b73e757cb78830b829733411cf7989680aea2272abba7323b</hash>
        <hash alg="SHA-384">0b9a413939a024f562c15e60b11f85c336620987441fb053645499704960464d01ae83e9989b43ae6cd4f2164eb0cebe</hash>
        <hash alg="SHA3-384">d2fa51a3e18ced20f097ae019982cbd945942103df59327f319c64eeef1c109d6262d1de332fa2b6dfde41c98a9e7b2c</hash>
        <hash alg="SHA3-256">b259d17f48ae1f357a28b9c33b66fbcae50eaa86d61ac3c8cbc5184e7914d2d5</hash>
        <hash alg="SHA3-512">aae6a55fe1fa397b13b1bcb5a05ccc3e4e87049865233482dc09a8ab2af3eb128646394e3ef529609031e7c6c2215c91ffd27de06cd97ca9ae7e07bd4b9595bd</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jakartaee/jaf-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/jaf-api/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/jaf-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.4?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.bind</group>
      <name>jakarta.xml.bind-api</name>
      <version>4.0.4</version>
      <description>Jakarta XML Binding API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6dd465a232e545193ab8ab77cc4fbdb9</hash>
        <hash alg="SHA-1">d6d2327f3817d9a33a3b6b8f2e15a96bc2e7afdc</hash>
        <hash alg="SHA-256">c507ca69a8c6dd11bf4afeec9e0d412c4fa3933fffb0a84680ea5727e8472124</hash>
        <hash alg="SHA-512">18b9b21b51b46068c3e3e4a74241d0649e56512aa471f2c9076583e366096739e8566682527eb25a735a10337f0c5b54797f995dfb254b7ed631548fe8a095f1</hash>
        <hash alg="SHA-384">63bd1b70b429b5defe2331625a570943637808394efc7e8a27051422ee0494d74a79b4295c620f532e366f4b473fdd51</hash>
        <hash alg="SHA3-384">15d5318671cf9676f294b1f68092d3ead4817a83c3c915d270f039671df602d1c038c8e8ce9dec2096a2a19e75265c2e</hash>
        <hash alg="SHA3-256">d860ce7928b8ad4be47a636d0c03982431c2f8029b4a135c564ad53b8cf80f86</hash>
        <hash alg="SHA3-512">ccb6c58aa4f9617721fd7b21ae73a62ca95a203a06414814db9d103b4a140b70564872e6898542841c920cd27da3c29b18dfe1bc57042439d7755e599d7b0a4d</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jakartaee/jaxb-api/jakarta.xml.bind-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/jaxb-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/jaxb-api.git/jakarta.xml.bind-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@4.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-ws-security-dom</name>
      <version>4.0.1</version>
      <description>Apache WSS4J parent pom</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">90759259635ff2f1ce51332fc5d3a289</hash>
        <hash alg="SHA-1">dfab70d728c4f59c477d7676260f0adf6519977d</hash>
        <hash alg="SHA-256">e8066af8c71060a1a2d42c91f993ce564ddbf57d18ccdbba7be2c0c9130fef54</hash>
        <hash alg="SHA-512">35c87114bcc49d5d5f9a2855e7a5cc989c2ed6e22c16f5a6b176b8bfd2b06b2ef885019c83bbf4719b0ac041f4ab1507154fd65e5e7a5271ffd81f176f9fb8cb</hash>
        <hash alg="SHA-384">d112ba9429f42d7ce469b7aeb173815b77cf61f7e48c643775166311eeb213c3d93db3db0577308f73769fe0205e8847</hash>
        <hash alg="SHA3-384">06877a1d16c970b84064445869dbd97494a963e3bf3210007c4e5590aa7523bb479ce348b0c09b270dcbd028ec28b653</hash>
        <hash alg="SHA3-256">de5df3b0287f395824e03192716767edaf0b2bbf787a78ea3e5bcb80f064804a</hash>
        <hash alg="SHA3-512">ab852b93a9f840d4ae23406ad6b2ad9f8d12610d7868bfbe36b77d129987a33f77890ac92dd4147371ece7d4e381d5db1269e3c5f231fea90927480017bab21a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@4.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ws.apache.org/wss4j/wss4j-ws-security-dom/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/WSS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?dev@ws.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-dom</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-common@4.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-ws-security-common</name>
      <version>4.0.1</version>
      <description>Apache WSS4J parent pom</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">307961d93fbb8c3a98cfe68980f5a3b4</hash>
        <hash alg="SHA-1">4023f22b9aa679fc5bfe54efc257e8bb93acc48a</hash>
        <hash alg="SHA-256">010e3d7f0318bcd320c78d57f37bfdcdc5b0123d480c2aaf46f952b2e2bb3a7d</hash>
        <hash alg="SHA-512">438d11a71ca55e796c48f4da63a19d05c2945a9e4d2d55e60c76ff7d39a9b31500c43b4c7a368d97be2213fcca10ae0604921dcfe591d35f1b8ca82b9af773cd</hash>
        <hash alg="SHA-384">33d0b332cd9c23c389b9e9b93c13d6870020d0bd595b92281a24a6cf01fb9180f8ec49034a1bd558bad3686e7efa5042</hash>
        <hash alg="SHA3-384">b4d74ccc6df4a6a3eb82e19f31fc4e8a12ae0126afa3856c0d30ecb22536789f832ad5eb587c655fc9df798453458789</hash>
        <hash alg="SHA3-256">6daa43d32ee76c8f949c98c104a110b7c0b5e3fef622a94f96c10a8ddac55461</hash>
        <hash alg="SHA3-512">361b5311ba98b0552f2457b8cf872084ec03347beee55d85cd2b7eee872a08c26f3dbc933786dafbe9c9d8b5572985372c131e8a8b281c05644151d3f7bd2da5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-ws-security-common@4.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ws.apache.org/wss4j/wss4j-ws-security-common/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/WSS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?dev@ws.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-common</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.mail/jakarta.mail-api@2.1.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.mail</group>
      <name>jakarta.mail-api</name>
      <version>2.1.5</version>
      <description>Jakarta Mail API 2.1 Specification API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a1872951f46b87594806bb01e342a468</hash>
        <hash alg="SHA-1">be9b3b677ed6083f575c437ebc442a6a4bd2b931</hash>
        <hash alg="SHA-256">aa493753acb7a8c45ba8f4c9cf1230a74e20237056dd5b5c8bc86c583e8cfa0e</hash>
        <hash alg="SHA-512">f537477c3dbf81cf7112fb348221b91c0223b5dcbbac816454e88cb8f293f8c5d566b2a827f78dfdfebec1fbe5a93c909e78fb13789ed41ecbb96a86d171b267</hash>
        <hash alg="SHA-384">0ae200a91c5879f7b50b9a07c3df864d7b7af31cb771ff2a636cf8ee76d019456e7fb541efb69ca96f90f497c597d608</hash>
        <hash alg="SHA3-384">862bceaf42659250d354809cb2259bfd11b9d4a87cf1bcafc9c2346f134bad45e27f8f7227722905eb1c870e9314ee77</hash>
        <hash alg="SHA3-256">9dc094cd2476872a9da6b8065878b5e5a9895dad13762caa025ac5c2656c65e7</hash>
        <hash alg="SHA3-512">e01072fafeb8a06ca6e32bdac205189fc9dde12fa039c453cfcc9a0cbddadc466d400d117cea64066cb1d04b34b0bc7a809ef8a832b11e7adb3015abf33e34d0</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.mail/jakarta.mail-api@2.1.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j/jakarta.mail-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/mail-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/mail-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.santuario/xmlsec@4.0.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.santuario</group>
      <name>xmlsec</name>
      <version>4.0.4</version>
      <description>Apache XML Security for Java supports XML-Signature Syntax and Processing,
        W3C Recommendation 12 February 2002, and XML Encryption Syntax and
        Processing, W3C Recommendation 10 December 2002. Since version 1.4,
        the library supports the standard Java API JSR-105: XML Digital Signature APIs.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7344e57494b9fff766012489fa1bda07</hash>
        <hash alg="SHA-1">b07e7b1a2fa3cb828b0d0112d3ea37829373bce3</hash>
        <hash alg="SHA-256">8b2f8483b662ba5462126074dadf4d4f33966d8e8244889c6a81d53789da5402</hash>
        <hash alg="SHA-512">47ca9e5dc3918555202d70c1d6c13501638ba768456b6020fedab66f9f187db90389780dafc89de4b3efa6ae088eb74618136aa0fe9615dccbde79761186b87c</hash>
        <hash alg="SHA-384">045255b00f89be8eccf2866c50a132ca881256daf29cec34888aed34e9f684e3c349ee3869e2e85020dd36dc7ef1af7d</hash>
        <hash alg="SHA3-384">9a45002651085eb7ad25431cd52172f7e8072cdb9c6b262b17763d240ebe1261613876cd4def6ab6db5cf59e6f4c2925</hash>
        <hash alg="SHA3-256">4b8223be639f86d7cf047127836ab7e6ee4b1dc039a636b87df0caebe4fc847b</hash>
        <hash alg="SHA3-512">60e7c5b6480138cadc06e473cee686a6b7cee79a603c824448be55768ef1759562d203af057c366892e3fb681ad967856b53833a0c043313ab5abb6f45b068b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.santuario/xmlsec@4.0.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://santuario.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/SANTUARIO</url>
        </reference>
        <reference type="mailing-list">
          <url>http://news.gmane.org/gmane.text.xml.security.devel</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=santuario-xml-security-java.git;a=summary</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.17.1</version>
      <description>The Apache Commons Codec component contains encoders and decoders for
     various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7b3438ab4c6d91e0066d410947e43f3e</hash>
        <hash alg="SHA-1">973638b7149d333563584137ebf13a691bb60579</hash>
        <hash alg="SHA-256">f9f6cb103f2ddc3c99a9d80ada2ae7bf0685111fd6bffccb72033d1da4e6ff23</hash>
        <hash alg="SHA-512">a7db98db470e6ad338266ff442fbdfbc277ba1d07a591336f7d15dc49fdac884da7dac04d806628b12437f993d8b5e6a4b800a66590ff11936dbf8bedcd8e860</hash>
        <hash alg="SHA-384">ef0b8e0fbea5ee057b2c39114ff862a057d207d4dd6b4fd2f5ca96bfc039e76274f1dd02ddf985f1fa965736a522f5c5</hash>
        <hash alg="SHA3-384">ac30c88a6c4bbdfa79cb697cd179627d2addae842e48e2ab167c4f9c5475d05ef4743f58fbed254dd7abc6f3877644fe</hash>
        <hash alg="SHA3-256">f3fe1daf04e63f556d72f4f59f149327b65d899d6afe1de770b42faae2e323df</hash>
        <hash alg="SHA3-512">29901c3e6394dd87f13a91b5432c678ac144cb6c86271b06c57c73c0480b23a4688d0266e2dd04abf5e1d148a2e80e1215dd87d2cb5ffbf2c023409f4f5f8f86</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.17.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-codec/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CODEC</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/commons-codec</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-saml-impl@5.1.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-saml-impl</name>
      <version>5.1.6</version>
      <description>SAML Provider Implementations</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4b31c2896b16137640456e7029d00661</hash>
        <hash alg="SHA-1">f7c7b467da101f83a8a8598b58b85b5142f3e8b3</hash>
        <hash alg="SHA-256">cf572ac4261bf7b2609e36fcec8002dc25137aefb36b7e4509c1ee2272f3737d</hash>
        <hash alg="SHA-512">a3883ae2ac53280a26fd1baae49987a05bfdf7608a0e7b60d6dc63905b3a80014f21b2daf8c096980a14dacda2c069587bb0b6f06bc603b95f47d9e5edbbf0ff</hash>
        <hash alg="SHA-384">5ed599819741535a12be7d25b2367e4769aabd52fafcc39e7050566999ba4c36b8fb7ba7e846d16380dea9f83b2bc460</hash>
        <hash alg="SHA3-384">b0c7175f063f4f34a9e0152bb3e64d06dc24d9d5b50d5f109401a2cb99ed9f0a92438c466cd2adc9379299f8470f4850</hash>
        <hash alg="SHA3-256">e5bec86611dccaa03f637dd9e070e8bf4d392a645a935b50932d348116fc3ab4</hash>
        <hash alg="SHA3-512">596ec666f67d58f17be036ecfd84e195a7e3361418a56c8ac7125fe4c02b1293c739ba20e189e239f5e842067df7615349b548a539c31117489bf7f2047fcf84</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-saml-impl@5.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shibboleth.net/opensaml-parent/opensaml-saml-impl/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-saml-impl</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-core-api</name>
      <version>5.1.6</version>
      <description>Core API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1c6feaf459062a96926a883c8bf14ca6</hash>
        <hash alg="SHA-1">9bcb391af20349d019b947956d73ba44a93d59b4</hash>
        <hash alg="SHA-256">358d99f2b9204a3f44a6542a2a11b3ce809328bab7c6f78a8d09e993b5b61232</hash>
        <hash alg="SHA-512">bd679dca368d04af61de9485e3489d5dca66e39609fcf6519cf5c408d00cc6d35bd26fd435dc0a8e6e729607fd6ca6c38e01f1dba850737294950d27726d7168</hash>
        <hash alg="SHA-384">f1ad358472a1a2302d2c6448e7052230cebf64990e934c4cd0a10ff0c47abbb158dcd8cfbabe98618be8f62f08f10e20</hash>
        <hash alg="SHA3-384">1b57783a5bf07c8f01353fa11497ab30b79aac12c53206eda4eb423656535dcd06fbea6af2efe61fa30baad441da0cc2</hash>
        <hash alg="SHA3-256">1538bbee01db3b3adb2fe9bb21aa8cc7c918830722d8b4cfff5226adc8c6e148</hash>
        <hash alg="SHA3-512">8f7022335ac00b24c53118af32127da1cfc97617425e7f8571c733e3d4bf692735d031982896e2bdfd22aeed0c58617c781c3b301eb9bac77827a7bb2392d421</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shibboleth.net/opensaml-parent/opensaml-core-api/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-core-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-core-impl@5.1.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-core-impl</name>
      <version>5.1.6</version>
      <description>Core Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">158003fde004589304033b0d674e8731</hash>
        <hash alg="SHA-1">43f8990e6e7b66e20db81efdaad7f8a101745739</hash>
        <hash alg="SHA-256">a7d3f2f4f7834faaa86dbf232bdb8b5f7fdb7633b06aa89622799689c97eacfc</hash>
        <hash alg="SHA-512">5eacbc885bbbb9988f1ae5a6ec5ab965b30f522da2b828d7788fb5b8e5c78ccc2baac947931a66f99716e577ed5b163c6b6fd621aaad62aa58ad5f49d8f61c3d</hash>
        <hash alg="SHA-384">4313428e7d7cf87eeb0f01fd3f8c50b268e1ae4db7ec2501a9b961dcfa6d743a75a9b2c1afaeb364848eab48fc2e1fe8</hash>
        <hash alg="SHA3-384">6a3d99a6a4f215e427b0893a126986691ef82b74f195b88897ea1d0f1a5bcd9f2cf880d36bc82dd6bbd7d3ba77fff203</hash>
        <hash alg="SHA3-256">cdf5bf42f02e05670d9dd3efeb4dfe05d5f726e186a1d1d6d5fb4dd6a714e613</hash>
        <hash alg="SHA3-512">27979f6681508d6a345911b631efc74a46416aa1302176140e976fd639efb722f7099ef68b5df2bcfc0519d238dba07cb62ff86fc52fdcd5343d0be114a1a9f2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-core-impl@5.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shibboleth.net/opensaml-parent/opensaml-core-impl/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-core-impl</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.20.1</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">49d7b7226df5ed4a036e48997a03d066</hash>
        <hash alg="SHA-1">9586a7fe0e1775de0e54237fa6a2c8455c93ac06</hash>
        <hash alg="SHA-256">34bbeb4526fff4f8565b12106bf85a6afcbae858966d489b54214ac46b2e26e8</hash>
        <hash alg="SHA-512">16906e9c2f1962649eb21de148f362fedf2ce903c7ca0e6d68a01d43dbe8402b70cc537c104f36bc40a2bed6601162e7c21663735582e25bff7e27852be1405d</hash>
        <hash alg="SHA-384">0591935cdfed1d65fa4a2820133ba129384f71921228ffe093f343d3ebf0b699762810d9208641726111015f0e35753b</hash>
        <hash alg="SHA3-384">855ccd449944e7884f8088c8c5b224e6e2f63bcd3123502618b4f5ded025e5978143af8c5d31215276932bc3bb089472</hash>
        <hash alg="SHA3-256">53732171c9f2bdeaa40017a34683a00ac11e8a8c1bcefaed07eb91e629e20376</hash>
        <hash alg="SHA3-512">05017efae94bc3c83131aaaa7911f20e7c367502cd2cd05c6cedabc877b55724bcde2521ba1da15bf1c1c3ccb1a235124b39b2d4860142f2b89d4df197cf5c83</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://central.sonatype.com/api/v1/publisher</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-databind/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-databind</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.20</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b901def3c20752817f27130e4b8d6640</hash>
        <hash alg="SHA-1">6a5e7291ea3f2b590a7ce400adb7b3aea4d7e12c</hash>
        <hash alg="SHA-256">959a2ffb2d591436f51f183c6a521fc89347912f711bf0cae008cdf045d95319</hash>
        <hash alg="SHA-512">8926d89bfe7f427c7793f6af619249540f23f82eae055dd03d4cb163ff603a43dd6a3ebe43528d00789aed3df0dd2f10e08552fdec53e2691849b9769f57f0c9</hash>
        <hash alg="SHA-384">40ee4c1438a5a190624dff9deca83377f7e60690b4535359b2a79924f736bff7c8d077e5b01c6c8972735dc152f2ccf4</hash>
        <hash alg="SHA3-384">0fc0f697d03692b63c2b11fcabac51c630278ed6df15420975263ea4ad19418b3b71b7889497ed20a150035f9bcba79d</hash>
        <hash alg="SHA3-256">6bf49e384735969af020f758b255ceed26af92d4cf456f6e7b83e8de53289f93</hash>
        <hash alg="SHA3-512">3372f6c456a7f6a33ebc3ecc65daaf36288be2a14b1f2cb9fcd7387c07acab1c69ae803a366e5d12adf4934970ffd2e34017917c5f16a6d563bc94810f228ab3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://central.sonatype.com/api/v1/publisher</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-annotations/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.20.1</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">889b2c417b61c9f4f460b06957147234</hash>
        <hash alg="SHA-1">5734323adfece72111769b0ae38a6cf803e3d178</hash>
        <hash alg="SHA-256">ffab4d957daa2796cf24cb66d0b78a7090f1bcbe17c3a4578f09affaaf137089</hash>
        <hash alg="SHA-512">0463e1c2e1d8e8cfa4954dfce491583f0ec9ec1de6e6f342d1e5f0c63dcfb959673552a279ec4e6b6cc69e6ac2de6d42dd512149ceb76620b5d780db7325e6a7</hash>
        <hash alg="SHA-384">a279b2d57d019a05f65762ce670ce23e02466b11276d8c0687f3bb5ed40a8a1854bfe6dd2dc157d0f5695186f7d9a65a</hash>
        <hash alg="SHA3-384">06b9f33e030a99fa95d171118ab668bee42e32b35b85e05750f8514128dbadc94026afde16dbadc0ff786027b09712a4</hash>
        <hash alg="SHA3-256">3e83a1a349d8ba3a4e76ee983f04b259a85263dda5090f55aae5535109c4b6c0</hash>
        <hash alg="SHA3-512">87b3a61a71a625adfc6b9b402079c26b223e19535ca5af07e4130932d479f9c22e90696911050d8ab8a09a6209651fe2f25f54d7d9a1493b6dab6f8acb76203d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson-core</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://central.sonatype.com/api/v1/publisher</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-core/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.16.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.datatype</group>
      <name>jackson-datatype-jsr310</name>
      <version>2.16.2</version>
      <description>Add-on module to support JSR-310 (Java 8 Date &amp; Time API) data types.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">17b881ce122838518321585edd2e8586</hash>
        <hash alg="SHA-1">58e86108e4b1b1e893e7a69b1bbca880acfca143</hash>
        <hash alg="SHA-256">9d03ad6d47b5f9951b75fb0cae0760156fa827794730cd5ef6cd79d3785cc9c0</hash>
        <hash alg="SHA-512">73f390906d3ed85f45b21f9b3914ce0ed995a755421ea9a6ed4c38c60ef1b9f11c4c32098ccb863019d85b2be8153e3b2acf59a0a37d38810b09032ca23bbe69</hash>
        <hash alg="SHA-384">bfa5720a01dfe56dbd8a912703d4d743d6f1b9f90c73c1c5cac74e39a59af3f11e6779ae0a74ddbb672cac83c166e6db</hash>
        <hash alg="SHA3-384">bf2d0836c08a19bcf9b59f76c72b455a4dc0e1ee6952d8ea395996c4d3a06c7a9cfc3f0f8802f1e50c89fdaaf57dc92b</hash>
        <hash alg="SHA3-256">9691e3d60072a1d77cbcfa82738447005c0539dc34464830313f5fa5e82b92c5</hash>
        <hash alg="SHA3-512">62577cffab78bc9288195e5e356efe2586dc3e19e2a1924e68dac29d675eb04755f38a455d4d1c55afda04d55ed34c64d0c743af45fe641eccfe9995d6eba926</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.16.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-modules-java8/issues</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-profile-api@5.1.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-profile-api</name>
      <version>5.1.6</version>
      <description>Profile API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a426e71c5eb6c774b673f95b51fd0bc6</hash>
        <hash alg="SHA-1">a884c24980a667cc40ad3a8fd975fd825813f9f7</hash>
        <hash alg="SHA-256">76eaf713c8542c1649658cf00e45ecd3c19812f266cbdb306daae11bf6f6a3e7</hash>
        <hash alg="SHA-512">0109f15c8de791d254fb149c22059e67fd6b812b895ecf0a518a8498d4ac82c6ba2714397042b0f19850c7a9d9120f4866d34acec0281ddf66d4a1ac32b3eb1b</hash>
        <hash alg="SHA-384">eb76c8dc8ad4a5f3ef950fc89f7356080372e6a18da78174082d7cba76c545a68bb1535b2e3aaf94e039fb1cd54592ed</hash>
        <hash alg="SHA3-384">cdddd129980fd3137dbca0d23324f36a73d247d91e30bfa7183f8a35a8d20e2d5b7a24f64719caddb8f8ab97c75d1cd3</hash>
        <hash alg="SHA3-256">3c55c0caa3dc98cc4ee098f8958cad0089c8108c64d7b4ddf03ce56599197481</hash>
        <hash alg="SHA3-512">65ac5247eea1f253a6b6cf1eabff0eae897ba1a7ab186abd32c0cffc3e6e13be919aa98da0cb9aebcb96bbb6b72a62ce9f4e0dfff82b0e343dca18da9eb2b325</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-profile-api@5.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shibboleth.net/opensaml-parent/opensaml-profile-api/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-profile-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-saml-api@5.1.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-saml-api</name>
      <version>5.1.6</version>
      <description>SAML Provider API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6e36d3ecf540fb40e68b35c88ab0d92e</hash>
        <hash alg="SHA-1">ce5f7ee9ad5591ce694c23e3b79fe52c9a3071ab</hash>
        <hash alg="SHA-256">94f059f286a09e6763db0a4638b113387f1dc41047ca7ad1fa37402d9856b4ee</hash>
        <hash alg="SHA-512">5ee418b96d3bd4402a97753599f255810b98c5a0d378d5e75851275f8fdc7825d989e1a48b9c3a98eee3149cee0036bcc1198a16d87d817a72ed5a4090442619</hash>
        <hash alg="SHA-384">b6bbbb9ef6154f172b9285c44d4c4e8dd86368069984ed6944650616bfdf4d5f22821d2e67ee8c331b5aa3dc2f45e859</hash>
        <hash alg="SHA3-384">5c647a082d2c5c39d0ed8502abec66b869cd2893a6dba19e67d2346b05814e356753ac17d3c09b8a9005047506405946</hash>
        <hash alg="SHA3-256">3089e75c6c9df3d7ff4417affb73b3eebf53d579abf86b4b6d607c1e3e19ad09</hash>
        <hash alg="SHA3-512">08f17c6e7ac8f5d918a751cc8f7a01d586f58f8f3dcc92e3d96126a4964eb9332e6ed65eb79f836d04d8f6cc6832a71ebb5c128504e9bab7563ad0438dc0d8d0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-saml-api@5.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shibboleth.net/opensaml-parent/opensaml-saml-api/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-saml-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-security-api@5.1.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-security-api</name>
      <version>5.1.6</version>
      <description>Security API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">32aedbb1fff833ad4d3ae9bedbe25d97</hash>
        <hash alg="SHA-1">cbfabbd2b144f5f28adb0035ce220158f8cd072d</hash>
        <hash alg="SHA-256">591a7fd00d8e6fc3b04586109121ad5a2aa5a370de41bfcbe2170c20a4f17f36</hash>
        <hash alg="SHA-512">2fa07a990fa599ea4b03af43e77ff2431e7f28e229e6229004a9bef12f142062ba2dd9217430d6fa9a47274acecccd660e5e63990eb399ce510fdfa17033e82e</hash>
        <hash alg="SHA-384">072c310f078b6a432e00373f5d15fc9ac2ec87b0a5c3c65ac4bc9450910c815e900f52b78b14a19c32eb4721c70baec6</hash>
        <hash alg="SHA3-384">beaceb26a658e0861e0009c2f53e63583b89dd7a7c7c49990b3c2cc2471f7872ce858d855bb8c5c858a47c3b5b1d9cd7</hash>
        <hash alg="SHA3-256">86348a4ceb89ceaaaca9dd7b9b47e5934cf5c21f39fef3d1e39291c54f75d95e</hash>
        <hash alg="SHA3-512">993ae5d3e84b585ff1b9e9c0cc4dbba215eb5bbf29c3b36bce418ba7dfe91b429cf5a70e6aaa7d9d86efa7f73bc342b5f1604068e96f66eb19b5fc698e0679ea</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-security-api@5.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shibboleth.net/opensaml-parent/opensaml-security-api/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-security-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-security-impl@5.1.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-security-impl</name>
      <version>5.1.6</version>
      <description>Security Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">beae916a12c1aed935dbf39128ed7f82</hash>
        <hash alg="SHA-1">4654624a8cd6e4c95d43d96213e405c54c4e9786</hash>
        <hash alg="SHA-256">3d323b7ceabcf8cbc03e0551d0c077fbb4b9afa6874dfe998898e8b7561ff92a</hash>
        <hash alg="SHA-512">c2421e41e8399c770a5ece23d2d5576b6937070c20cd0139c16b51fd422ed984e9eeed48f7adc466a3419a0c9ba8276a62b76e4308a929181dec0e424b9cab24</hash>
        <hash alg="SHA-384">3b6f637eccee3a24c430e2bb6eb5b1e60476fa227aba2ed087af03ad027fe2855c11ac26214ca57107a2cea245f80aaa</hash>
        <hash alg="SHA3-384">02955cd2700c28dfd2caf514c59ab4da35e183b495c048c5e7a073918b6aa97aa431583e2d50a6c56826384d29bd7a0d</hash>
        <hash alg="SHA3-256">b7456ea5863af9f386bc7ef8f5d72a4a44e02deaa9289ad8eb2163a2e9401ae5</hash>
        <hash alg="SHA3-512">cac2309a7bd8a1488c81ebdf72fae87ef623c34554e9521987f32cf232065dd428bab8e794fb489b56850d9607214739522eef0d7d7b794adfc840ad862fac0f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-security-impl@5.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shibboleth.net/opensaml-parent/opensaml-security-impl/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-security-impl</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-soap-api@5.1.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-soap-api</name>
      <version>5.1.6</version>
      <description>SOAP Provider API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd3b1cba31ea4c5e9bfd5f759c1aebd4</hash>
        <hash alg="SHA-1">c15ffaf06000150a8719b1a7703cc7c898064e9e</hash>
        <hash alg="SHA-256">8936502b829ebe3aee4e5863c58ec3a1abd328eedba11262d1b53c969b127ac6</hash>
        <hash alg="SHA-512">c3cf577d6a5288577982c505f0a55a10cc4504803710c0ce88eaa773e7e6c623c0be2e23e3fb300e19d75ec9a8fbb647c067909a19b2532f88a8e2d1e8d705bb</hash>
        <hash alg="SHA-384">2d94c5c2df4020afc811bb3198f180a7d425800bc6b33c62711a66ddb62569d9f7376d4c2512152f0ea044a7ee3b95d2</hash>
        <hash alg="SHA3-384">8c7e50c1407d113a93aca320bbcc4436fb012652da6aad2ea8b6a1de6cfd06d6d1c20708dadd47b9fef09652c1518b1e</hash>
        <hash alg="SHA3-256">f6eee2ccfe64eee246ab917d4b10efa856780566ba99b97418f30caa59c96248</hash>
        <hash alg="SHA3-512">0a7b2534f1d8c5f9903d08887d5cc5818f0019382610a37cba4ed38d4d531c17ce266c28abceb39dec0c4a9212e654bafc96dca59f6e960862b49843a848e819</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-soap-api@5.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shibboleth.net/opensaml-parent/opensaml-soap-api/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-soap-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@5.1.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xmlsec-api</name>
      <version>5.1.6</version>
      <description>XML Security API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">804c5f87c24ef417f4e78422f2ef8ed1</hash>
        <hash alg="SHA-1">f6ee6c1f600bc86e893fb50ad3f34c311126c742</hash>
        <hash alg="SHA-256">e59eb655bd3f6bff8c150a781800766245349aa0fab32cb0465e7d2203faf861</hash>
        <hash alg="SHA-512">a0dfdad69edd60c7bbcba7e012a5f568e0fdb78049b788549f6e8aad3756f5aeda855fa38c554c2a8e71e8de5b5056e59298de92a3b8be02d0dff68678ce5605</hash>
        <hash alg="SHA-384">91973f7926f25b8e721cfd49813d0204faee9a8585327b9dea8cadb2a1690903d526314e7296fb25cb80444432de4ca3</hash>
        <hash alg="SHA3-384">d10d3d284d8fda5b1f2013b2a96bf271a618743b5089fa428fbf7a8475fa63344b2f1b0b3994cbc8e8b1a067cee202cc</hash>
        <hash alg="SHA3-256">8613b6043edefbb7d243e4d4d52becff6f95e29eb6dab22383262bfc2d81313f</hash>
        <hash alg="SHA3-512">34051f8a5bca344cf5f21f26e12dfedfd3157b7ef5dfb2cdc040671a5c87ce01b4b22df618ce7568551cc515de51b3b5c5402f52dc179c5f23443984601740f4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xmlsec-api@5.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shibboleth.net/opensaml-parent/opensaml-xmlsec-api/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-xmlsec-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xmlsec-impl@5.1.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xmlsec-impl</name>
      <version>5.1.6</version>
      <description>XML Security Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">09719a0983e2e165d3b8ab0ff7d6fa7f</hash>
        <hash alg="SHA-1">dc2fbb43bb19fecc904e9f025cfc760d44cf7158</hash>
        <hash alg="SHA-256">7a674633c8581b59c6ce9e14ed8d96eb2d70c56d37ad4da1492579bf57652b80</hash>
        <hash alg="SHA-512">e60cf1e1e7a24c36388c589b06d13efae8ecc73b84f7e4edbfb562d5e9528476138e3e4a1bd661c4856aa6a980a1baadf43817f9f2353880704d46d851cd4521</hash>
        <hash alg="SHA-384">18145a5a2a2bc6d3ae68e46fdb39243d58bd52e1c2499de23947d18006fdd3fa91a9f70d36e9d45bd1cee195b634bb1c</hash>
        <hash alg="SHA3-384">022c05d1f2ea320d8346ec79747c868cc1c1d6bb53749f1287696b858e651c0675791183de40e6789669e7b5b339641c</hash>
        <hash alg="SHA3-256">2233adc5c27fce1c87b9db402957e83a2baa1f9a1a36ca02f57ea061db347ed0</hash>
        <hash alg="SHA3-512">5c0dc016dff4def615d52682adb19371401c63b1d408f13416b3ed9b156208d47ca90ac4b074c92cbde03c0dee39df92e8e81f83ac7bb96c7133fef594e7c1b3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xmlsec-impl@5.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shibboleth.net/opensaml-parent/opensaml-xmlsec-impl/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-xmlsec-impl</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.shibboleth/shib-security@9.1.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>net.shibboleth</group>
      <name>shib-security</name>
      <version>9.1.6</version>
      <description>A multi-module project aggregating a number of shared
        Shibboleth components.

        These were previously known as java-support and spring-extensions.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">43189c546edbf62271f092c39b96f559</hash>
        <hash alg="SHA-1">4f191e79c8e2a0b211f4d97ab61c31dd5bd463ee</hash>
        <hash alg="SHA-256">90eb9b9df1fee85141c89fb662c4faa0fe21dd86294f7e8e166ab898f6ac67d0</hash>
        <hash alg="SHA-512">3d66bda521b61354f61ba913ea735357539b62683ec4e3617bb4ea4b5f039793d08e86d580aa68176e652686bbd9ed6febd4614c44ce1d9d49945eea926547af</hash>
        <hash alg="SHA-384">7d9d2626639e8f94c1afa8020783a71302d592c99e3dbcba1730b50fb9576643e65148d01a3d1638883a5067a1761e03</hash>
        <hash alg="SHA3-384">ef93faa925ffa5435dc68dea7a3cc45997746506cd5bda4cf68a9c3d8769e15729a23d91e88e7fd29fd678699d7e0035</hash>
        <hash alg="SHA3-256">fc749402905bfce2d33e45b86c665d482c8638e991f7d4d6d06df36764882e40</hash>
        <hash alg="SHA3-512">e55ed0c0229b9dff5217fec035ddb400e1c8ac6804194fb64455e63de7e39790a149d1e787cb205dd5d099473b0dc5585b24e3f6dac7548151d8a2f0a330e4fc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.shibboleth/shib-security@9.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shibboleth.net/shib-shared-parent/shib-security/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/?p=java-parent-project.git/shib-shared-parent/shib-security</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.shibboleth/shib-networking@9.1.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>net.shibboleth</group>
      <name>shib-networking</name>
      <version>9.1.6</version>
      <description>A multi-module project aggregating a number of shared
        Shibboleth components.

        These were previously known as java-support and spring-extensions.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e0e7c170126a5e3973d0dee33a8e3d97</hash>
        <hash alg="SHA-1">e4059308ebca9f33159df7218dee99f9f0af8871</hash>
        <hash alg="SHA-256">5b0e462da3e0be62c119047848b4e8e5af0e25f5e309bcb4e506938a86338fbe</hash>
        <hash alg="SHA-512">8608f04ae3d013d580299faa34d4777091761c9af0525cf3f4e457f3683bee15865a2b934672536aa5e247ee055def0f13ea499727a1746868e3f9208204913a</hash>
        <hash alg="SHA-384">9b4aec0b132b9952b360d92a7c1418d02bd4082db64f931518698c6b30eacf6787957b50e47277e38e3fa4d30986b937</hash>
        <hash alg="SHA3-384">a8e81fbc1d6b6b17036d412e7498bc4c65d153dc38fd4b35559ed0af32b8bdaa869df3562a3c8a4998e83f9dac95d81d</hash>
        <hash alg="SHA3-256">d03fa5e513d85180f7f0d5b47060526342452f840c5f6164c442e59345029f14</hash>
        <hash alg="SHA3-512">e8d8d5bb15f770ae31fde2877cfd07d4c13ba3d3546058fefd44ea487583eb7d127c1d1b14e82771186d9623553295eccba8082d3d2e121419411d9b2e52c323</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.shibboleth/shib-networking@9.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shibboleth.net/shib-shared-parent/shib-networking/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/?p=java-parent-project.git/shib-shared-parent/shib-networking</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.3.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents.client5</group>
      <name>httpclient5-cache</name>
      <version>5.3.1</version>
      <description>Apache HttpComponents HttpClient Cache</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ef035c64709044723191e430b7919890</hash>
        <hash alg="SHA-1">3d3bea8e0b3dd4964225ad8abe4eed5b6ccd6db9</hash>
        <hash alg="SHA-256">bb1852942dcb40566f53bb99f11b5175fd913229ab35b9fa54a33d4644924b10</hash>
        <hash alg="SHA-512">2a773f9c4fd1ddbc6fc7bf545aa8060ab4ef3b65b0e0cc15797c02a20e7154dbcca8063734837b5e7ceb96765fe61ba68c202daae46079f807526351bfe57b93</hash>
        <hash alg="SHA-384">ec54579c0cd957c0785c1a88c52a0d69a651942562c63fc8009001e3459fcb17504d728404d82f351b2f572b784f831b</hash>
        <hash alg="SHA3-384">2c463824ca033621e36554eb0009e2bd85004500eb19ddb4fcb1fb81fcaec2f939c9548673ba8b730624bfb4ff60fa2c</hash>
        <hash alg="SHA3-256">6dba2eaffccc21855d07392ae60792c04ce0261b26f6a8579ed25c2bfd3d5741</hash>
        <hash alg="SHA3-512">ba72d4e8aeab688e2f9171619669d29db652f4ed5fdbffd9e76499bddb37d8844dd7138cd95db3da1196c0daf56e778a9282c47a83e0ad949e0daf53e8e151fb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.3.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://hc.apache.org/httpcomponents-client-5.0.x/5.3.1/httpclient5-cache/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/HTTPCLIENT</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?httpclient-users@hc.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/httpcomponents-client/tree/5.3.1/httpclient5-cache</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.shibboleth/shib-velocity@9.1.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>net.shibboleth</group>
      <name>shib-velocity</name>
      <version>9.1.6</version>
      <description>A multi-module project aggregating a number of shared
        Shibboleth components.

        These were previously known as java-support and spring-extensions.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ef3c28da4b27f5974e5a2592e757222e</hash>
        <hash alg="SHA-1">4d4e83237964e272bc0f0db491eb4421cdf2e1cb</hash>
        <hash alg="SHA-256">99553ad68207c955219128a5521dcec62d476da56509aa3a548a6623402d7615</hash>
        <hash alg="SHA-512">ef48fe5151a3fbbdb2fb9de12a0ebf4bd2ea97e165f6b04e9b67d4ecf783cf625a533a97196e77fb125fcfbcc1cd0e25f5d26535ea98d0e6bad3f5da6a9ebcf7</hash>
        <hash alg="SHA-384">2275370614d9040bc8cdc666902deadb87e8114d4a0f83e507f08555c3322ce47bc09174bc0297558d81a1a123a8515b</hash>
        <hash alg="SHA3-384">4353d130f3fa760aa734a6e63593b7d5b759b86822445524cfb8d2024078c33b80b0062d22e778cea59d1989926499ca</hash>
        <hash alg="SHA3-256">3f88e1a92bd598ea5e784cb1225d55779b85632fc57b005c5b1818f7495a23d0</hash>
        <hash alg="SHA3-512">4b3a6f0b0339e667886f32fc86851b46c73b576e63f922e8c9b0f5ebd2ab9cff0be033b108cb5e98c6510bc96e238c37bce80e2e70afbc7a9e7d5be92e04f621</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.shibboleth/shib-velocity@9.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shibboleth.net/shib-shared-parent/shib-velocity/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/?p=java-parent-project.git/shib-shared-parent/shib-velocity</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents.client5</group>
      <name>httpclient5</name>
      <version>5.4.4</version>
      <description>Apache HttpComponents Client</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7863bfffc7b3dc5f9d37e9734590aa15</hash>
        <hash alg="SHA-1">29aafa2d5ced55ed75dab37cce5e125fb06e54d8</hash>
        <hash alg="SHA-256">3f8657eab91b7533e5cf232d4e268253c4ff9f99f1e4bcd67841618bed67f2de</hash>
        <hash alg="SHA-512">728e75be111e8c557c664b4ed24e6acdedcf700bca0fefa69158f410b5ab7b810e94370daad946703efc601adfa8cb4b20916dd0b157cdbacdf6dc105d0d1654</hash>
        <hash alg="SHA-384">641df857e1a955dacf8268389b76a5b0cc35ab945c5d46a6afc2c453e3046e6916bd26ef6ff44d71cdff06bc2ef682fc</hash>
        <hash alg="SHA3-384">584b6f3588796d5054070f7916d09d3fe7c6dea5a843bc727b07af8ce6c4aaec9d52793bb5ccc04990f9af56b6038c5b</hash>
        <hash alg="SHA3-256">653cf9505139d2d1524e2f9faef52f639f2ebf8581ea2920a3c286439a562ee7</hash>
        <hash alg="SHA3-512">0a1b217d56d1272074aa7337a0086bc9bd7929603cdc7e2471d698d1228ad2963b64d5ce2bdc583eccdf8f45919f7b08e2042f936acd2a508ac0d3f84cbb0140</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://hc.apache.org/httpcomponents-client-5.4.x/5.4.4/httpclient5/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/HTTPCLIENT</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?httpclient-users@hc.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/httpcomponents-client/tree/5.4.4/httpclient5</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents.core5</group>
      <name>httpcore5-h2</name>
      <version>5.3.4</version>
      <description>Apache HttpComponents HTTP/2 Core Components</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">45cddb0e4be800806019ef8d9bfa7931</hash>
        <hash alg="SHA-1">3742a9a9ba3a5a0d45be230093b52a1302a561e2</hash>
        <hash alg="SHA-256">1fb4f34e4b612e7c127ad693335583587850b17ce9b1c366f9de1ca49fe2c781</hash>
        <hash alg="SHA-512">ff6a6ffa1f6e4974011778ea8ffb6771c52c8b1ec161f7f411f7d6e0ec2988a36cf3c9636da956222a91a81f2718a215bc176b678cb6ef98ff44bc6cfe4b80e7</hash>
        <hash alg="SHA-384">0e5a679b26abd8b170f7f5afded5a3923908dfd0fc92e90ab4757e561fa92a0e36cf2129313c355245810db9061fb309</hash>
        <hash alg="SHA3-384">a203c70cd9e2d7f378b4745886ac8a25c2bcee599dc9f66f4be295deed81a70d68ba7b69d8a658a3a6fe9f14fda9dada</hash>
        <hash alg="SHA3-256">cd90c09e8b92780fc77a197bea9f7a056ca79e80359d5f356727e1a132ac57fc</hash>
        <hash alg="SHA3-512">e792b5a49e3b5dfd71de0130122cf5b52dac056bbc27aa67863d3b4877e721a0774a0483f41bae89016ddb1f8444e3a4cc2fda25213f38d008788ced76f14c18</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://hc.apache.org/httpcomponents-core-5.3.x/5.3.4/httpcore5-h2/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/HTTPCORE</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?httpclient-users@hc.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/httpcomponents-core/tree/5.3.4/httpcore5-h2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents.core5</group>
      <name>httpcore5</name>
      <version>5.3.6</version>
      <description>Apache HttpComponents HTTP/1.1 core components</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ddf45aa72b3c500fcd277cf75fcc1732</hash>
        <hash alg="SHA-1">2c7f0d11747f9485a02c9f622c0f0477d7ce8677</hash>
        <hash alg="SHA-256">8fb4528d3e970aca440523a1bd698a389fa710ecfea4c5c6096698b86d1669ce</hash>
        <hash alg="SHA-512">a1f1f25498521bbe9df9fef8e43b86b9b709c40db2037bd9ff7a4a34b58cfdf8fd1e2595d3652eb5692c150ac638087c66535c1f4aa4a23d6f2273d4186372ef</hash>
        <hash alg="SHA-384">975154449c95efaa8e3a0ff2d29a4aebbf46d55af571975b23fecc0901354aa7572cf91849f3937a390d3e0bbcadb4b4</hash>
        <hash alg="SHA3-384">47f654cacce5ffbce2f46793295357862894aefcc404960f805854dbb503dabf665f7dbc8d8baad2a042d009c8b37cac</hash>
        <hash alg="SHA3-256">75c8d503ab4878b182aa1a1a04a78e2fd2cbc3cf5008f8aff8560e5331eb21c8</hash>
        <hash alg="SHA3-512">8f6bfc94d08af1a555ed2fd8c4d86055e6a04c44334f980ec38fffe15dbffe3a593d793288b39719a46abd8226092577f990a47ae7cc7a77b20273bc35f23a49</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://hc.apache.org/httpcomponents-core-5.3.x/5.3.6/httpcore5/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/HTTPCORE</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?httpclient-users@hc.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/httpcomponents-core/tree/5.3.6/httpcore5</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>net.shibboleth</group>
      <name>shib-support</name>
      <version>9.1.6</version>
      <description>A multi-module project aggregating a number of shared
        Shibboleth components.

        These were previously known as java-support and spring-extensions.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ab132a449837bbc112bcd5248a808a65</hash>
        <hash alg="SHA-1">a1efb8b1b293b1c01e6fa48d7feeb3b6917ea68d</hash>
        <hash alg="SHA-256">c65489418c32289c5fa7a7feb1ad8d5075e4e0ad14fd170b959eb592b53f055a</hash>
        <hash alg="SHA-512">087ded4e8079def635fb702ef4ed2de53bb3604d0572e70f65db7bede6cc957559e17d67a7a717c2939be0ae680036555e1c73045686e87ecf319da1ceaa06a9</hash>
        <hash alg="SHA-384">e9d5d35a366e18b5c2acd7f491f44088b5585127025e411f10ab2be28fd8578e1917c8ad4d40c12d6ad16b15c546301a</hash>
        <hash alg="SHA3-384">361bf0ff99fc21a641ef5746db0714526777c6bf079e5938c9a5f0c075c741b2a4394cb0aac09a369745c05f3a2e499f</hash>
        <hash alg="SHA3-256">200fc26df1d444ac404ad3f57d8ab6bf6c513ff400de62b6d745f3c9a8e14fa1</hash>
        <hash alg="SHA3-512">ddbfdc6ef43347379bb4c0d5eef0dca5f553b40ad56907a8b19dbb88d9528a293d94e8946fbfa3207f5fd5d0d6fea81ae6fa17857abe62ee851f299bcf347331</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shibboleth.net/shib-shared-parent/shib-support/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/?p=java-parent-project.git/shib-shared-parent/shib-support</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.cryptacular/cryptacular@1.2.7?type=jar">
      <group>org.cryptacular</group>
      <name>cryptacular</name>
      <version>1.2.7</version>
      <description>The spectacular complement to the Bouncy Castle crypto API for Java.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9171ea0e9f71e98984def0861f5a9a7b</hash>
        <hash alg="SHA-1">08e2849cd0cc8856899c1190ec8bc9f261fb215e</hash>
        <hash alg="SHA-256">fd5e655cc48c2c4568d8a40770dc07442316d61bcc1c24f199b84deee7e4f727</hash>
        <hash alg="SHA-512">a3dd683b357e07522bb3e3837dc264dde48638c1b96abc8f2bf9eff351617ceb246ff38a0ce0f85a81707e811a0d5fd292c09fa8487d89a8307043aff4796909</hash>
        <hash alg="SHA-384">21e7a4479b09078d6456b66252ed9dab21c7c4ce23a153a704e0171283bfebcfa46f882eda4b73e2df3371f5c813ca91</hash>
        <hash alg="SHA3-384">87f48290302e8afd66c662e7b9ce62366539e670d2e19741cae9ae66706444715558d45284540dd6c65c69c5f985f80d</hash>
        <hash alg="SHA3-256">8b259cc94ca6507484b0fc69ccfeadecdaf09ceebef63024c686f4d5fab5a480</hash>
        <hash alg="SHA3-512">e9a36d437319c4769b90b887579ebcb699a1289fa62fa1bf2a42cb428b53699d5fcaf56f4b0f68d1413caef674f785aaa8bbf2605ab7c95c2dd410ab891705aa</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>https://www.gnu.org/licenses/lgpl-3.0.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.cryptacular/cryptacular@1.2.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.cryptacular.org</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/vt-middleware/cryptacular/issues</url>
        </reference>
        <reference type="vcs">
          <url>scm:git:git@github.com:vt-middleware/cryptacular.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>33.5.0-jre</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d9fbf39a41a5bab891348f07668e18c5</hash>
        <hash alg="SHA-1">8699de25f2f979108d6c1b804a7ba38cda1116bc</hash>
        <hash alg="SHA-256">1e301f0c52ac248b0b14fdc3d12283c77252d4d6f48521d572e7d8c4c2cc4ac7</hash>
        <hash alg="SHA-512">994a4dbcbd8e528ad3b4a7acf49b631a40dcebb03d9a8f5e1d3b74351f805f77774e9a19f7233e42036cb415b7838710f207ac1e18335e4a219b7f99ea22a44f</hash>
        <hash alg="SHA-384">9dabff6e543ead881b20d38a533e9151aaa83999239cf0ace3e712cf678e7976c3a50d79e3f3c57afc05a3b9ff14ad90</hash>
        <hash alg="SHA3-384">9f65d4d942113facb2eb25229c1530b79dd3b8994574034b8d4a1c2b39ed8ee5bb4d415ec690d3d87cee0d8cb2283564</hash>
        <hash alg="SHA3-256">fedafab2279bdf6eff66314fc61b056e92312695678e66dc1e25fe1d18af5a36</hash>
        <hash alg="SHA3-512">e64f3c49f9030358554bb0b8abdff729394988f1e3247b05a86302014eeff4a2855acf46d9bf1c683cbecc33a24173a20a103d3c82c94f8cabd6676a01b40fb6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/google/guava/actions</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/guava</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar">
      <group>com.google.guava</group>
      <name>failureaccess</name>
      <version>1.0.3</version>
      <description>Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes are conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">29a782e90f6b37218b18bb880d2a8f4a</hash>
        <hash alg="SHA-1">aeaffd00d57023a2c947393ed251f0354f0985fc</hash>
        <hash alg="SHA-256">cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb</hash>
        <hash alg="SHA-512">72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf</hash>
        <hash alg="SHA-384">9dd1a2a08efda311604992d3e7cee64873bc8c64de3b423b1b3a3dcc1f7f0810bb03901fbfe39a5f835accb0646f4ad8</hash>
        <hash alg="SHA3-384">ffd67766c165ee77e96824e06de2c19864a6e61f785b2085eb825f308f173d71f2555559d90d910f33f3367378ace0e3</hash>
        <hash alg="SHA3-256">08a77b528a72ca412b36e4004692705ebfd75cfb4897c88632d367d08a34b09f</hash>
        <hash alg="SHA3-512">7cba6c266babbe8272f029eea6e2cbddadee96eb1a16916a6eb2441a55837867ce717385d4388735fd83f2f6555931077c0ebda011a1ee9a37ac38c8c0c43a65</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava/failureaccess</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/google/guava/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/failureaccess</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jspecify/jspecify@1.0.0?type=jar">
      <group>org.jspecify</group>
      <name>jspecify</name>
      <version>1.0.0</version>
      <description>An artifact of well-named and well-specified annotations to power static analysis checks</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9133aba420d0ca3b001dbb6ae9992cf6</hash>
        <hash alg="SHA-1">7425a601c1c7ec76645a78d22b8c6a627edee507</hash>
        <hash alg="SHA-256">1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab</hash>
        <hash alg="SHA-512">efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc</hash>
        <hash alg="SHA-384">814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a</hash>
        <hash alg="SHA3-384">c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf</hash>
        <hash alg="SHA3-256">4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71</hash>
        <hash alg="SHA3-512">65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jspecify/jspecify@1.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://jspecify.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jspecify/jspecify/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xacml-impl@5.1.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xacml-impl</name>
      <version>5.1.6</version>
      <description>XACML Provider Implementations</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">99baab48a28e6dc330c3acc9952ea528</hash>
        <hash alg="SHA-1">d06f74da16d353ed0a4829164807ee4ee127f7ad</hash>
        <hash alg="SHA-256">fe5f2b3915f65de21bdf15dc75492a542ce96e470d6f6b4ae4a9fa993d40b222</hash>
        <hash alg="SHA-512">1162c74551386f8382f6ff212e85d6316f1dfc2cb2dd4dacca9297fba837f060601f784b90a9a4258d613f1ded8af22b162ab2b0f9623c55f413bf30c492ca7d</hash>
        <hash alg="SHA-384">8b68ecbf2e07d57206c5ccfdf7da0088b4aba29a4b3aebb5f78dfe88ff1dc97b9e01a8af492d4d4eb9482a41b23d17d0</hash>
        <hash alg="SHA3-384">0cae43c1b78a5ce520028c88e1cbf65b9442b5af2a41d28414cc937f82f6479be68b13af3a158b2bdbb84e3aa7aec74c</hash>
        <hash alg="SHA3-256">9346ba80517bb15974ebe6925442917749bdde44d6e8429df2a08cb8ef458c00</hash>
        <hash alg="SHA3-512">b226f3ab49088d48448a32be13e327eb1da414612ad41ce53c733c8a3163ecbc4eb2fd9896d211f08bace0fbec011f4712dce55f8147c561876333dc6f949809</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xacml-impl@5.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shibboleth.net/opensaml-parent/opensaml-xacml-impl/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-xacml-impl</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xacml-api@5.1.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xacml-api</name>
      <version>5.1.6</version>
      <description>XACML Provider API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3714f82a0760d68683dd2eac5a5272a7</hash>
        <hash alg="SHA-1">ed99a6840b6d886a63cbed69e3b705d262469432</hash>
        <hash alg="SHA-256">c044a406d434b3c01492a77d676de32e242b456611a3c42e30b66bed74c81dde</hash>
        <hash alg="SHA-512">b74e7ec4c2938a5a3386ea3480317532df83cd3a49d89b6f639f55ed05efefc00c8998fc950fd4a7f0184921a939368f0cb60c8cc9747e1f5bac817d336963e2</hash>
        <hash alg="SHA-384">1b3ed9bc3bf98dcb6e753657e705cb7dd431cd6f330c26c12ce6eea0c4d5a31a83814e3e66a8964d6179113122e5d629</hash>
        <hash alg="SHA3-384">4bead6b1d3f73a0d11aeb541fac53ff7cf9baaab427a4dd2ff1955edf62207cde70e4bfe4e2348ade7f77e4a552c36cf</hash>
        <hash alg="SHA3-256">88557de71a4702b9cf163c6d66a3cb499fb19d6e76eda70c9f82795b770f178d</hash>
        <hash alg="SHA3-512">c1acb08b681f0add4622d2060a370503db123bbf6a90b34e83dbc02c718d36e80bf02fe22f5bd91016838fe8cb9d3c416e07d6a89f386068bbef24b28a557421</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xacml-api@5.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shibboleth.net/opensaml-parent/opensaml-xacml-api/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-xacml-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>3.0.2</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd83accb899363c32b07d7a1b2e4ce40</hash>
        <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
        <hash alg="SHA-256">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>
        <hash alg="SHA-512">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>
        <hash alg="SHA-384">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>
        <hash alg="SHA3-384">9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1</hash>
        <hash alg="SHA3-256">223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff</hash>
        <hash alg="SHA3-512">3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://findbugs.sourceforge.net/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://code.google.com/p/jsr-305/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xacml-saml-impl@5.1.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xacml-saml-impl</name>
      <version>5.1.6</version>
      <description>SAML XACML Profile Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b761da70f7ddbd9f75691e85efbd809d</hash>
        <hash alg="SHA-1">cd2191a02ec63cc59fbf127083d000c0e621f8d7</hash>
        <hash alg="SHA-256">c024e6dbfa138b33b73e3fd7e0397a4d585219298d7a8f6e531f1bc09a56187e</hash>
        <hash alg="SHA-512">2c9e4fababcfc3f7f5599f49df6128d1afeda53bb209871b4985784a263e2c0fa8bcb4c4940125f43ca69bbadeaf238ee47b5523c717f1a965e2be633d58b860</hash>
        <hash alg="SHA-384">d4ed5ef4172c86f88b296fdca0b6d89c3062671a3fa7e4d47add47f6dc101974d7b077eb1c532bb74eef86a7c52a2688</hash>
        <hash alg="SHA3-384">05ff65a3301360c077f46001a14119fe731b08aadceb1b7b7cfce7e249c70b40b373760626124c6f93173e0b14f6544d</hash>
        <hash alg="SHA3-256">bcb62137dcdf2b713e1b3b4d55940242bf597d76329c35ad8b34b6063e4b7a71</hash>
        <hash alg="SHA3-512">77cd9f93e9e13f841416536872a0f5d0c3b4147d132bff81517f7742693039812912ab728a16fe1191da56aafba203a35a8cc34ce1bf9a4666feec686388087b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xacml-saml-impl@5.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shibboleth.net/opensaml-parent/opensaml-xacml-saml-impl/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-xacml-saml-impl</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xacml-saml-api@5.1.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xacml-saml-api</name>
      <version>5.1.6</version>
      <description>SAML XACML Profile API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9e5f3763ba9aeb7d26b7de494ca4fdbe</hash>
        <hash alg="SHA-1">2b07ecb5a70e525e5a9295371722bb4e16c7d62c</hash>
        <hash alg="SHA-256">3401c8d65dcc32a63209ff4ef2d4c4b8a80e4636940dda7cc41149f4193d38f1</hash>
        <hash alg="SHA-512">fb6e3af91857d88cc68e1feefe299f975fdc8212b4fb043b2d7449efad561e8eec310f135b06d69bc5c95c8599f70ca8c939a3569102668e0e07a101e67bab1b</hash>
        <hash alg="SHA-384">50253dee4c7688c088c0d93f409dace5af5add2904e1dbc454a452b89f39ffec6d85ede2e2e4781029185efbfe509b9b</hash>
        <hash alg="SHA3-384">4787a9bb0efa0418477296f1c0b5486860d3f10129cb1e951b87231d966a62e4264570a86641fb7059e9170977014bfb</hash>
        <hash alg="SHA3-256">b9def6dc28ad82f211256fd590a1cc51e5e8f9654e033430cbfbaa220a1406d6</hash>
        <hash alg="SHA3-512">510b310b2614f1849368227d7c77121355e0fe2a6333eaa5ec10867a2e9b6228c73614d197fba31aa193ce0d4fbba9c242e50af2ea441f18036c0e7041677fb9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xacml-saml-api@5.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shibboleth.net/opensaml-parent/opensaml-xacml-saml-api/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-xacml-saml-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jasypt/jasypt@1.9.3?type=jar">
      <publisher>The JASYPT team</publisher>
      <group>org.jasypt</group>
      <name>jasypt</name>
      <version>1.9.3</version>
      <description>Java library which enables encryption in java apps with minimum effort.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">39327c7e38782102ecdb3c9dc4e8dcd3</hash>
        <hash alg="SHA-1">0d99ef9540f51c617f2a293b460f025d2ee563dd</hash>
        <hash alg="SHA-256">f481fbb8dd8ce754bfde7552af4fcbe8c5e303d53663bb3d8ce9d4338e0e55aa</hash>
        <hash alg="SHA-512">99369da44e4c26f64e600f99b135eb05167ae1ebb5bb9f22233f14023f5416318bb4ca5893dbb0e7d444395ea6fa53713559a6990120b4fc962a1e9284ba5821</hash>
        <hash alg="SHA-384">12baa02ea8f8bdfdf04070d216dff4339b7b1c128f895007e900a18ee38a899e1a82fded92595a9a6f9127ae8c42877c</hash>
        <hash alg="SHA3-384">72ba6c5ea5781cf7f627fc1e847c68e0064947cd75587e028a443b2d8056c6434cb5be8a0e3c6170f71fae6d67719e8d</hash>
        <hash alg="SHA3-256">1cf8809814fad98e8204220110becfeb901050ea9aefd9cb4607adf76631b547</hash>
        <hash alg="SHA3-512">08f3aee5e0c3b57cb0be5f8f2de7b2429793c717dd25fb74e20eaafcaf1cfac3721cf184d179a4c507d90fd864b300f3e83d15ebbeb937637d8eb1d1bf779d48</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jasypt/jasypt@1.9.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.jasypt.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="vcs">
          <url>scm:git:git@github.com:jasypt/jasypt.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>2.0.17</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b6480d114a23683498ac3f746f959d2f</hash>
        <hash alg="SHA-1">d9e58ac9c7779ba3bf8142aff6c830617a7fe60f</hash>
        <hash alg="SHA-256">7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832</hash>
        <hash alg="SHA-512">9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9</hash>
        <hash alg="SHA-384">6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944</hash>
        <hash alg="SHA3-384">9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557</hash>
        <hash alg="SHA3-256">00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e</hash>
        <hash alg="SHA3-512">9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security-saml@4.1.4?type=bundle">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@4.1.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@4.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@4.1.4?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.1.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.1.4?type=jar">
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.6?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.2?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.6?type=jar">
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.6?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.4?type=jar"/>
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@4.0.6?type=jar"/>
      <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.4?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@4.0.6?type=jar"/>
    <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar">
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@4.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-common@4.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-common@4.0.1?type=jar">
      <dependency ref="pkg:maven/jakarta.mail/jakarta.mail-api@2.1.5?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@4.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-saml-impl@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.cryptacular/cryptacular@1.2.7?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-impl@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-saml-impl@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.jasypt/jasypt@1.9.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.mail/jakarta.mail-api@2.1.5?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    <dependency ref="pkg:maven/org.apache.santuario/xmlsec@4.0.4?type=jar">
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
    <dependency ref="pkg:maven/org.opensaml/opensaml-saml-impl@5.1.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-core-impl@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-profile-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-saml-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-impl@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-soap-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-impl@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-security@9.1.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-networking@9.1.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-velocity@9.1.6?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@4.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar">
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar">
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-core-impl@5.1.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-networking@9.1.6?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.16.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@5.1.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-networking@9.1.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-security@9.1.6?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.4?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.shibboleth/shib-networking@9.1.6?type=jar">
      <dependency ref="pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.4?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.4?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6?type=jar"/>
    <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.4?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.3.1?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.4?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.shibboleth/shib-security@9.1.6?type=jar">
      <dependency ref="pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-networking@9.1.6?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.16.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-profile-api@5.1.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-security@9.1.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-networking@9.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-saml-api@5.1.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-profile-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-soap-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-security@9.1.6?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@4.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-soap-api@5.1.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@5.1.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-security@9.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@4.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-security-impl@5.1.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-networking@9.1.6?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-impl@5.1.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-core-impl@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@4.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-impl@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.shibboleth/shib-velocity@9.1.6?type=jar">
      <dependency ref="pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.cryptacular/cryptacular@1.2.7?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar">
      <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar"/>
      <dependency ref="pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar"/>
    <dependency ref="pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-impl@5.1.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-core-impl@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-api@5.1.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-saml-impl@5.1.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-saml-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-saml-impl@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-saml-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-saml-api@5.1.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-saml-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-api@5.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jasypt/jasypt@1.9.3?type=jar"/>
  </dependencies>
</bom>
