{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:365cf817-3c48-35b7-a422-bc9c5c759227",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-configuration2@2.13.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-configuration2",
      "version" : "2.13.0",
      "description" : "Tools to assist in the reading of configuration/preferences files in various formats; requires Java 8.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-configuration2@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-configuration/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-configuration/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMMONSSITE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-configuration.git"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeAggregateBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.20.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17, 21 and 25 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0ecbbdd5f6bc8e72c67576346a1aeb45"
        },
        {
          "alg" : "SHA-1",
          "content" : "f00e2d56515d0eb1f5114dbfcaa20e0e064dffa2"
        },
        {
          "alg" : "SHA-256",
          "content" : "a1c1f4c5d9253fd14456124b7d6f4e12e9d7345869a4fc353d9dea978c62d763"
        },
        {
          "alg" : "SHA-512",
          "content" : "981540a896fae3f5ad142813f716f89367f1432b364093c1058f059f62eb487018dd5370728f550cd1dfb0fbe7323babb988564047f42b882b94f1a96b2d362c"
        },
        {
          "alg" : "SHA-384",
          "content" : "f33454e622a5badd13ed31b151fee13ebc9045726251ffa312538e61ecc7c78cdc44ffb2cb5750683876fab56ac95795"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2c207360412c3986943d88a0ace46914c715d0e8004a54f7907e159bb922d159e59aa74e4f9b6d06619c20020d80744c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c661e518d578715e9c39617e1c2e4f1fe946480e239937253e9746dd742dc0a3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4efd2a534b14d6d9db4d08eabb9a062912eec07ae3c96cfe1ac668941aba590d2d571e667d7ac0806a9273f48d152497f2ce72d665648f3465ff446a4992102c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-lang/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.14.0",
      "description" : "Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "54960a12a82d52df3d5548d6934d87b2"
        },
        {
          "alg" : "SHA-1",
          "content" : "adcb0d4c67eabc79682604b47eb852aaff21138a"
        },
        {
          "alg" : "SHA-256",
          "content" : "121fce2282910c8f0c3ba793a5436b31beb710423cbe2d574a3fb7a73c508e92"
        },
        {
          "alg" : "SHA-512",
          "content" : "4975879372241025bd0a47fe540ed7d0cd3e5eba474b12af67a8c6016be0fbb4f4a3a4a0064f4d2b6aebce67d88ee814da345a5ba3a6ee4f6293b3b4e7bbd065"
        },
        {
          "alg" : "SHA-384",
          "content" : "a038f1a8b58bb7ec17ba55238d3e40f5d9386dfb17870630a728b22741a9592819374e9abbbc6402a439eea4db5b739a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5325922bb72aa73d2d51cb3fb5592fc77097614fd3ab3ac77e3acdc0fe1dc8c18893cdd9a05768bb725fa40dd8c14527"
        },
        {
          "alg" : "SHA3-256",
          "content" : "31008266592ec8503bcc7f6b4e7125b0e377f57f3a697cdcb02ee7f20f84ddf1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "385249425d8c6ab181039195a03c6337f393a1e1419527e9f072d695367bc0bd6546e752d1912df557bd8788329f7609aa1c63ce42eb135e2d27b6141ce9280f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-text/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.3.5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.3.5",
      "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well-known logging systems.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9ca067b073153c86c2da350c0f2cdf70"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3fcc5d3c29b2b03433aa2d2f2d2c1b1638924a1"
        },
        {
          "alg" : "SHA-256",
          "content" : "6d7a744e4027649fbb50895df9497d109f98c766a637062fe8d2eabbb3140ba4"
        },
        {
          "alg" : "SHA-512",
          "content" : "b6d66333cec2746cc410ca3b27099c4647618a1855783bac064c75eec95c643dab184010e5c875aca3c7fa827aed144488a1820604a043bbff93116de509f915"
        },
        {
          "alg" : "SHA-384",
          "content" : "bbfc26f81852dfe8df41b9cd1da6e755b223c51e824898490f96e2aaefb42e5484408f8a245b244bfe4e08170295ee72"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5e17863103757beb582b316f90a02f57f0ea7702b2146d6b318ab0f1105a3e0190dd1dc7b031550a68c047cadd23c114"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c01a09df81fae75d398ef61b168c8f7d70291b480961d392c59bdd1498c254cb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1ce4f4219542c8f1f0b52f9d2d916d8b11136f7a800bbb24ca93a28a800121e7c48af410076213d05dd715b37b110aa59a7a9609415e0cc5daed89bb13fc4668"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-logging"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-beanutils",
      "name" : "commons-beanutils",
      "version" : "1.11.0",
      "description" : "Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "32ed51f196dfda19e0dc1ce53eeed29e"
        },
        {
          "alg" : "SHA-1",
          "content" : "ac03ea606d13de04c2e4508227680faff151f491"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e44ba68ec9a3f21286fa2a8bbb003b735c0f69101bb43144b79f4f8aaa74709"
        },
        {
          "alg" : "SHA-512",
          "content" : "4348670579601bc1151de2f27414635c4ea0b4b53061d116c09ba319e2c4f8e91d0cb0713a964668bd5189105ac1e2b6590881850880bf5ff23cc6409f270420"
        },
        {
          "alg" : "SHA-384",
          "content" : "a349c6a1e0a48cbf8d3528e4a39257db1b912c2ef060853837aa14d941154e9adc43248309ab6db7e8ac7730db7b081b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f3afdd778bb54bc6a9e41b5c31cf98078f005542b87cd0a3713d8e5152ff7eb6d9e2ed3206ce453a3af6f869fa714cbf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6dd4ec6d993b5792c51b5d6c4ea3b56f35b1c1f0ea65b182cb55c2432315aa68"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fdcaa942f7377fdb36c7977273c1e2177d23e7b13162db1a0e5d3958d87a8c77d08cd6797a7c30cf755d492fa75d0642de5678dfe1d5a936569dccde5549e512"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-beanutils"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/BEANUTILS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-beanutils.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.20.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.20.0",
      "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b5667c7f07ea67b722eab4619916dc96"
        },
        {
          "alg" : "SHA-1",
          "content" : "7a53b9a5502c8559eccde491fcff197a77e71831"
        },
        {
          "alg" : "SHA-256",
          "content" : "e10e547a4addd417fe503aea921dceb0d5ea08b271eae5868e35a2c7664a0134"
        },
        {
          "alg" : "SHA-512",
          "content" : "5e65a876aa8a166071683dd2c4b850cb3863f8b3247a42dccc446c55902f1a99788e909b1bacd07726e0d790aa9f56bb84c7b86c6e2a1e43c1d9108872a3e37e"
        },
        {
          "alg" : "SHA-384",
          "content" : "5c2fdd6012dae9e4c571d6d1a5bc8f3491d6f21a9eb1127cc2707737ae4a654642b48bed569f8f7eb6da78e18b318882"
        },
        {
          "alg" : "SHA3-384",
          "content" : "33431c0ff60d27c83322e0afe0b962061f38f709221f922736d6fb86c27daa4d98d200037474563d2779ac959048bc2d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "760ae7b02f3548b848d821f3c9e1ad0138b32e5c3bb090a14da2ed5b863495c5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "84b7a9ed8e7436dba2ab4b81fbeee717da91360f10bdeadbd7b5c3778f8331f54a195a6206d41df5e3b28aca4e61fd43359003da340b67f6d1d248af054bc7cb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-cli/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-jexl@2.1.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-jexl",
      "version" : "2.1.1",
      "description" : "The Commons Jexl library is an implementation of the JSTL Expression Language with extensions.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4ad8f5c161dd3a50e190334555675db9"
        },
        {
          "alg" : "SHA-1",
          "content" : "6ecc181debade00230aa1e17666c4ea0371beaaa"
        },
        {
          "alg" : "SHA-256",
          "content" : "03c9a9fae5da78ce52c0bf24467cc37355b7e23196dff4839e2c0ff018a01306"
        },
        {
          "alg" : "SHA-512",
          "content" : "dcd62490cc386516f66427f5e478c308f6937eb6d64a34a02de56255129ded20bedb85c01b5c794d95ca3c4d6a11d58fa920779c5e517b78a881c5a229e4fba2"
        },
        {
          "alg" : "SHA-384",
          "content" : "db60a120271ed224dbe535219de2d13603a5ec9e397ce5cb3006b10464ceb9a23a6c742fa1262352bed179032b7f4357"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8bf28ee3c9334fd57160f0d60006d2b20099d50898f919f901e9c97dd9e3ba634b4c02ba7f861e9d4076799a778524a9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cc6d0fc318a59e25d3eea3cea560e9502c5248a7bad1458a9db4727d344d2f41"
        },
        {
          "alg" : "SHA3-512",
          "content" : "652c1d03ed332fa6a3ca178e9af600508f0e2edb2840162dd86cff0827378e24144eb2996478973a11e30512dbb6ffeee32118505ff7194d37283935fcc9a51e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-jexl@2.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/jexl/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/JEXL"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/jexl/tags/COMMONS_JEXL_2_1_1"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-vfs2@2.10.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-vfs2",
      "version" : "2.10.0",
      "description" : "Apache Commons VFS is a Virtual File System library.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "df535626616b23cdb5555c40e556155e"
        },
        {
          "alg" : "SHA-1",
          "content" : "a306167fdb88152403c8b00595b1502ffacd5b76"
        },
        {
          "alg" : "SHA-256",
          "content" : "adf9dfb77a44f7b6e2dba3779cfa7142ab8a1f618eb7a9741083822e8d14be13"
        },
        {
          "alg" : "SHA-512",
          "content" : "c8302e679e0d0f0d9467f263dc37e792f35802e9762f78a7fb5a59108668d3751bc63f415c61e46a4eca409f306091abb6ef8bc95c2bc72807a0f91553195c7a"
        },
        {
          "alg" : "SHA-384",
          "content" : "c135ca13ef64d1eaa4bae40f4d5cb44ff028b15fffc68d69d281fb2758fbff1c0731d2438beb9145641b4660b98a0b84"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8e3d55557ac1f220bdef567f65723cb1131b34c6c585090a08f83af0f75906e1cd6420da361093bd345e3f11a12a6dd5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "78b4553aaf3cb58558d0a6739b3f6e7bd50911509169eb35d41ed77c151592e5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7a53485b995eed3c3f446ba1ddbc599f83bec62a950cb9e870c999e05fa39f8fac514493cfafc910af633cc5d6ab29ec218ac301af70c51475c4bd45bd8a232b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-vfs2@2.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-vfs/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/VFS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-vfs.git/commons-vfs2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore-nio",
      "version" : "4.4.16",
      "description" : "Apache HttpComponents Core (non-blocking I/O)",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "597c450f3401e98103e835824ab43e77"
        },
        {
          "alg" : "SHA-1",
          "content" : "cd21c80a9956be48c4c1cfd2f594ba02857d0927"
        },
        {
          "alg" : "SHA-256",
          "content" : "4018736ede2d321034e8517ea90baefb31831a8608afccc446d8a699fb1d00d4"
        },
        {
          "alg" : "SHA-512",
          "content" : "197cb4f4343a02d39d61db1c19bf10757aeb2078f51c4ace77a72a250b6d03b31fa1fc51f989f43df8c2a0cf8162a36664a8a935f4bbeb860c35770a3abd1899"
        },
        {
          "alg" : "SHA-384",
          "content" : "e8827b2eca484748dd776edcac779ae67b5c4394c5c2ac1a50c614b19142bdefb4c4e01f0cf376c578007ad515add88d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fb55a9718c2507954ffb779520b0233acdd0135222c7d01542083b3cd5dff669a8afffaf54d8bfe724e52c5c18c1403e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "37554263bc837817c08dcfba6b4a5ee978fa1d9f99945d27c0f3ba44195501a0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "18692a4310956c328ddebeac514a503904b84605463063f0539673f0480f0606c002eccd6f4dbacf91d124e11e130aa122efb855ec6b0aa0cf72ee0b26ac8ef7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore-nio"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.16",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "28d2cd9bf8789fd2ec774fb88436ebd1"
        },
        {
          "alg" : "SHA-1",
          "content" : "51cf043c87253c9f58b539c9f7e44c8894223850"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f"
        },
        {
          "alg" : "SHA-512",
          "content" : "168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838"
        },
        {
          "alg" : "SHA-384",
          "content" : "ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.21.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5fe800ec94a9ed4bfbda7201b4d3e165"
        },
        {
          "alg" : "SHA-1",
          "content" : "766e196a17d2822866d875f43bd01f0f2d75c314"
        },
        {
          "alg" : "SHA-256",
          "content" : "c1ac2c175ea8186215ddc94b8d985e8281428e4c887eed6c356ab2756bb3e2b9"
        },
        {
          "alg" : "SHA-512",
          "content" : "3dfba186322bbd98d628add70f9e4a1d79a39d9e0fbe1007e3247720c6aed972db948eba0245c07d665198666d65c43e27de07e7ac7e74b6018401dbc76d5c44"
        },
        {
          "alg" : "SHA-384",
          "content" : "4a216c1cb270e8ecb8e500d6cdd67fe6a62cd948b7ada8b6f7721b55a07dc0704d6c4331ac0c4cbb2df863dbfcd61e9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ad11e9b4f63a5a296bbc02dbbee11458b174061851dbeb11bca9c8fcd1aad0e1fab564e9afcc78d7174ef24c7ca8a5b6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1348acc7cd2a92921354ff2dd12c7faf68585c41f623ae1bde3dfaeb9bfd761b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "12f10f10da247262eacf990389b71494770fbb411ec78af692999f24f7448cbf4e4ac46296cfd380e2089c51169384f29798c49fd615dc89548f43324e0de076"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-io/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-jxpath/commons-jxpath@1.4.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-jxpath",
      "name" : "commons-jxpath",
      "version" : "1.4.0",
      "description" : "A Java-based implementation of XPath 1.0 that, in addition to XML processing, can inspect/modify Java object graphs (the library's explicit purpose) and even mixed Java/XML structures.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0f59e33e5a2e7265155b51a1fb592fa4"
        },
        {
          "alg" : "SHA-1",
          "content" : "f61af30d8db727b7bb53d285fe074f89d8b68951"
        },
        {
          "alg" : "SHA-256",
          "content" : "226cb33a644995b084b3bdd42f2eb861509e6db71d7a343d411ee321387b0860"
        },
        {
          "alg" : "SHA-512",
          "content" : "1a22928d2b5f12b93a7643c4ba00e41d61194c80e71e89cf6a97411b7da14a95677dd41dca8f4eda3c1cfa6475364b161e008f526b44b1bb1ff68dbd49ad0051"
        },
        {
          "alg" : "SHA-384",
          "content" : "d595a93c8779f7677930d90ffb57a5daef6da02bfd32dcaaf9df1842a54db9e868378f3f0f7eaa79610998955a3fa701"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1c95495e008d255868a0cc6c6eede85a2374eec298ea8c0c5b577ccc71907c89306b6b2fa2c6a148f663849bd569b425"
        },
        {
          "alg" : "SHA3-256",
          "content" : "76a6888bb46d79084bd3a027d3f5f09c607730f47fc067488434fbee7a0521f1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "efb8a8fbb1a6a2061516bd591ea40b7c8859c7be6e81a5ed329851d5f0bf51da3a2e33490d5d3376e931fc0c08c8f56af4bacf6bf68d6312389d859219176a59"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-jxpath/commons-jxpath@1.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-jxpath/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-jaxpth/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JXPATH"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-jxpath"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "xml-resolver",
      "name" : "xml-resolver",
      "version" : "1.2",
      "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "706c533146c1f4ee46b66659ea14583a"
        },
        {
          "alg" : "SHA-1",
          "content" : "3d0f97750b3a03e0971831566067754ba4bfd68c"
        },
        {
          "alg" : "SHA-256",
          "content" : "47dcde8986019314ef78ae7280a94973a21d2ed95075a40a000b42da956429e1"
        },
        {
          "alg" : "SHA-512",
          "content" : "eca19b8a6b04c279b7982b16f1763ca1d49b0081a8d4ca2b7419f057d22a0ec60795eb4d901c5eb25dd4a733248876aa2f522c17a6144a26c8ede9fb2f84531a"
        },
        {
          "alg" : "SHA-384",
          "content" : "3eceda91a1ce0a35c490eb4c0bd94b552f96b8e5064b257435d89d65fcc2b04c706d996415efe3cf8a7413db479c3710"
        },
        {
          "alg" : "SHA3-384",
          "content" : "717fa1ea46c7a6265351dd212a106870c427e71de0bde251a409ee6e7dfe02c61966ef306d20cea5d8712cf7bf58d07a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bb83f90bc8b898878455441b3712a2bf489b6584e6685e5cb82d78cab596ae46"
        },
        {
          "alg" : "SHA3-512",
          "content" : "762f05d93e4f9cc95a969f8fecad13f97064897c83f4e057e84fe054601275912b68be76bb50da7e8d90b30846712b77341eb26a6405c59c07b06e223e9b027c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xml.apache.org/commons/components/resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/xml/commons/tags/xml-commons-resolver-1_2/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-core@5.3.39?type=jar",
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-core",
      "version" : "5.3.39",
      "description" : "Spring Core",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "632d2a8c30962a69273775968c052651"
        },
        {
          "alg" : "SHA-1",
          "content" : "d2bff2eedf27b51d6ef9a2fc892aaff5b7a768dd"
        },
        {
          "alg" : "SHA-256",
          "content" : "3a1ddcf05420a9181bd9cacb6062a3edc493e14d555961ad50e1a6360eb1e75f"
        },
        {
          "alg" : "SHA-512",
          "content" : "2629ed79a0a3cfe7e467ac1a10f6d0d93f8ebdf9fe79bf67d99e5797e4efdb6bb1fd54ef882676b2175beea14079ca5ac6d8218c94134a66bd544d83fc8dc2b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "a58090e8a07cc13429b116c1d786269f3b1a1b16a63ce4711648e8f4e5c0b076e970dae2ee1e08fd1cb01158161b1bb8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "43f84a96b238a4492e08dd79e4450ccaad4c4f3f8adb45f16632593de313cf88905546f892e29989d8553512006e7680"
        },
        {
          "alg" : "SHA3-256",
          "content" : "99cb56d841b5920987b296da3af76ae51d80f4f78b56da4b127e9187793461da"
        },
        {
          "alg" : "SHA3-512",
          "content" : "74b21906fe06a990b8f910032c735af31c78cbf322452aa43b8a9bba22ceedaa0e6ad51e1f006b9c075b79654e3298c086adc6a9036601f01b5e4eab6ae899db"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-core@5.3.39?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/spring-projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-beans@5.3.39?type=jar",
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-beans",
      "version" : "5.3.39",
      "description" : "Spring Beans",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c2f99040fb8b0bc98515c87b968227d3"
        },
        {
          "alg" : "SHA-1",
          "content" : "87770ce736cbd777c07866cbc8a06b879765e3c8"
        },
        {
          "alg" : "SHA-256",
          "content" : "b6697a5d8facb81aa75e5a46d959d4256da9ce3b40d33f3b5bbd42a8b1ed5722"
        },
        {
          "alg" : "SHA-512",
          "content" : "53321d3395e51b2d0b6948adff4cce81a7a712c89af92ce27ad98a44e34bfb4efa0e617b951c0468deb0baafa258eaf61507982a6774d3d832593d129c93f3ce"
        },
        {
          "alg" : "SHA-384",
          "content" : "a4791a32da2ac30322814781da25680f019ef36e179461e6aee54e6f771081f1c61c673542b9e881d190988ecd98b5f6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3456cce03968d9d9a730b52e79c67615640e4d740d173fed9ddf98760fd2af7d28704df6ff0aa9e2935c17ca3704385c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c229d89e276b29a0fdda42fac26d7a0e526a994be452cdfff22bb03a504bf9cc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "08d43059f6948f7cda0c6d344d09d8e035289e51f2ba824c19e4b3f0f0714af836e8feb163b578ccfe97a9cd744b42d8382b4ed3020ba367c032e5bc768226ad"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-beans@5.3.39?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/spring-projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.servlet/servlet-api@2.5?type=jar",
      "group" : "javax.servlet",
      "name" : "servlet-api",
      "version" : "2.5",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "69ca51af4e9a67a1027a7f95b52c3e8f"
        },
        {
          "alg" : "SHA-1",
          "content" : "5959582d97d8b61f4d154ca9e495aafd16726e34"
        },
        {
          "alg" : "SHA-256",
          "content" : "c658ea360a70faeeadb66fb3c90a702e4142a0ab7768f9ae9828678e0d9ad4dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "363ba5590436ab82067b7a2e14b481aeb2b12ca4048d7a1519a2e549b2d3c09ddf718ac64dc2be6c2fc24c51fdc9c8160261329403113369588ce27d87771db6"
        },
        {
          "alg" : "SHA-384",
          "content" : "1d8b8aa3ad4edb7611a43e4e5b0f9538aa70df1d6ecf09cb977f6fb963797850d4350778530f2082aac9bedf09a27824"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2c62a7bf3f321aaa2ccd80e9fa633eb36a672a208c79e117a91e9812e3abfd7df3934930191d109be65441deed2cbd20"
        },
        {
          "alg" : "SHA3-256",
          "content" : "319bcec5b7eb366f63655cdf3cbdaa385e160f61edf3cbd94938e53b59905995"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dd44fc227d6e790255376ef0473746725fa7703d38ae3805715910d1846f41ac789acdc2d2ba1ebde874f7ee32d906608966612c90c618872aed3fca8e28e952"
        }
      ],
      "purl" : "pkg:maven/javax.servlet/servlet-api@2.5?type=jar"
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.servlet",
      "name" : "jakarta.servlet-api",
      "version" : "5.0.0",
      "description" : "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b950da93e08cf6d5a2d73dc7a80f9403"
        },
        {
          "alg" : "SHA-1",
          "content" : "2e6b8ccde55522c879434ddec3714683ccae6867"
        },
        {
          "alg" : "SHA-256",
          "content" : "33d3a5bda82c7d2f1b898685faa954f1fc34f7b0ae5c2f6ccc6d051e8a10973b"
        },
        {
          "alg" : "SHA-512",
          "content" : "667578d33b939b606bc38322e5cd8d0be4eacedf86e13f34b6c7c9d8ec6ef719ac7b4d830eba2588a4ea5c924fe3772960e94a99642a039f1781421e7eacb1e6"
        },
        {
          "alg" : "SHA-384",
          "content" : "329e54722e5da97d1c8d049c4dd68b0d8e22f72b299c2dd4db7f1bd3b07de4cf891402904760dca4584e30193741b11b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4b41bfe405d59203409fe3a5a5d11f177eabe7cd0eb7994dfe1f907c67c93a766959f703dfee1ef9925d420d0dadf9a0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b73926ebe8f21e0d3f440f9e7f3a229fae7975b34afeaa5c42d4334cb1d86121"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a85b76f03626ad4d02779d812190fb4b44fddf132dda92c0c908a7eb182f202b0f02f54eea500d92b3a5667d5288e03269530b63c7f72504f424d3dbf5f8c48e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.servlet"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/servlet-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/servlet-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/servlet-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
      "group" : "org.yaml",
      "name" : "snakeyaml",
      "version" : "2.5",
      "description" : "YAML 1.1 parser and emitter for Java",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8d3b7581db5c7620db55183f33a4f2ad"
        },
        {
          "alg" : "SHA-1",
          "content" : "2d53ddec134280cb384c1e35d094e5f71c1f2316"
        },
        {
          "alg" : "SHA-256",
          "content" : "e6682acf1ace77508ef13649cbf4f8d09d2cf5457bdb61d25ffb6ac0233d78dd"
        },
        {
          "alg" : "SHA-512",
          "content" : "a69bea3ae0ed31b12d9fa23bf1cd3fb71bae88e231d9657f0291e3000ae17a1df50709e072134f9155158f488eba67a3f8daf879462499f07b07d9239e78933e"
        },
        {
          "alg" : "SHA-384",
          "content" : "2fa12e4330d6da0a693a13588c8cdeff562c1bd1dc32e043d402ca1fc72d87a30dcc7bb31f9b582df3fe018eb6c6a3bb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8c5037c75bb2f464829ba38126a4773c88951705effc2b14289f3bbdef05bb598f10e4d9603dcd1b58efd7cb68d996a2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3aa9329b0eab5185331e526a011c74b45b4c4a506214e6c3ec2d2038c51cc261"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f80ff702aee20a5150a11818985d659fffb1d5238e331aca2048524649e0270e5bca0186ce7caf04ecf85fd95c95c6b9d8ed1f362ed399fef624eb94b70dc6de"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml/src"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.20.1",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "49d7b7226df5ed4a036e48997a03d066"
        },
        {
          "alg" : "SHA-1",
          "content" : "9586a7fe0e1775de0e54237fa6a2c8455c93ac06"
        },
        {
          "alg" : "SHA-256",
          "content" : "34bbeb4526fff4f8565b12106bf85a6afcbae858966d489b54214ac46b2e26e8"
        },
        {
          "alg" : "SHA-512",
          "content" : "16906e9c2f1962649eb21de148f362fedf2ce903c7ca0e6d68a01d43dbe8402b70cc537c104f36bc40a2bed6601162e7c21663735582e25bff7e27852be1405d"
        },
        {
          "alg" : "SHA-384",
          "content" : "0591935cdfed1d65fa4a2820133ba129384f71921228ffe093f343d3ebf0b699762810d9208641726111015f0e35753b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "855ccd449944e7884f8088c8c5b224e6e2f63bcd3123502618b4f5ded025e5978143af8c5d31215276932bc3bb089472"
        },
        {
          "alg" : "SHA3-256",
          "content" : "53732171c9f2bdeaa40017a34683a00ac11e8a8c1bcefaed07eb91e629e20376"
        },
        {
          "alg" : "SHA3-512",
          "content" : "05017efae94bc3c83131aaaa7911f20e7c367502cd2cd05c6cedabc877b55724bcde2521ba1da15bf1c1c3ccb1a235124b39b2d4860142f2b89d4df197cf5c83"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.20",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b901def3c20752817f27130e4b8d6640"
        },
        {
          "alg" : "SHA-1",
          "content" : "6a5e7291ea3f2b590a7ce400adb7b3aea4d7e12c"
        },
        {
          "alg" : "SHA-256",
          "content" : "959a2ffb2d591436f51f183c6a521fc89347912f711bf0cae008cdf045d95319"
        },
        {
          "alg" : "SHA-512",
          "content" : "8926d89bfe7f427c7793f6af619249540f23f82eae055dd03d4cb163ff603a43dd6a3ebe43528d00789aed3df0dd2f10e08552fdec53e2691849b9769f57f0c9"
        },
        {
          "alg" : "SHA-384",
          "content" : "40ee4c1438a5a190624dff9deca83377f7e60690b4535359b2a79924f736bff7c8d077e5b01c6c8972735dc152f2ccf4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0fc0f697d03692b63c2b11fcabac51c630278ed6df15420975263ea4ad19418b3b71b7889497ed20a150035f9bcba79d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6bf49e384735969af020f758b255ceed26af92d4cf456f6e7b83e8de53289f93"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3372f6c456a7f6a33ebc3ecc65daaf36288be2a14b1f2cb9fcd7387c07acab1c69ae803a366e5d12adf4934970ffd2e34017917c5f16a6d563bc94810f228ab3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.20.1",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "889b2c417b61c9f4f460b06957147234"
        },
        {
          "alg" : "SHA-1",
          "content" : "5734323adfece72111769b0ae38a6cf803e3d178"
        },
        {
          "alg" : "SHA-256",
          "content" : "ffab4d957daa2796cf24cb66d0b78a7090f1bcbe17c3a4578f09affaaf137089"
        },
        {
          "alg" : "SHA-512",
          "content" : "0463e1c2e1d8e8cfa4954dfce491583f0ec9ec1de6e6f342d1e5f0c63dcfb959673552a279ec4e6b6cc69e6ac2de6d42dd512149ceb76620b5d780db7325e6a7"
        },
        {
          "alg" : "SHA-384",
          "content" : "a279b2d57d019a05f65762ce670ce23e02466b11276d8c0687f3bb5ed40a8a1854bfe6dd2dc157d0f5695186f7d9a65a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "06b9f33e030a99fa95d171118ab668bee42e32b35b85e05750f8514128dbadc94026afde16dbadc0ff786027b09712a4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3e83a1a349d8ba3a4e76ee983f04b259a85263dda5090f55aae5535109c4b6c0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "87b3a61a71a625adfc6b9b402079c26b223e19535ca5af07e4130932d479f9c22e90696911050d8ab8a09a6209651fe2f25f54d7d9a1493b6dab6f8acb76203d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.25.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-1.2-api",
      "version" : "2.25.2",
      "description" : "The Apache Log4j 1.x Compatibility API",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "710cfa5fa5de5ab637bc9cd18f82bd82"
        },
        {
          "alg" : "SHA-1",
          "content" : "d937f5ea23f027563332126b3c96f970ed9536bb"
        },
        {
          "alg" : "SHA-256",
          "content" : "cb8e6efed1a386bb2789bfe45388850dd86b6d6b5858913e8c3f25690beb3251"
        },
        {
          "alg" : "SHA-512",
          "content" : "118c1df53f09e406ab63168b6db3a52a770dcd859994ab035cc9b9b088d7927a62f6863de70452c81a4f59704297ec97855a6549667cb960d230d644abdb8e74"
        },
        {
          "alg" : "SHA-384",
          "content" : "135e2cbb74c9b4e2c29eb81029f9f3899c24d3497d2de7d15bc9a707432c3c19119c19ff0a10d8e7363c6a7b7857e89c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bc3f4f28143912aceece1f44af8db8f628c8095f90ec9f47732925c6f3a607f393d63d534564946b4c1be5e2314e39bb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b27d9310a33742a0ddc4b3d048171ef7b9e408b1327a3db9ecefcf764cf55e80"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7f30d985dbb16bc82113bef97f3ec2d1688b474f762ed67619ae6439a695d3f0574250d590a87a56cf16720a551651b704a776ce419a04c6912c3601a259cf20"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.25.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-api",
      "version" : "2.25.2",
      "description" : "The logging API of the Log4j project. Library and application code can log through this API. It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases. Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4ad7b5c23d86eab187e599a826fa9254"
        },
        {
          "alg" : "SHA-1",
          "content" : "292c1a2b1702f1e1e3adb13e1c57e5bff60335ff"
        },
        {
          "alg" : "SHA-256",
          "content" : "9fd66c9fe0bea06fa9666c147989a46cafaa92b4a88753697d3945cc43338cbb"
        },
        {
          "alg" : "SHA-512",
          "content" : "df1142813e3f64768695e5891a0eff499692cb8b3213f1d87ce9c14f06343252733ad14ff193a0934997f65f0ba1d8b58cbdaab13349c305781f58a937683afb"
        },
        {
          "alg" : "SHA-384",
          "content" : "93285534fbbfc249340b992d212b8ebe47d306532873710685447cbf282fadc3916a4e6cd6bd796f76b25bbd0a598397"
        },
        {
          "alg" : "SHA3-384",
          "content" : "80c1317ccfbdbd4a170bbdccea09e174d248955b4454859033b436c6c545a4d7bf9840e1bbc1dfcad2e903f5e8faeaf4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f47cd679d5b0348778190ddec81bd26925864e99c1ad27e6875ae0d5d7c709c3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c801e7ee9840ab18c1e5ad6be4c1fdaa3fdb63d8f474f09bcb173a4d9dbe8f97c778990dd979703c29ca60ce068e7f251ba64fec0efc52c9d4fca9c630138c6f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-core",
      "version" : "2.25.2",
      "description" : "A versatile, industrial-grade, and reference implementation of the Log4j API. It bundles a rich set of components to assist various use cases: Appenders targeting files, network sockets, databases, SMTP servers; Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted outputs; Filters that can be configured using log event rates, regular expressions, scripts, time, etc. It contains several extension points to introduce custom components, if needed.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e8e63b9bfc776fdf80d90567884932d5"
        },
        {
          "alg" : "SHA-1",
          "content" : "d4d0ad2e51e03e531f784891fbfff1bae1e13a12"
        },
        {
          "alg" : "SHA-256",
          "content" : "e50db7701430ff907981850ef527a41d51a53dd0017f53a0860afcbab8570277"
        },
        {
          "alg" : "SHA-512",
          "content" : "9923dafcec7d8015b2656ae1881aef7b448656b08f235371208c8e10aaf5d6220b7251f7880262ef03883783e8b0fce120a55fe380bc673ac35d34fb8100b24d"
        },
        {
          "alg" : "SHA-384",
          "content" : "4e71fb7fc4987214b3efc8cf0e260295f311352cc6e0f6eb0440d6ac050662757d8e86e32cad6d71fa7b9d96f352faeb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9c4a711634f6403cdca253b5ab2fe44bd8bc075bfda10437c990535be4c2f953222937121121fdaaa7727582e76f1671"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c2f22fbd0de0813b01e7ec6d49e5f706a2d206fb6152d9a03cb5755b84a26dea"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a4757250db8caa4c105cd0f5e8abd469627f44586873bc93d1e61d33cffc4dcf85f8cafd1fc35c008422c081334499f8471c025afbbb5e76b39d7578cbb78337"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.commons/commons-configuration2@2.13.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.3.5?type=jar",
        "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-jexl@2.1.1?type=jar",
        "pkg:maven/org.apache.commons/commons-vfs2@2.10.0?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar",
        "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
        "pkg:maven/commons-jxpath/commons-jxpath@1.4.0?type=jar",
        "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
        "pkg:maven/org.springframework/spring-core@5.3.39?type=jar",
        "pkg:maven/org.springframework/spring-beans@5.3.39?type=jar",
        "pkg:maven/javax.servlet/servlet-api@2.5?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.25.2?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.3.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.3.5?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-jexl@2.1.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.3.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-vfs2@2.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.3.5?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.21.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-jxpath/commons-jxpath@1.4.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-core@5.3.39?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-beans@5.3.39?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-core@5.3.39?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.servlet/servlet-api@2.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.25.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.2?type=jar"
      ]
    }
  ]
}