{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:9c4f6402-6743-30d1-9ed8-5540146ed9e0",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.plugins/maven-pmd-plugin@3.28.0?type=maven-plugin",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.plugins",
      "name" : "maven-pmd-plugin",
      "version" : "3.28.0",
      "description" : "A Maven plugin for the PMD toolkit, that produces a report on both code rule violations and detected copy and paste fragments, as well as being able to fail the build based on these metrics.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.plugins/maven-pmd-plugin@3.28.0?type=maven-plugin",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/plugins/maven-pmd-plugin/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-pmd-plugin/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven-pmd-plugin/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-pmd-plugin/tree/maven-pmd-plugin-3.28.0"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeAggregateBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-core@3.9.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-core",
      "version" : "3.9.11",
      "description" : "Maven Core classes.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4e79c3556f3f0572dff321c5bff15b52"
        },
        {
          "alg" : "SHA-1",
          "content" : "29b528ed14c6db703128259b934289077860e4dd"
        },
        {
          "alg" : "SHA-256",
          "content" : "93d3c0523dda6c86c6620d9e692e7df39d0e2e4e4cd860061a8c0d274c2ad185"
        },
        {
          "alg" : "SHA-512",
          "content" : "2235d8c430d8ab026486c023cabf0966cc7bb955b72d9ea8aaf8940bd73de85c1ae6b90ae97596a0e6bb0a7f6df953b86fc348f07a87eccd5088a9a805d4f19a"
        },
        {
          "alg" : "SHA-384",
          "content" : "b7d53f27510dcfe14ea917bb3e3e862d17c2631068385b7896c0d37a4ef33702299032e28a396b4c47def5097451a622"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e2be576e42e32c25c1efa53af2df54d7825ab3011f4b2067559b338c6f0ad84e43b8378828afbbea7df626f47a982888"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d93a83a43677280f969eff4837a5d3870b175ebe6efe5bdc1917c3051c56cfed"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3593213e8e225c312f309c89b2de1a5cacd3718577ffc921071fa0bdbbc746a97c8705c5373828adf33fa59d7a83c79d446b199f1fa723f53c4d210924cc95e8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-core@3.9.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.11/maven-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.11/maven-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings@3.9.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings",
      "version" : "3.9.11",
      "description" : "Maven Settings model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53ea6493ba04a86f97ea989ae1c4fccd"
        },
        {
          "alg" : "SHA-1",
          "content" : "c71e6b5c76e39eb36baa8026152e588d155e4038"
        },
        {
          "alg" : "SHA-256",
          "content" : "026718d47d19e360d978857bc63d3dc065884fc2c801563d8a2a77b5ab74ccf8"
        },
        {
          "alg" : "SHA-512",
          "content" : "0d5030668fe79d3de23fd780dc65c5b33cc04b393dda39c3019d2f6f4aa76435f3374aed6f64e4994c3a172ec209dfdec122750f0b26061765db170ef68c27d6"
        },
        {
          "alg" : "SHA-384",
          "content" : "cfdadfdc1f96d17e1fcc3e659f9d0a1c3323eb014795c30c410fa931c121481d9700357c8dadb1f52f7d44e89e857dcc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "77967692037907d32115d94f6c41cd10a1358f34430c36720bdfb995baa0fee2de3a209b3c7b468ecd859ae15b898e51"
        },
        {
          "alg" : "SHA3-256",
          "content" : "677a5f2d7bba909b831443810c1de3709e53182ca812d680da55f126fa731a3c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "52ca3564306be97fecddb98f61e32d116fe97249d882c0e86656007e316474f19433a31ad049a52d40478235524ea91174bbf38a52259d00affd481ce0f4d358"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings@3.9.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.11/maven-settings/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.11/maven-settings"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.9.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings-builder",
      "version" : "3.9.11",
      "description" : "The effective settings builder, with inheritance and password decryption.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f634138dd9c1c58d01566dd3429ad9be"
        },
        {
          "alg" : "SHA-1",
          "content" : "2091728ad00432b1a8c6d19e2d68cde44866243e"
        },
        {
          "alg" : "SHA-256",
          "content" : "33c96e4ca5a15b7c93180f6b2f8deb15f511dfc15dda0d2b671c968b22108972"
        },
        {
          "alg" : "SHA-512",
          "content" : "eadb55b9bcf18bb78e0558ef65248d90a79e09577ae8d9636e5187371fc8c2015a9eebfcfe078c686d1da046076fd9d78d0d601d5631b581dde298e45dd41e11"
        },
        {
          "alg" : "SHA-384",
          "content" : "33d6c7f3f7730f630daf150a716739ee8b91b54dc2d84a668113b3c78f31b2517aa2b5da2810dbb9f694a2952f5d1fdb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2a9468ce4806d66bb793e795050697bc377c2157d4ec107723a9111d5ef7fc8c67bccf82f6400d5941d2dbe5257fba36"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8132e5cc839d75c36b43ecfb9f35ea68ac47348de1e049063a9bc2ada178a001"
        },
        {
          "alg" : "SHA3-512",
          "content" : "18fe88299191a7f2b19d5b207089b8ffa348f5526967b772f6fd45eb1890dd31f3d2b5873a412005ff134928aac6645b700e1535ad808b85489f08bb136069f9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings-builder@3.9.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.11/maven-settings-builder/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.11/maven-settings-builder"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-builder-support@3.9.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-builder-support",
      "version" : "3.9.11",
      "description" : "Support for descriptor builders (model, setting, toolchains)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f93831a3da7b176596dba6e138684669"
        },
        {
          "alg" : "SHA-1",
          "content" : "9abad6df5766e23e2f2772e842894c0347bffa4c"
        },
        {
          "alg" : "SHA-256",
          "content" : "5b1de1560ec19c4c69a655f986455888f3a0bcc3c160cac1f1edb87de3825f77"
        },
        {
          "alg" : "SHA-512",
          "content" : "783ff3dd9d4002d64b4b868891bc6042d0d7ee8e981210462a2b2e7828bc781578a3d5954e2c726790b946ec698216e75b54d2d27048d211a800ea9ac77c7b1e"
        },
        {
          "alg" : "SHA-384",
          "content" : "eda90a10944116f4f5d2a8b1c44271692a1d2cee22ecd835b7a2d3efa613b31a4402903b3b998ad4c9c29c0d4c658c62"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a7817e27bbe30d72ab950dccc79961721c3c010dbede6c78414fc3af282662bee621e0abffa8ef7044794982a378dc1f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "85d6c50c7470dbb2b2c4031bb18a2a162c92c95ee4bba20fb5f86016ceae2653"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7389c9dd5aa4362daf2e18f2775a9de02be7928f37882ae86b09455de18773954130fc9098102c05f327d126836f772db7ff87dce0b4f5729e4b661eb3cce925"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-builder-support@3.9.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.11/maven-builder-support/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.11/maven-builder-support"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-repository-metadata",
      "version" : "3.9.11",
      "description" : "Per-directory local and remote repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6bc356bd0c967c7e7afe7902b79e7036"
        },
        {
          "alg" : "SHA-1",
          "content" : "f4e4f6ff0c06e04a4a52f88d6068528f34b49567"
        },
        {
          "alg" : "SHA-256",
          "content" : "f8655f5f0060e0032944f2a23688d186e140d2184749bcfa1927f83cd6a8b1a2"
        },
        {
          "alg" : "SHA-512",
          "content" : "c0b4b4073e3f866aaa7326b96c25753f79401f8ec4639818fa45fdad545e57245f3115c3492a35858c236e885ecedc84af918c9fd203743e92e32c01e646a22c"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca74cc5f2b68209649df453fa52e0811bfb32eedd65867b7d4fe2decc175bbfb1f2a581bdc0b5c160c5b132e5360af63"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4e5631c747bb1764999f0c8b74a69f51db5f57da3ccdbb0f69204c002c8818c9ef59e4fa3e9fff3b61adce9d9db4a72d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4fd50ebc99935caefcfd8396f70cf37c1fdf954490afc39a0c22eb3007beb3ce"
        },
        {
          "alg" : "SHA3-512",
          "content" : "55ab487034c8ec18ee69037813ca907af3d05118bd3271eb86d74faadfd132d75612db74278544d6f24091490b500e356f71ea81081eee386044ee316697d8d1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.11/maven-repository-metadata/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.11/maven-repository-metadata"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.9.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model-builder",
      "version" : "3.9.11",
      "description" : "The effective model builder, with inheritance, profile activation, interpolation, ...",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "61c078dfba2b162d91378b31093c42dc"
        },
        {
          "alg" : "SHA-1",
          "content" : "0bcc9199f09dbe79871eb160e62bf44d51962587"
        },
        {
          "alg" : "SHA-256",
          "content" : "c4c72accdcd848332c1a37995610a6a369d49fdaabc43e85f0022a5b77de3ba7"
        },
        {
          "alg" : "SHA-512",
          "content" : "eae2499118d1ac45da5965d0a37d9c18f9102012bbe55ba7e5b9b1c9ccdd1a254a1942104a8a06319c770ede84c5b5ca841d72d8d731d23d0ec2da36fd80eb22"
        },
        {
          "alg" : "SHA-384",
          "content" : "b45d6e770d1823ecadbfcad7351e2dd9a74443bce690e52ca3d964a59fd78740a180731ad095daa053311671a27ad811"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6387a03f7f430350b91b2b1c9c4d8abba41bb0c663cde8c80b33b35a27e0be12eeed6e2b0e53ec286236a54a51babf9f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0994930e90565c7c4a8df7daac053611c97853cd5bebe9e48de6fe76bb2bb9dc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "663a90a92cc775745e93217d6e4264f3ad0ac80e1c0b8ecf0dd741231d0dbcf05a0e46847595284971f2819ea7f320467240681910e01366cc5c5a3eb8e2e934"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model-builder@3.9.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.11/maven-model-builder/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.11/maven-model-builder"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-resolver-provider",
      "version" : "3.9.11",
      "description" : "Extensions to Maven Resolver for utilizing Maven POM and repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9e16d76c7545e03541fa5b2977cc6fb9"
        },
        {
          "alg" : "SHA-1",
          "content" : "184085bea004f388362de963b23a8d3d791ab91e"
        },
        {
          "alg" : "SHA-256",
          "content" : "b5d6e52ae1ecf1cb62ede2234234ba3093149524066488e84415187ce478c582"
        },
        {
          "alg" : "SHA-512",
          "content" : "c8154c7c53fad86fb8d463f116a08a252a22a642518ad12c1cb3aa27d4dc37653cc2016b32048db08e9c604cafd479e089d269b69240d35afffc492da6d5c4e6"
        },
        {
          "alg" : "SHA-384",
          "content" : "7366e2c12d3e2ddd86cf222718bc732213cd3f9538499aad9476bcc7c417ccf1244c2de7983d445d1498352a70867861"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8b77415c21014a4a45c806da427158913190a2e1c1f321caa1c7726cf90c6cd2d3bfc6a01251e47a4f3ed48e08c38980"
        },
        {
          "alg" : "SHA3-256",
          "content" : "81d2809070bcb7c4f50bdfa5ffbeb99231055ee310ea890b0e5e92ae97527a58"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dfd835403a318b6f0c990084544e6bfbd53c7b4c4a60f44e89d8f60ccd597f204485f21eafa5e519db359e389114c7c49b1cf817a6ac9ac1a41735d30af765fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.11/maven-resolver-provider/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.11/maven-resolver-provider"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.24?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-spi",
      "version" : "1.9.24",
      "description" : "The service provider interface for repository system implementations and repository connectors.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d5d87812f5fb5c72ff82540d6b9bf0c3"
        },
        {
          "alg" : "SHA-1",
          "content" : "35eb0e6105f385e017da86eadb52132dc63978c4"
        },
        {
          "alg" : "SHA-256",
          "content" : "e3153906e93333c106ee18babb72ba7984ccb15e9116ea08f88c71b8d9387e01"
        },
        {
          "alg" : "SHA-512",
          "content" : "cc75615634fc5ec9c51d0edbc09ff166d98c3bae8a49a29c0c334be448da1e7d65ed2f6a460f4d5a40a1f5379a0c3e229b9ef522de5f944a567086a6b7a4f518"
        },
        {
          "alg" : "SHA-384",
          "content" : "0b89e15c521323fc87ecd927a2d22228a0eac9be5d656ce1408855cb1878e9633b4e75e0ad444abcb337346a9dd1c6b6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d1082e4f394638f8a96a866713c35c079e51332bde41788ed0df9a5d6ccb1ccd2a351e07dd777e58fc86dcfabd25b1cf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4b7265ca0bbbdcb1808c5c2f70589c0ff4a5eccff57c7d1452f0527af4073180"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6ddb0c47459a08c11514a2719a6c491ce044743c82af954635e7db7f2577cbd172c4f27c54070620f3a580fb94cd67ebb52812d06797f5d414408d6262588cb6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.24?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-spi/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven-resolver/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.24/maven-resolver-spi"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.24?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-util",
      "version" : "1.9.24",
      "description" : "A collection of utility classes to ease usage of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "18c857d91507fe2619e458299b336db5"
        },
        {
          "alg" : "SHA-1",
          "content" : "a7d13ceb737d63aef27035ad2119471e5cfd23b2"
        },
        {
          "alg" : "SHA-256",
          "content" : "aeb7e776a8c47b1c317a2581f299e2525b044cb8abde31164e970bbbefab12b1"
        },
        {
          "alg" : "SHA-512",
          "content" : "56fd921d26b581d91b5718ab4764bf515d7f0b2b946bfc96a4d7953447d3fec125551d802933c1d852daba5e21e11ff3aa079064f718bc970e2629e253793ce5"
        },
        {
          "alg" : "SHA-384",
          "content" : "d1342872f24a447e2c6d08552da6cb0c53680e2fed3cd26782ffc535e3738d8b71cfe8d308c5a1eaf64f86aa0b0b5cd7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "28244ca3822a4d2c198aa2cdd6647dc771d1da3d34c4a9bd3737e5f3cedd684df06d9bd7935baf3486e6767f4d0ae843"
        },
        {
          "alg" : "SHA3-256",
          "content" : "dd03e858c683b551ab6eec438d9e425415759f656c2c748ca23c643b2a757988"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6a8642b257146185e51e9e0809cbe9aebfd4db4bf245e106fef07f6c104d996778b73ed435328eb1d9f7866fedc25683e881041b0b2e4b74587fad487b603b05"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.24?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-util/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven-resolver/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.24/maven-resolver-util"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-shared-utils",
      "version" : "3.4.2",
      "description" : "Shared utilities for use by Maven core and plugins",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53a038f77a81cb5816ad2b1c7daa8711"
        },
        {
          "alg" : "SHA-1",
          "content" : "bfa28296272a5915b08de9f11f34a94b0a818fd0"
        },
        {
          "alg" : "SHA-256",
          "content" : "b613357e1bad4dfc1dead801691c9460f9585fe7c6b466bc25186212d7d18487"
        },
        {
          "alg" : "SHA-512",
          "content" : "71db8a485a6436cb305276ea9d748f578e1a8ffa1346c8570f7038684ce53d320584174634aeffa1b51629af0171a2d6572854eb07236a83236ad1d9949988e9"
        },
        {
          "alg" : "SHA-384",
          "content" : "8f7e2c449282244fea3151ac0c956b42bb7ae6cb2397ca8b18952aea802d33cccad6e08a5f515fc34e52bacfece18862"
        },
        {
          "alg" : "SHA3-384",
          "content" : "72ec6c2c5de8cd074bd59dbb8215005bedc9de58795484ec2792fa867eaf13547aaca81daaf06f1ec117d29b21e70cd0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5cf6de29555bde0317d641e8a7afd7d1ed84dddff92c80f8493b4a2873d26c41"
        },
        {
          "alg" : "SHA3-512",
          "content" : "836acb2525ddc3b352da7db824e00c0831b25f46cb32a77c1e578b39978621e3c47da3554a901749af15b3981620875a4c4492f421a1833d8eb8e50c4804eff8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-shared-utils/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.4.2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar",
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.inject",
      "version" : "0.9.0.M4",
      "description" : "JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ee95c1a11ba4ca38368d71ef05676cfc"
        },
        {
          "alg" : "SHA-1",
          "content" : "a062d8e12dc62e698c9f943a3fce94e366b4e220"
        },
        {
          "alg" : "SHA-256",
          "content" : "1cbd7a965a5e2a9ea823bab311962a4e5aa5c240705bdbad5a52b40ffdfa1004"
        },
        {
          "alg" : "SHA-512",
          "content" : "e0ff555c09ec22c637320e1d4ed654d8eae39bf051ce544987253eeb608f9913e332c9a8bf56d189845424a30301ce92cf1c363d8b6b5ccfc7eedaf8ab0474bd"
        },
        {
          "alg" : "SHA-384",
          "content" : "695c7c852c924334c1d857ddfb28277fb5108a54effaa30702fad0c6afe9070387b038f3bac941d7837fd6f48958d265"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b70ad32b2530a88af5d051cd46657e91550999243d40baa60a388c583dea08bc05f5d52506b2fac917b37ca714084ac5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "45098e8e22b3d76bc0d7c4ddc4f49553023cc472be9285be29455863d0ddd23f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3da31b3f27553350cf3acf3c55b95a94f9c1b9d88ef99004435caf5f21f1848496411f7b32713f7b9afd26eee9c8e551032e35c98b84d0274095ae4820208029"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/sisu/org.eclipse.sisu.inject/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/eclipse-sisu/sisu-project/actions/workflows/build.yml?query=branch%3Amain"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repo.maven.apache.org/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-sisu/sisu-project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/sisu-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-sisu/sisu-project/tree/main/org.eclipse.sisu.inject"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.8?type=jar",
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm",
      "version" : "9.8",
      "description" : "ASM, a very small and fast Java bytecode manipulation framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f5adf3bfc54fb3d2cd8e3a1f275084bc"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc19ecb3f7889b7860697215cae99c0f9b6f6b4b"
        },
        {
          "alg" : "SHA-256",
          "content" : "876eab6a83daecad5ca67eb9fcabb063c97b5aeb8cf1fca7a989ecde17522051"
        },
        {
          "alg" : "SHA-512",
          "content" : "cbd250b9c698a48a835e655f5f5262952cc6dd1a434ec0bc3429a9de41f2ce08fcd3c4f569daa7d50321ca6ad1d32e131e4199aa4fe54bce9e9691b37e45060e"
        },
        {
          "alg" : "SHA-384",
          "content" : "b4ad6e6c1afe432ce8a60367c743107cfc9d1d2f1f1c6b7be4b6ba625cca862cc7ffff404566086bce4b6650556df953"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f51a3b7cee5543672cc2a4d71dda7aa992fb900cb68b79908efbd1efcc3e731f4ab8e2c1099e7b905f4aea6350489e08"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3c66be179e6b4881b1901a6a8c6fc980d773d1faa6edb54ed878e5985615a831"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ccbf812616e5997ba7cf59704cf78e360650d773ac53581243da6c47fe884560db5ec48f8f4b71ccd4b8c2b332619c19aea053458d14abe443fcdd4fa313d5dc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm@9.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.ow2.io/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject/guice@5.1.0?classifier=classes&type=jar",
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject",
      "name" : "guice",
      "version" : "5.1.0",
      "description" : "Guice is a lightweight dependency injection framework for Java 6 and above",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d4d4d9bf878b98862116e8ccc0a5c34e"
        },
        {
          "alg" : "SHA-1",
          "content" : "e7ba4c25bec3761840f67c73f166c0d509d01d1d"
        },
        {
          "alg" : "SHA-256",
          "content" : "142ad4475e19524d2fe3ac995b3f7cbc962fc726f2edb9dbdccc61feab9b2bf9"
        },
        {
          "alg" : "SHA-512",
          "content" : "5b566b015aa3c8c094a0d81a30b3c9b4ff546aafca416bcc8e70a205ba148c61086cb4c168d4fe158b3d0403ce35ef46c38b04b4d977c94a510b5c6687808208"
        },
        {
          "alg" : "SHA-384",
          "content" : "1895658fb540cb79d18e86f42eeb1593d5005211caceca113af6b6b8aa8c1f0bf073120e68f75de791cfbae5187d3dad"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f2d3d9c98e935083679090cef1667cc517bce9e4b81490707018ba4ea5e82ec5fcbca96c28540b072f019238c4e5e56b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9a9455ba9b5d2f8238a615dd2ced011481dd7d70a0411988118fcd7efa38c57a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "02b23871c27d0ab87d6f5aacf06d76bbf561cea49144d2cd54b0ba3bf75b005f64b7cdaba939de0f323e795dffd10e799c161b9c5ea56252ae108c4f2a61c539"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject/guice@5.1.0?classifier=classes&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guice/guice"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guice"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guice/guice"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "group" : "aopalliance",
      "name" : "aopalliance",
      "version" : "1.0",
      "description" : "AOP Alliance",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04177054e180d09e3998808efa0401c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aopalliance.sourceforge.net"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@33.4.8-jre?type=jar",
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "33.4.8-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "72920caab34426c5815e3b00f80e3b01"
        },
        {
          "alg" : "SHA-1",
          "content" : "e70a3268e6cd3e7d458aa15787ce6811c34e96ae"
        },
        {
          "alg" : "SHA-256",
          "content" : "f3d7f57f67fd622f4d468dfdd692b3a5e3909246c28017ac3263405f0fe617ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "82c43d82fee2b3264e53cd2e9451865f9467ec0baa68d0ddfffa06a1e5465872913150ef96e99ea91daec4387248d832ec9398859f2fa5f08f65caf103306ba3"
        },
        {
          "alg" : "SHA-384",
          "content" : "6645343c3c7a989539d8e77a53b0b848bc1cd739a405353aa6c00b3e4e6c58a93770c988e53d4c0326ed7ea608eb5820"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cc6d1a11626c5ba5fdec819fdc4c0e97afa3e946744dbf9dae10f9ad77f6570703356e301a686c7727b80095d3ec4bea"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b09ae5778552402e8e5780adbee939191ea149cbf0faf2f9c15a818167730df0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "de052d07cf9a308fe4c1a0743534cf8b651fbd6e5f570b0c1a3d9a3269669fbae164bbbfcd089a52729b3a1d8917fbb73c1dac65cb61f93fc200568f32d09a27"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@33.4.8-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "group" : "org.jspecify",
      "name" : "jspecify",
      "version" : "1.0.0",
      "description" : "An artifact of well-named and well-specified annotations to power static analysis checks",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9133aba420d0ca3b001dbb6ae9992cf6"
        },
        {
          "alg" : "SHA-1",
          "content" : "7425a601c1c7ec76645a78d22b8c6a627edee507"
        },
        {
          "alg" : "SHA-256",
          "content" : "1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab"
        },
        {
          "alg" : "SHA-512",
          "content" : "efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc"
        },
        {
          "alg" : "SHA-384",
          "content" : "814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71"
        },
        {
          "alg" : "SHA3-512",
          "content" : "65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jspecify.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jspecify/jspecify/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.3",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "29a782e90f6b37218b18bb880d2a8f4a"
        },
        {
          "alg" : "SHA-1",
          "content" : "aeaffd00d57023a2c947393ed251f0354f0985fc"
        },
        {
          "alg" : "SHA-256",
          "content" : "cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb"
        },
        {
          "alg" : "SHA-512",
          "content" : "72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf"
        },
        {
          "alg" : "SHA-384",
          "content" : "9dd1a2a08efda311604992d3e7cee64873bc8c64de3b423b1b3a3dcc1f7f0810bb03901fbfe39a5f835accb0646f4ad8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ffd67766c165ee77e96824e06de2c19864a6e61f785b2085eb825f308f173d71f2555559d90d910f33f3367378ace0e3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "08a77b528a72ca412b36e4004692705ebfd75cfb4897c88632d367d08a34b09f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7cba6c266babbe8272f029eea6e2cbddadee96eb1a16916a6eb2441a55837867ce717385d4388735fd83f2f6555931077c0ebda011a1ee9a37ac38c8c0c43a65"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-classworlds",
      "version" : "2.9.0",
      "description" : "A class loader framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "64e4ee5a1298f866d00f705e02058200"
        },
        {
          "alg" : "SHA-1",
          "content" : "ace0820f34de49f69511f5263bcebb09fac9731a"
        },
        {
          "alg" : "SHA-256",
          "content" : "1ad3292cd563381e3fd632f3fded1988f9e9b2be7a9f3db63ff4c4cedba13fa5"
        },
        {
          "alg" : "SHA-512",
          "content" : "a99e92782658ed20e1d01b0ae426882d481a4ba91de3f6c058a24aa54ebded654f4b16dc26adccafd61f27ce22329a1ae1db935c4b49ee31734bcb775e6c7fd7"
        },
        {
          "alg" : "SHA-384",
          "content" : "6f790e5bd8bbb3efcd45507c827f14a552e729a3f04eff1208642a91e36e4c9b62b34d6b1efc1102f2f063b0e31f9b74"
        },
        {
          "alg" : "SHA3-384",
          "content" : "58f1e4bb64c7200cc4fde92bd48e499931dc561e07980fdf770fbf0913c2c070d778dc7dac0f947198038247c0d70128"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5ba1a6cb4b44510a193e765e1130edf3e5e0b09405b99aaee4ed0970d46bca70"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f2723468e861e0d3201bdd63c250a06d852092be67817cd117cf7ddab599e6bc806d8e303b9291a070e87d748676ce113682718b83dfd86767f896422bb1734c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-classworlds/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-classworlds/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-classworlds/tree/plexus-classworlds-2.9.0/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-interpolation",
      "version" : "1.28",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "68fd3527539ddb2a42e2e776ad8240b7"
        },
        {
          "alg" : "SHA-1",
          "content" : "90d3608cd99f21717a581f036a1c69ff762f5ed6"
        },
        {
          "alg" : "SHA-256",
          "content" : "ab2a8715570438a2e4164d85ad3e8d489eabc38ea5093c2eb8ab7f58403535b5"
        },
        {
          "alg" : "SHA-512",
          "content" : "3684e8d20c9bd83082b053a69129e6b7192d78a14f17a02942236fcb254425b36b0eb6b31f78c86f06d6f83f50b77bc1767cc3c46ced172db801ecb9750b6502"
        },
        {
          "alg" : "SHA-384",
          "content" : "e35cdc38959f787d38c65de38702c9f58ffd23dc29aaf713114a28ffce595a31ea2c28abeb233c59f7b55705b6b90b88"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9bc157f46aab17f546dcc575c179de0914037f935afc73ec4eb20272db355623cd6738c0fc5e70664b6cb3ffddd204a8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "886e82c9884b4d08a163e0f75d2a91355f6ee825e972cc811857373124bcc4e0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3b35d7c1af3bca14c827048d81ab71ff8a1a2e4a40dc4f901b650a5996f5324d8e68ce497bb7a14d69ed23e3d5ced4e2526afd6180a55b9b949297fb0db8a53d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-pom/plexus-interpolation/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-interpolation/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-interpolation/tree/plexus-interpolation-1.28/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-component-annotations",
      "version" : "2.2.0",
      "description" : "Plexus Component Java Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a2397189a5ce25e7d2d44effa9f5176c"
        },
        {
          "alg" : "SHA-1",
          "content" : "a506f84636ea7ae370d04167dd155c103e616f68"
        },
        {
          "alg" : "SHA-256",
          "content" : "50edb93c73786e62822b4fe1336e22880fdf147191373cf5c911370e16748fcf"
        },
        {
          "alg" : "SHA-512",
          "content" : "33595f37df5b5f11a863082e2ef90d871f52bc6c83fb593b0747a4c7eb91c3b5ab9bfe804a54b7d82ee6f289e2d47c443c8dafe4159d07b6c80394a5666db2f6"
        },
        {
          "alg" : "SHA-384",
          "content" : "4850c234dfc3c37bc7f50b8ad5f86abc42927e0135582461a0d2d8cd0649ed304352cd0e91ccd006c55c6d06f7940104"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2aabf9ba2fedcfd79345316c2b8f7b9abfe5519f3f5e1d2bc45187febf5bcab84ad8c505f7e99857dcee2c2cd7d2b0de"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2a20286e40c517a66525f26a6ef13becfb6eec3ba792d9708e14896d288ae9df"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bd372902e65123fcc0ac13721868e604bb54fdb52a7e0de412c46aca9aa5ca7f1a9c59cdc9f2bb7016a5cdaa0e8f43a8cf0ef2250ccd0b291bcc4468e5f4a4b5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-containers/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-containers/tree/plexus-containers-2.2.0/plexus-component-annotations/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-artifact@3.9.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-artifact",
      "version" : "3.9.11",
      "description" : "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a4f0e4baaf853053f701ff0924de6358"
        },
        {
          "alg" : "SHA-1",
          "content" : "b0f6b246f5626936ecae7531d0a3deb76789bab9"
        },
        {
          "alg" : "SHA-256",
          "content" : "0bfd1c121f907642344311d81e4dfd93eba6c24dc712cc0aeae273eb22833022"
        },
        {
          "alg" : "SHA-512",
          "content" : "0b3f85b4ec82df89d950355af567538649759bcf1722aa3fc056f543e0ab8033af89c32f6b737dc4ca2f6d5437153dd35479b95fcbad18c4c7d2b39200d431f1"
        },
        {
          "alg" : "SHA-384",
          "content" : "0835ea2d8d85875b064fe6f55d1b6418bb585a145e7bdbb6b19505b97ddefd2a56a9565a390d50e785a69766e262c001"
        },
        {
          "alg" : "SHA3-384",
          "content" : "430ce90fd5278476d23e43c935424abb655258ed4341c1a2e213f37f709a7e464ad1212ea7878a5e49b076cfff10a28c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "42e9d8b7a8a5255cf84a647b046e129e4b3296d1821254b265ef724e687fd793"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e142839c205baf8a17048f8b9dc17ba8e9cbe517e27b97ceb0f1c04188d5024258011d75272bff1098515375e0444b44422448a10756cf8692e33186275e2a3a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-artifact@3.9.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.11/maven-artifact/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.11/maven-artifact"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model@3.9.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model",
      "version" : "3.9.11",
      "description" : "Model for Maven POM (Project Object Model)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "34391ac48570063189c15f912b30fc3c"
        },
        {
          "alg" : "SHA-1",
          "content" : "067ea52736eaf94e26be0635e6084d7dd04d5700"
        },
        {
          "alg" : "SHA-256",
          "content" : "163aa596f976264384efeb50b4cb8a806086fd64a9b755ad1f69195fed3998ad"
        },
        {
          "alg" : "SHA-512",
          "content" : "922b7160f06984991b8339e268cbcfee98d3db1399dc4378160c74d3fe039b07a77be0bcd776d1a9bb5ea89c80dbc2864ec8e453f6248e12731f0166908a0cc2"
        },
        {
          "alg" : "SHA-384",
          "content" : "fbfe40d22058fceeff5bea78cfad453812a85c0c85896a9a26055ec8aecba2e498ccdd90fccf1f62dbbaa06042997b41"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c62f7ec6ec4667d5493112ab2d8ced80bbf3679a8a8d7b4bc232bd63bc0d51eb5d5947708a70ab5ab04620cab84b2f30"
        },
        {
          "alg" : "SHA3-256",
          "content" : "134ab2df48ccb295338a50e3d1ff6801b53aca228702e73df0b1cc3025a5991e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9d820bbce535724ba94e02d84d4d8920f5d0c552bb1d44481c35becb8602325df5b1779fea4e1b82d56fc5515f5bceb7b86b81b3d2882b1554045bfac46d9045"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model@3.9.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.11/maven-model/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.11/maven-model"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.9.11?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-plugin-api",
      "version" : "3.9.11",
      "description" : "The API for plugins - Mojos - development.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9ca7de6288d7d7b5d3e98dbf089ac8d3"
        },
        {
          "alg" : "SHA-1",
          "content" : "fbe89a71892cc54bf7a3de8db442a025911704bb"
        },
        {
          "alg" : "SHA-256",
          "content" : "8e985a56412564cf687040efed8bcd3a63eac2202a824bb01e1d5ece2b87458f"
        },
        {
          "alg" : "SHA-512",
          "content" : "18e32c19a1e55500f3f3d6117068508619b44dbbd481fc820eba2080cc8b9e02e4240648a20fbfee7dbada38624d70a4402758e07b325389f6c638fdd7bc2d7f"
        },
        {
          "alg" : "SHA-384",
          "content" : "c5e42c3d8e9a462d122b8a0d07a6e17a26ef34253ea1716793d866e0b739ed748110265742a11487260b7dd14d264abb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f0b55ca1ab5c0e12026d5d9d05e95573d339740a9bac763e37e9ed0849d26dc01d6c82d748e2a4f860b94d19877523f4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c95b166743647dcbf855df241779dc71e411055fb2dfa7ac856ef32ae88c8247"
        },
        {
          "alg" : "SHA3-512",
          "content" : "96e10515a7a0fe58b93d7e37005617a8d8b2ff471ab3bd6ad453e1d00d744bd9d67a78fd3bd0f910d0345ffec748fb496deb119506db943ef319d967c0e9c084"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-plugin-api@3.9.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.11/maven-plugin-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.11/maven-plugin-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.plugin-tools",
      "name" : "maven-plugin-annotations",
      "version" : "3.15.1",
      "description" : "Java annotations to use in Mojos",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0723da1364961f527fbfce10c8b9c7dd"
        },
        {
          "alg" : "SHA-1",
          "content" : "ca287d08819d5d87f3a06b8f065a79eb33c3ecc3"
        },
        {
          "alg" : "SHA-256",
          "content" : "b58bcb3a1f362f6e1efa2772064026bb3d4ad92e6f43a1812d8d2886489912f5"
        },
        {
          "alg" : "SHA-512",
          "content" : "c02b9fc1d3892a83bae6aa12d929b2dd49b401f3b39784e0a6ce4b9eef14e5a8b3bf7a9112a8589863c780662c18b8da9efdd01862a12d1c5e02a7b25e9a7242"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca1bbef5ee6d2b0a7d75b2fcd4432cf633daf9e347962da5373e67324faad36130bea043e6138f699ef2d1fe226dec35"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c3627450180431dc53d77d9a33254e911681332fc60f6c37f9947010a80722c4fdc6c4e64a187a100a71233cc7478db9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "425c68faacc75830233a9f74190fed3975ecb390d23dd3eb39c7654dd75a5aa7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "742d7cb5f2eb07e638491fdd3ccd4aeb40d1208693e411196c54b5ebd9566e4b24a6156e34ce669c59f846ca2eca87ac9565062380e469d0f0dc6229e85d8bed"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/plugin-tools/maven-plugin-annotations"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MPLUGIN"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-plugin-tools/tree/maven-plugin-tools-3.15.1/maven-plugin-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar",
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.plexus",
      "version" : "0.9.0.M4",
      "description" : "Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "51eea54bbc85323fc68f6a79f9b8f179"
        },
        {
          "alg" : "SHA-1",
          "content" : "478f7935e88cd9da7ef01f509e4853e80ede9034"
        },
        {
          "alg" : "SHA-256",
          "content" : "b90579bc652eac7331436e0a25533fce14130b9c6e015f2dd3a3d4bb07e942b7"
        },
        {
          "alg" : "SHA-512",
          "content" : "a62c9d4485d4a30ec740e70b42aa310463dec0f53cd8ab7100be65ab984a8f946639b0f24650d0fb978aef6a73659a9e6e0b521b241de1dec2a58b342e0dbd2a"
        },
        {
          "alg" : "SHA-384",
          "content" : "7d8f5540885cb195ae3227bdb4854372586a90c6694a88da1711a16dd80a780ecfa2511edce7d0601f91a5875640bbae"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9b394b0cce809763de8ac26ca97a2810a4116798ef36e3fdca13109069f31daa41dd90326542e77f45d72d5cbeb62598"
        },
        {
          "alg" : "SHA3-256",
          "content" : "90367dc33a3cbb1db9081014adaf0424c112d94c523651d9297e3132dde03c97"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d977a67598f47ea5e1276693382b895ba79f4f1f623b0aff5eaa7ddcbfa7722932524b7992f850441f28062719b1b7f83206f2dbe5634f9e5f61f060ee881438"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/sisu/org.eclipse.sisu.plexus/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/eclipse-sisu/sisu-project/actions/workflows/build.yml?query=branch%3Amain"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repo.maven.apache.org/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-sisu/sisu-project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/sisu-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-sisu/sisu-project/tree/main/org.eclipse.sisu.plexus"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-sec-dispatcher",
      "version" : "2.0",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e68635a721630177ac70173e441336b6"
        },
        {
          "alg" : "SHA-1",
          "content" : "f89c5080614ffd0764e49861895dbedde1b47237"
        },
        {
          "alg" : "SHA-256",
          "content" : "873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb"
        },
        {
          "alg" : "SHA-512",
          "content" : "ad4e814c8baff780a4eee064903e52b09ae00420a59fb075ef72dbb8d64d12d3d5009b03d56c15f93587d931c3a7f06cad6351ab2dc9415ccc6eeab0daebeb07"
        },
        {
          "alg" : "SHA-384",
          "content" : "4af3426b6409cce7d5fcda4e2af407fc2dbae9873e06d98332bcd032c0039d9080a291e42223ea2bbef9825d3d63493f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "41720858dd5804f9cb26a8878c16dbdf0372a90e99c037809fe76c3de2c5517ba252af8f8cdf534c1a09900702e6a917"
        },
        {
          "alg" : "SHA3-256",
          "content" : "50fa723aefb551a3fd5888375d01f1d776c534cdf833baea392818e9bfa8166e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a43f823d31b377c0c7ec8d36ace69e5dbcdaf4dc4ebb45ff0561fea9e12d74c06090ee24b29b06769d4031693faf5d7e3146583d3a64bfaef6b7c79773a8831f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-sec-dispatcher/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-cipher",
      "version" : "2.0",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "55d612839faf248cbe3e273969c002c2"
        },
        {
          "alg" : "SHA-1",
          "content" : "425ea8e534716b4bff1ea90f39bd76be951d651b"
        },
        {
          "alg" : "SHA-256",
          "content" : "9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a"
        },
        {
          "alg" : "SHA-512",
          "content" : "8f187b07867a7c29d77454aae4b76479300238d9c4e777c1afa2aebe33b88dab916e29111dd55acac1341849f4579fe91a5470fdd45ccba0e05709c2ce3a1d65"
        },
        {
          "alg" : "SHA-384",
          "content" : "6973eefe06a8992aa8db1775c0f43a84cbef54eeea9122a5a30c362af3e4fb13b6cbd6fba229142e2a4495f97d71f409"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ea780d218f96e61005c5582bf3785ddbb33b53ccb4efbffd76ab58166cf261d3c256d52fea28759380684b7e9b0db8eb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e2e51d5350ffdce341464ddcdf9ae60108bff40bf5174dc6be43e33ffcd84af9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f3e17ea31bdefc8094ba3495b8231ec7f90c7175839b009d9fd230110b66ac4c68c912fda1a6e644d93dbce639d738e2535f1ade5841e072a604f5f8ac536729"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-cipher/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-cipher/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-cipher"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.19.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2ac2db154e365d55d167ec1215125a3a"
        },
        {
          "alg" : "SHA-1",
          "content" : "d6524b169a6574cd253760c472d419b47bfd37e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "32733ab4bc90b45b63eb72677d886961003fd4ed113e07b1028f9877cb2ac735"
        },
        {
          "alg" : "SHA-512",
          "content" : "24cf9bfc7c32736277d2a1e82a455d004ec7d4989e8d0dc2831c910a04b6ff8b30ca9c49ec25562cf0b7f1ffc27726e7510a54bb99e75a3be83ddf6030c37978"
        },
        {
          "alg" : "SHA-384",
          "content" : "90c567c8f42b58d0f3f24233260258e7e3bae1f8284ee33f9730e1cecc4fe2c98b7d6ebbba2a6598b50d444ddfa70722"
        },
        {
          "alg" : "SHA3-384",
          "content" : "397a7aafd4f66cdec80cf4682a72db0873b3fc6a3db3cdd7be747b24ae13804dfc290e2441a115d50b0add9ce76af2dd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4c0809e7ff0474603b0a1bcdf2f745cec9233ffdc6c652b077d93f2630d52f8b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "25564027878618e00dc24ea5caf8365a9396c25597aaf4ea8a37997fd699dabdf4b6f9ce4c1c9f86abedb4afa26041ac234d238c63ffecc207ce2068a6271956"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-lang/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.17.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-core",
      "version" : "7.17.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ee7def4b4f42bce6b4d39d12d1e9c32c"
        },
        {
          "alg" : "SHA-1",
          "content" : "0248a1cef92f34b5c7ee47dc13194e6df0c3472b"
        },
        {
          "alg" : "SHA-256",
          "content" : "73089de9d6bfe41e2c4e5780f0465c5e647a048c486f942070fbccceec666a52"
        },
        {
          "alg" : "SHA-512",
          "content" : "a7035cab91f9b9b30ea6fd77124369dde4118de2f417b475d2ead25c411b8a72da9276aff74d09663e76ea1c9f2df4bea2eca434cf0fcd304a38b8603843c051"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca0f8d96c074b14100789da9fcc7ffcb1362b4a106a76492a833af5faa8778c8180c60bd7bd12a03962eefb496983c53"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d39d1767b8f761a9b00a8caeaf0bef60498eb651b4530bc2745cb9f430f25f93696552406b5d972e5e80ab3ea9d7eb07"
        },
        {
          "alg" : "SHA3-256",
          "content" : "97f04f3667109cd2018b1e2628c27cd2085bbdc3184c6bff389748056e848e7d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dcb33b078a7c8fe404872fd155f1c2c4d021336a80fa3e474eec109a6392d10dab00a8fc85e1911e1bd90a1e9007b139374a2a4a002365b0ad0f59afc854ed0d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jul-to-slf4j",
      "version" : "1.7.36",
      "description" : "JUL to SLF4J bridge",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a3fe73e6cafe8f102facaf2dd65353f"
        },
        {
          "alg" : "SHA-1",
          "content" : "ed46d81cef9c412a88caef405b58f93a678ff2ca"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e641fb142c5f0b0623d6222c09ea87523a41bf6bed48ac79940724010b989de"
        },
        {
          "alg" : "SHA-512",
          "content" : "0bb1e7343d07d41bcfb0c1ffeb2db28cbb35e7a80a409b80042f463b082a292976f09d719e319471e31c7bab716121728a16509fd385fc6e3b400b1b214cffea"
        },
        {
          "alg" : "SHA-384",
          "content" : "50e2f326fc00537a5fb3726c7c55556851b3be8b4346f522f27ddecf2fdb44adabae3197b30ccfd854c37d6734adbd8f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4ad0c3870852ac44530a9dcb992d947cd8708ee6f422559da41aaaa8b22d1610fb116b32d2c54df83b110b85487083bf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8e3f5aaaa27f618b52e610376d2a16c6f9dc8dce5e6c2bbe42131a590626aae6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e3da265406b5e69f02235ed7272a48f71cb8b6f0a696820e28e90fb5eafeeb311abf2a4e779b402f384c6a80470fd41116ee52a526f57040fae3b24cb3b19c01"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/jul-to-slf4j"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "publisher" : "ANTLR",
      "group" : "org.antlr",
      "name" : "antlr4-runtime",
      "version" : "4.9.3",
      "description" : "The ANTLR 4 Runtime",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "718f199bafa6574ffa1111fa3e10276a"
        },
        {
          "alg" : "SHA-1",
          "content" : "81befc16ebedb8b8aea3e4c0835dd5ca7e8523a8"
        },
        {
          "alg" : "SHA-256",
          "content" : "131a6594969bc4f321d652ea2a33bc0e378ca312685ef87791b2c60b29d01ea5"
        },
        {
          "alg" : "SHA-512",
          "content" : "2c3763a8fbc7af110df5d6bb57692759b23e8bf961a53694c69bde4cd9d8c3a8eaa55cf376ce34c6c4e2035a99d7abf08c6ffa3b75d18a6d93a9c1ca95927ea8"
        },
        {
          "alg" : "SHA-384",
          "content" : "62a62dab4a27733a810b97fe5544eb1b5b25d2df83ea8d93802cb0e6fd1b4b3ca5a130c51aa9198deefc30cd0f062841"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e2919d471a5b4fa318cd34d4a9fa5a9e1fa4ed37e0ee34c72031f950c447c16df828cbe96635e525859153080b97510b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "70c29f56fa10bfccfd47623ca6e9d3625e1b81da7b0e57269def1d6f84c5cd6e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1a80c6cc4e5cd8e1455717e6d9fc3ab7937eb23f907e4189358f4b2f3eb14475689c02a8258419f6956feaf6da0c0c5cdcfb9300f91efef2f5bfbabac092386c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.antlr.org/antlr4-runtime"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/antlr/antlr4/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/antlr/antlr4/tree/master/antlr4-runtime"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar",
      "publisher" : "Saxonica",
      "group" : "net.sf.saxon",
      "name" : "Saxon-HE",
      "version" : "12.5",
      "description" : "The XSLT and XQuery Processor",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "39b53a0dcd01522e79223e2506061d44"
        },
        {
          "alg" : "SHA-1",
          "content" : "57c007520e2879387b8d13d0a512e9566eeffa73"
        },
        {
          "alg" : "SHA-256",
          "content" : "98c3a91e6e5aaf9b3e2b37601e04b214a6e67098493cdd8232fcb705fddcb674"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8385b52b9de03bbbcfd9900b78d7e1b544102900316d8d95b5f36b75b6f8f492cee7a1ecf737bd0b4caf85d79c003996f83ac156739d60e4d41edd5ef43a182"
        },
        {
          "alg" : "SHA-384",
          "content" : "1e08a834684848bfb6c8029b98d2c8f5634acba483c6cd783aa753a15551c48e32fe718c72abdbb1114bab6e8cbf654d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "89a7d4688edba721f2960ed5a1d572cf9cf83b6d3d71987ef9b8d4a1b00fbcb47f7f6469d8d14cae2ea3eb8b63841a4d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b963a7cb8580e362ee06b8fbd395016900a9842fa03f6f38106544259ebfc464"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f47e8e8922b657d8190b391178fc86b4808b0c1d40cdc4de8231cefd619d645de971d9b0e33c8da8c25de5cb4f558861cbed77839dd619f4f4f4317378cbdb3d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-2.0",
            "url" : "https://www.mozilla.org/MPL/2.0/"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.saxonica.com/"
        },
        {
          "type" : "vcs",
          "url" : "https://saxonica.plan.io/projects/saxonmirrorhe/repository"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar",
      "group" : "org.xmlresolver",
      "name" : "xmlresolver",
      "version" : "5.2.2",
      "description" : "An XML entity/uri resolver",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0de20e8f7acfa5942d78c239d3034deb"
        },
        {
          "alg" : "SHA-1",
          "content" : "152378e04ba01898847bf38fad5023c7d52f0c9d"
        },
        {
          "alg" : "SHA-256",
          "content" : "efc92bd7ed32b3e57095e0b3e872051ccfbbdcc980831ef33e89e38161a85222"
        },
        {
          "alg" : "SHA-512",
          "content" : "4213b91ddf162a2ee0515f823d859333fa475b84675277bf657eff03162eff4b91660313ce8c19fa9f30b02e2002d87cf06c492e4c303448a96b577b6928f3c0"
        },
        {
          "alg" : "SHA-384",
          "content" : "f093746aa8a39a5d1309fe7d14315ce851d649fe3700d2ec49013947d701c33345e32e4a4306d1475e266487b7ba0169"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a0eb7e9622c96a0dfbd141030b33b24e796e9ae438befde00a77629408a07d855d681f93b0fb052e19e762f5f170c77b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d808c261e2be19a82e25034d0a21cf40bad78eabdfba3bc6ff93f0f91ac30397"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e53fd7e8cc1f17144ac3667667d32a7a6fc21f7b7f7dce715590533f5d276e10be768156338d5e878c47d1e880f9e4799f18f289e00bfa155d45571d02787899"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xmlresolver/xmlresolver"
        },
        {
          "type" : "vcs",
          "url" : "scm:git@github.com:xmlresolver/xmlresolver.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents.client5",
      "name" : "httpclient5",
      "version" : "5.1.3",
      "description" : "Apache HttpComponents Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "757bfb86277b9b11798db8fdb351bf74"
        },
        {
          "alg" : "SHA-1",
          "content" : "13c984b7b881afcff3a7f0bb95878724a48a4b66"
        },
        {
          "alg" : "SHA-256",
          "content" : "28c759254f4e35319e078bb6ffea75676608dc12cb243b24fb3c8732522977fe"
        },
        {
          "alg" : "SHA-512",
          "content" : "4fb38b6bf164103e68320ce430776915a6831923eb3e0b6e6f29ff57647e6bd29efc07d46b107aec23bf9004cfd959fbda8153740ba0060260a54d67ccf8a093"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e6c7bc00b5e25c564faa6f20d01b26288163de846273943bdc7a043348cbe4a5540dc875ed057054c2af5c6e10f8147"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ecfe2613d27758859bfadc02b97b073b5ca74c2e983198c949851c2d287de00e85d4c1c822329e63a38617f85ff281fb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "29df48d822099ef07e6687f12acdecd8f22dcfe84106667183d6790bbc9ed121"
        },
        {
          "alg" : "SHA3-512",
          "content" : "46cafa187fb940370f545efc73ff7d160d9b54810a9556d13c4e0010b44a0155e0cfad0251fb030f0cbae2d2108a6ef0ac918c32b3ad6d6dc2da1a360815b564"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hc.apache.org/httpcomponents-client-5.0.x/5.1.3/httpclient5/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-client/tree/5.1.3/httpclient5"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents.core5",
      "name" : "httpcore5-h2",
      "version" : "5.1.3",
      "description" : "Apache HttpComponents HTTP/2 Core Components",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e12cc9746f6635675a408e641c95b177"
        },
        {
          "alg" : "SHA-1",
          "content" : "4664b59b09f5ee008e37a963bbb92f4068e91696"
        },
        {
          "alg" : "SHA-256",
          "content" : "d0e78ba15aa8ebe77982b660ac4b09a95d6e035dbdbea762577dc1c8e2935807"
        },
        {
          "alg" : "SHA-512",
          "content" : "76a22785285a3c12a98db24d678f1fd695cb4941be438fd80a7c41b4fbf804452694f93947579aba3bcee652671e362ae6d76bfb60a8db75518e52aba4ddad36"
        },
        {
          "alg" : "SHA-384",
          "content" : "cfead6178cd1cc30fcd9da2f8753897a2039e7915eded3278fb74545a49db68a10860ed064e9f52d0f1526e3cd7caa35"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d98a2ba3eaf1eb38629e2d02eb6b31e4e4b2290c321bd58c0377ad4427a969b881d6b31cf8afdc8b9e306ef8d7d39439"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7114b9fd4612be12d156312568633e13745c8bd3da7c28af60373a70f31875b5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3f32c0564b4af84b886df450df91498523c40ba6bf98354413ff3f4c85f782cd2a3cd9e6ef2f38c18a79ecb8c444326c7b043feb5fc3f8cafe043e9217362255"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hc.apache.org/httpcomponents-core-5.1.x/5.1.3/httpcore5-h2/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/5.1.3/httpcore5-h2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents.core5",
      "name" : "httpcore5",
      "version" : "5.1.3",
      "description" : "Apache HttpComponents HTTP/1.1 core components",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e3311847fc70a84038fb2c079dd08c4a"
        },
        {
          "alg" : "SHA-1",
          "content" : "d1638d1e5f2793f187d4144c702a93524ba6fd3b"
        },
        {
          "alg" : "SHA-256",
          "content" : "f2bf2f2c7772169c9e30699719667ad30f9b46c4e9d7841907deb2d12d9923fe"
        },
        {
          "alg" : "SHA-512",
          "content" : "c9b439da0fb0124f37676686c69f8fdb824a30e0d6a3b9ebc0ebca5555727ae18cc5a146d8874b4cfe6fa966d5eb6083a44c379a76017ec79863596a23c571b3"
        },
        {
          "alg" : "SHA-384",
          "content" : "63d37103c0b040ed9f0c70af0bcc9792c68afe8c7da5f445f30458c7c802524f07a1bdb573661e680955a257e0fb6b4c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5ddd51ea89b40049c0b92bdfd0fc59fd2963c025895bece1b9438166e9e468b8b54694e9e72a8d026f681ec92824f224"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0a1d52398f2a13124591cc6fce1fee5f353c29c9726b4f68813b01f077940947"
        },
        {
          "alg" : "SHA3-512",
          "content" : "eecbd33885bb1718a1803951d9217b108e42e39cedfeac99bd0938cec94674b1c67d6f4d6141c8e225061a51a1ac3af07f553501ff2b136e358a3eeffbcd3ea9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hc.apache.org/httpcomponents-core-5.1.x/5.1.3/httpcore5/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/5.1.3/httpcore5"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&type=jar",
      "group" : "org.xmlresolver",
      "name" : "xmlresolver",
      "version" : "5.2.2",
      "description" : "An XML entity/uri resolver",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0e77f628aa613bbe3145c6a24f8973f3"
        },
        {
          "alg" : "SHA-1",
          "content" : "5624ede8b8e374979194acaae9f34cff23b62b3e"
        },
        {
          "alg" : "SHA-256",
          "content" : "173904bdbd783ba0fac92c5bcc05da5d09f0ce7eed24346666ea0a239461f9b4"
        },
        {
          "alg" : "SHA-512",
          "content" : "18f9f0ab3426800c82a707bf5e85a281955695fc703dc6c80c055227e5b78d825329f6b0eee0605b80c3c5cc33c7b81056a7504dd4c2f289e41d608d0ad1c357"
        },
        {
          "alg" : "SHA-384",
          "content" : "3c3e1b18e2e0ac1f4b67e17ba189c86d7f69bbf0f1bb491cb65a2a4a4efc76f695559bc61900e5ec5ad694b137547207"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1623fc11b9650912008cc32276d58c6a3a89e730f3343f4db546218a654bed959050b6a2553393a08a4779c8c36a7b18"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e5d26342451df2725301cf0ca980906e1b90c2dbbd67561e78a6fc77aafb1789"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f5199748a7503a51444711a1414ceb5034f0e8730a46a6f20dd2e71c95eaf9e0323b1f41f0b7c70f6051780ed90c6b78282b0f3ff6a302794d0be281374dd3a5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xmlresolver/xmlresolver"
        },
        {
          "type" : "vcs",
          "url" : "scm:git@github.com:xmlresolver/xmlresolver.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.13.1?type=jar",
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.13.1",
      "description" : "Gson JSON library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d82c16b045ce4832679d70f26a67b30c"
        },
        {
          "alg" : "SHA-1",
          "content" : "853ce06c11316b33a8eae5e9095da096a9528b8f"
        },
        {
          "alg" : "SHA-256",
          "content" : "94855942d4992f112946d3de1c334e709237b8126d8130bf07807c018a4a2120"
        },
        {
          "alg" : "SHA-512",
          "content" : "4c13440cd080c13a160a13a8f350816487b3c2a77aed8ea900721af07a595f6b2f414ac5fb6a628011e9d366a5c4c3c5633f5efa669700144b659dfe4d14419b"
        },
        {
          "alg" : "SHA-384",
          "content" : "6885615e03106d8fce81f944a8bdb8fbc4f8c237df1cb08f54ee7b99359e8ef61a4ccff5988654caaab7aa5c12b1a8d9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3081761a4473de6e8b60c77cbcf936359931cd0346fcd5c37e7e171ad7b7bb6edafd642d717e330bac76424e76a96e0b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cfe7d63307f9a13d265c5ccf80794f7b9cf637e5019add01c499259aeb23f589"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c01c15b52fc6859de901173c0f17becb3976a5a9f35c1ff15262d675f8519a5430de3ad2756951f660b8b137ed479db9af0a17af26eb30daff2af29ae6fa1307"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/gson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.38.0?type=jar",
      "publisher" : "Google LLC",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.38.0",
      "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "912f8206614000252841d89cb0461895"
        },
        {
          "alg" : "SHA-1",
          "content" : "fc0ae991433e8590ba51cd558421478318a74c8c"
        },
        {
          "alg" : "SHA-256",
          "content" : "6661d5335090a5fc61dd869d2095bc6c1e2156e3aa47a6e4ababdf64c99a7889"
        },
        {
          "alg" : "SHA-512",
          "content" : "b13fdb7e06ec1f12ea1d63b0ff942c239e4decb391d736a1f7d46c9aa9e2744e9391be4398a02a78d551a96969622e65b75bbd31e5bf67a5938716765f451f3a"
        },
        {
          "alg" : "SHA-384",
          "content" : "47be5289bf8ca3f9dfe2d22e4baf6defc71dabb5476f878a240412e336d77d81148b2f79ffc0702079e48bd67ad7fd22"
        },
        {
          "alg" : "SHA3-384",
          "content" : "53f3f57b51ea34afd38e1270fbe08dfcf1e2dcfb50f4ac9369bb625febb75611c9e5d8bb09f4dfcb504b5d0b9ac47443"
        },
        {
          "alg" : "SHA3-256",
          "content" : "02eaa5431cda49a9e702cac4ad8051d88397e1d5219a0ef65673dae8eaf9c70d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0307dfc76cae6d539d93649ef3ccb85937d62f6f74be212e8a05ae1cc892f3b63a5c03cd6f61ace9f5dbd0f8dfb0baf086eaf3cd10bbefd22640966d00686dac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.38.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://errorprone.info/error_prone_annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.49.5?type=jar",
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "3.49.5",
      "description" : "checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a6525c2747603fb3ec22d18c4adc7419"
        },
        {
          "alg" : "SHA-1",
          "content" : "f0d119b5a4adb4164e9d6fa9fd3ffa5d0e458963"
        },
        {
          "alg" : "SHA-256",
          "content" : "508c83c62c344f6f7ee28f47b88a8797d6116d043bfd1ca0576c828dd1df2880"
        },
        {
          "alg" : "SHA-512",
          "content" : "7e1cd29c38a47c789f63abc230e590b8b539bc205ddfa21669534ae2b8a140a9dec58b3bf3cc39e6b7b2021e6c97521a3820d60c9eb829491bbf39e065859f44"
        },
        {
          "alg" : "SHA-384",
          "content" : "68d62d36f0288fb547a990a990d991da2e9c5571200e4eb232e76fb0bd3319ff8a086c9a029ce425921b42ef0b25a77f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "972c8f849036401802bcf6d8b3aedac80e8431e848697832a5011f2c3d306d39f26077bcdba752d407d1c69f9c2e5cdd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8b0540e7cf8bdb23cfc29f684b5ae460c58f5d851103bbe836ba30af4a925d85"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5145b1a0a280ddb9021665e38188135c6bce4f81b1e0b2f597221ae17fc36903c4f9538cff4a90a18c41d990d09699c821cc7caecc4a9804075757b45d31d12b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@3.49.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://checkerframework.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar",
      "group" : "org.pcollections",
      "name" : "pcollections",
      "version" : "4.0.2",
      "description" : "A Persistent Java Collections Library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3bc80c4568bb9766e119df617ef8b553"
        },
        {
          "alg" : "SHA-1",
          "content" : "c8398b4443deae11e6eaffbc04a371b4eb8f6b8e"
        },
        {
          "alg" : "SHA-256",
          "content" : "2bbeef5797a241300c4f7513cd546239629ed7deda4fc0c31df90bb95f5f13ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "b1c87f1569c61b079fb50bf4cb0e885aefde3138ab8f1777386aa47652bf9ed359e4437ecff3c6f09e7974c10af88b6c27baaa147b95e1fd69b3fdf3fdbd4da5"
        },
        {
          "alg" : "SHA-384",
          "content" : "a9a0266da1d32de32547431c6f1a629d697f5330a1cb85485b698958d1b5861797cc8037b8dd9cfb6979b52e51b8aede"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7971fad6691a1b90eb2729119582ee638b58a70f11c3232bd277183ce675e4c70dae63a0ba56982c87efc0bc3c2ea338"
        },
        {
          "alg" : "SHA3-256",
          "content" : "338d7fdf8c11b4fc538c05420fb2c6426dab2209e2b1e2a20f1549277f4a4a4f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5722d084f2f3aaa11147ce496c548647555669895d8f456d501a07ba0027a86eea44335c906efcd7a035b7a9ecc1ffe55963023b3581f3005b8acf81f7c9c7fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/hrldcpr/pcollections"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/hrldcpr/pcollections"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar",
      "group" : "com.github.oowekyala.ooxml",
      "name" : "nice-xml-messages",
      "version" : "3.1",
      "description" : "Associates XML DOM nodes to their position in source, to enrich error messages. This builds on top of the standard org.w3c.dom API. Should probably not be used in performance critical code, but can hopefully cleanup reporting logic in places where user-friendly messages are important.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "39c913451ff2d2ec740c58a77a26fa16"
        },
        {
          "alg" : "SHA-1",
          "content" : "4c3863b0f015af5cfd9abe02fab364fb99867167"
        },
        {
          "alg" : "SHA-256",
          "content" : "0b4ceb5b8362d43c9c6c49b1bd57f1c5da54d3c5c7c305fa39c0a04462bb4799"
        },
        {
          "alg" : "SHA-512",
          "content" : "6b3e7c2f1d4b9a46c8dc113b60deee5e2a70b57f308886074816e0d7e3a5460cfb7c1c547171c0ad125deb551bafbb41b911c52db8bac448be3504b0d407a7fc"
        },
        {
          "alg" : "SHA-384",
          "content" : "c79cd24010cfcfcc712509412dacbfb5bcc4a64e98bfd6a638698350c4f45c1a2c6724491368cc56a4d5947cbe0482e1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "218130aec89a116471d0dd34b9c733f144e36f1cbcd2b705fea4ed2f7fb90e8c6a5386aaff037bc772e180868b13c03f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "02b4007b4ada909e9bb676189310b233c8c2c254e2bdc901928030ef0f96f346"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f2e7883ab42ba31eb380ed9dc7199f3d7d4b0c0c8b06432ebe502c6e117017abdd579f86032a14bf842fb68889a13d1bd504a60a212f889e171e78003c0322a0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/oowekyala/nice-xml-messages"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/oowekyala/nice-xml-messages"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-java@7.17.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-java",
      "version" : "7.17.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dfc0512bc2924de93d66fdbd46789b55"
        },
        {
          "alg" : "SHA-1",
          "content" : "908457a7dc7d641af12e0e8e8fa077366057a27b"
        },
        {
          "alg" : "SHA-256",
          "content" : "1fa1c9651562ed3e575c84c6c91c19f05165e6aa06712a89761c787d743707eb"
        },
        {
          "alg" : "SHA-512",
          "content" : "113cd832c7f6acd32d64305587fef0c2239463423c677791169778f430a29b77040c4a65307ec410bbf5b6512d91539556c879c870a956984e67fd1047098b49"
        },
        {
          "alg" : "SHA-384",
          "content" : "169b65a7c05f4526af89b3d7fac5b32362187ebd0d1123be20d86a000bd7010f43dc22004c691ff5ac0c38392aefe529"
        },
        {
          "alg" : "SHA3-384",
          "content" : "55de7fc181f2b1494cf18740938bfc4b100dba25ef755c9880e991f0cf56c9520135da08a5b4eb33e2e1d4eb780d0658"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7a37e624e35bbc2a12e5267f1d313c7ea3299fb54fc3ca072bfb033b82a09274"
        },
        {
          "alg" : "SHA3-512",
          "content" : "34b44352637946ba5b2e98588a1d11b419f7a4ea5660e9b2d50e1b96ab4988c9fea64319b8d72ceec0d4f704b91761209a2db8a2d766b605267cb8fb84853348"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-java@7.17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-java/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-javascript@7.17.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-javascript",
      "version" : "7.17.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2ac18b2111b78f66364d870ce606c142"
        },
        {
          "alg" : "SHA-1",
          "content" : "90828e6fee8d1255a9869f3b90228cbef0469edf"
        },
        {
          "alg" : "SHA-256",
          "content" : "1955b7f156ccdcf1a50f6a333f80bc9a6f404e1a7d2428754037b63f98332d84"
        },
        {
          "alg" : "SHA-512",
          "content" : "9b02faefded7975ea874849f10225810a2583ec02b6f4c96073d0e617d0173228d3570f45ffddf1596785cfa29c379838e1e9508d3d34099980c4af995a905d2"
        },
        {
          "alg" : "SHA-384",
          "content" : "200add5d076c6bb91611c88fce403a407b3e3b31c6f7e3abf0c67d2d9fc6fe0fbb90dbcaa2283bea53112a7e019263aa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3125cb9d1097cf2e523b0a2c13a348bc8804e49074dfdf5c8cdae5f6059dd13ada98fff22e34988d6b10096db6e60a64"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fb08b760eb09c5150fdf3cebded4a0563735b2d43f4d20f24b6b24832774b8be"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d38abb65e467491a7967a39392aa2e717ece1317f08c59c1f765deaf25e82338e1622e7e479f9cc10d12ebeea9ab7e0b2d112d6bafb9b78d5536b7cce5c205e6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-javascript@7.17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-javascript/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-javascript"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mozilla/rhino@1.7.15?type=jar",
      "publisher" : "The Mozilla Foundation",
      "group" : "org.mozilla",
      "name" : "rhino",
      "version" : "1.7.15",
      "description" : "Rhino is an open-source implementation of JavaScript written entirely in Java. It is typically embedded into Java applications to provide scripting to end users. Full jar including tools, excluding the JSR-223 Script Engine wrapper.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dec889e14cf8b3ceecba3a0f2d6dc0e6"
        },
        {
          "alg" : "SHA-1",
          "content" : "39e53f8e769ea9a7e799f266aa47c85edd99a29e"
        },
        {
          "alg" : "SHA-256",
          "content" : "2427fdcbc149ca0a25ccfbb7c71b01f39ad42708773a47816cd2342861766b63"
        },
        {
          "alg" : "SHA-512",
          "content" : "5619c4f52f1863c5d72cd9115c2e9ccff55c7e7a8f4f1395f73486120d94ab3900634fb29d54356a5b0fc2214570615d5f06e152260df971bb01c5bc4de4bb95"
        },
        {
          "alg" : "SHA-384",
          "content" : "195c8ba56fd1a1f5e21314e4a6555eefff667cb0cd481f158882f9960f83820d9d817dd33c267fc9af4e21f0a31d20a3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "056b55c253835da419a21589a2417988e5741a78a50132229d56bff24cdf8cc5a829f420f06213241c085d2ca27e82b7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5562728b88e047554b29f636b62bdabfb8baae31313304c4c6d8d7a072c82058"
        },
        {
          "alg" : "SHA3-512",
          "content" : "703eab70abd6bcf392fd98555d77ed72dec7abce8f368c547ac62c2ac54096a059927132eaafe10d9fadee2079b7f1d10ab7c35ada33aa6e85e1b0d7bac27397"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.mozilla/rhino@1.7.15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://mozilla.github.io/rhino/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-jsp@7.17.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-jsp",
      "version" : "7.17.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6da12822d1cfa4edafeae826be00442e"
        },
        {
          "alg" : "SHA-1",
          "content" : "14fd5551dfb5281df8d7dc8a49a2e959f53e6367"
        },
        {
          "alg" : "SHA-256",
          "content" : "1d938f4200cc21cee9129a731ffc8d06744612485e05f7e9545ad0f584d1d4db"
        },
        {
          "alg" : "SHA-512",
          "content" : "926523a9c5f665d93bc6c1597c4fbab361db61d95a8d32b95a4bee006ed5b361aef946cbc7eaf36d07b1bc36bb63d05ffaa0dc5e2799670548e87c2ddbd52cbb"
        },
        {
          "alg" : "SHA-384",
          "content" : "a0b4b6df74e01c071b2375077ce8716c19ea6688b2617c3a764fe0bfd0ffaf7c63d6a280c35455e164c7f52e4720fb2e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "64895146102e826a2831cae35e4da33e91dc056c722a37a0abb9bca16f52621543a6b9079b87ad198c018241771bf4ab"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7e9430f1529c089238b4a324d03775f8ec16b1b3b576c8c20382b47c0f737892"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6f57b5cec79ae5ef2eecdc1987ceadb97e8d4571013b3d741be1607c2a51d5661945a684e1654d4ccba480114470d9c41ba33cda30e0eba7ecc27c659586910f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-jsp@7.17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-jsp/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-jsp"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "group" : "javax.inject",
      "name" : "javax.inject",
      "version" : "1",
      "description" : "The javax.inject API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/atinject/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/atinject/source/checkout"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-sink-api",
      "version" : "2.0.0",
      "description" : "Doxia Sink API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0ac989158733a584c6b82e6ab1edc8ec"
        },
        {
          "alg" : "SHA-1",
          "content" : "d767d78857c1fb3cbd21ae3a7870894476ecb0fc"
        },
        {
          "alg" : "SHA-256",
          "content" : "fba33eaee3b01547bcd14b05ebc37f7dacef1819ad9ee7a5b27899afd3472cf4"
        },
        {
          "alg" : "SHA-512",
          "content" : "7eb92a30b7d30c5a397ac1358349560d6b8cc4ff6ca8b0d2d4ada8052bf442b6f860123355fc588ab0de46ae791c9305185fe06fb3b4ab02a74563ed7cfe3282"
        },
        {
          "alg" : "SHA-384",
          "content" : "55a70ff149446ab395900dd6bb15f5df1d9abd95466263df2ad1b24c385c7d5321268b0171095bef8043e205ebbb7d14"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f1ec162d2f0191e022a342ff4c27487a107c642ea9d8714932c851628ee783246d3991591dc8a39d98da744afefd5cca"
        },
        {
          "alg" : "SHA3-256",
          "content" : "81ec30177ed5a89a7587e204e8d23b38cf429c0dd133bf7bacdda99247b6693b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b486bb7701528aac0105fb751a140b7edb5c71435918d87c0635b760bcfd1166c82b9aa99ad1e22432a63788a7cc41e9860921d06c719aeddf339e3fd3eba83d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-sink-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-2.0.0/doxia-sink-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-core",
      "version" : "2.0.0",
      "description" : "Doxia core classes and interfaces.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c0fb5fa304380a070a896e79a62b6932"
        },
        {
          "alg" : "SHA-1",
          "content" : "6b8dd422ff321fdbf32a0196b85cce3d63cfe68c"
        },
        {
          "alg" : "SHA-256",
          "content" : "939183cf5ced6741745b2475a4adf78ca85885ee0dad6dae28dd3f25bd447ff3"
        },
        {
          "alg" : "SHA-512",
          "content" : "254ba191aa9a3badee94990bdfce0d629faed0634990060fec014801f02cb8c902be4fa887ee7ad8fbdb0628e132257946f55e2cf34d2aee9e80d4e59db919b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "67f5e1d315f1277e41e976cd19bbf09af2e68500d73e947e18b77c42b996d7ae709af296cd6f822a9bc080827a35eb32"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e07e1c7b41c21b3edbfec8ed9b0defa6e0bdd9ecfc3da020f0d483d27d199e22833292de4e04cd14494fd373ff70a191"
        },
        {
          "alg" : "SHA3-256",
          "content" : "01bcf009f82c3480b30905d40c660671c77a34e78e17533e6bf5891d2abd4ada"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2b77bf05c1d98eac15ccc2b5849d3bedf3059f48f00ffd06c4984d53f81e9c8e7e677e7c96ae2cf174d6a1a6e0a21f6afa0e200e3eee0873a80b775ebad5b1a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-2.0.0/doxia-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.12.0",
      "description" : "Apache Commons Text is a set of utility functions and reusable components for the purpose of processing and manipulating text that should be of use in a Java environment.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "544add6fbc8d4b100b07c3692d08099e"
        },
        {
          "alg" : "SHA-1",
          "content" : "66aa90dc099701c4d3b14bd256c328f592ccf0d6"
        },
        {
          "alg" : "SHA-256",
          "content" : "de023257ff166044a56bd1aa9124e843cd05dac5806cc705a9311f3556d5a15f"
        },
        {
          "alg" : "SHA-512",
          "content" : "7d198cc288e4d515f37c81d0dcd1210bce3594d2a06a11f6a78566d33c33acdb4f292b0b42c87281b69fe3af891966bca708e25fa29b1b3536e9f951f5b57d7c"
        },
        {
          "alg" : "SHA-384",
          "content" : "4f471c41486a396f25e6956750440aa05c294778ae1ffaafba1f8596f0d49da45b56ad829d59343900fca7c0db461bbe"
        },
        {
          "alg" : "SHA3-384",
          "content" : "685ab7392554fd43e5ec7fcd1f6faab19a74d0541927e947334ac9ae1e97e6d12590998f091ef4293738e3763999a6cc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ed3e3bb796583c58c587be9c692cef80f6e7496120963d9b47cef453d2b6f20d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f5fcacd33f37676d354c836329c41347a4023f851ec0b24785c64c46c72c609dc64599413f2a6a3ecab4e45fcdbb3b487ca36a9b67fcd1c457bd09e1b5530137"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.reporting",
      "name" : "maven-reporting-api",
      "version" : "4.0.0",
      "description" : "API to manage report generation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9c49fcb81d69bb5ec513d624c181fc05"
        },
        {
          "alg" : "SHA-1",
          "content" : "d3ad7e3d03463b5bd77e7d3ce94539cc723c8dfb"
        },
        {
          "alg" : "SHA-256",
          "content" : "cb2cbde3c9c7288f7398a250dcf3c90cf92714cff301f22b298e1091b5def33c"
        },
        {
          "alg" : "SHA-512",
          "content" : "5a76ac4d7d9bbd2c834bfa16062bbf9523588e4ace9badfd2820b5cc5b7efbd1aa148479e4aa1a0f94347fa9ab7fd1ab6e9055d35b6f9c49161aa6a9c2ba6bc0"
        },
        {
          "alg" : "SHA-384",
          "content" : "a839758279aff4fa8da0e4c5970281791ce296772f4178f1c1a07215f701f8eb1a4f54bf73a4eac15a8f6524a35ce1b0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9bbd0b95e2ca51e8dafcaa64bdaa40630b2847d6867ce5318829d30121580438df1cb552b848617f2a9393c7dbf4dcca"
        },
        {
          "alg" : "SHA3-256",
          "content" : "037b404b0c94d26f5d24003235b26d11609aed2c744dd42356ac39de5abdfd05"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b2ba70061d190f29a2f6c40c14804b75355740a01f5a86e7af39a3da475f23eecb78dbb1ffc437121d849f0adbb4acf7224fe75e634dbff29dc83640367f5f75"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-reporting-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-reporting-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-reporting-api"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-reporting-api/tree/maven-reporting-api-4.0.0"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.reporting",
      "name" : "maven-reporting-impl",
      "version" : "4.0.0",
      "description" : "Abstract classes to manage report generation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "302ed7d914dc813380d361d1acb83c2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d3753b5c13a873a5ddb71f404c6fe1179a4688c2"
        },
        {
          "alg" : "SHA-256",
          "content" : "e9e70fdb26ff8b1f15435e3a68866a25c85b1694007e0fbdfe84e48e946fe463"
        },
        {
          "alg" : "SHA-512",
          "content" : "ba9375f585e019dd617570f1b1e9e0d9c5f892bc50cef901b62bb77af5251f33187d72768ecc1e6b75aaa8701cbf7917d1d9fb341059a1a73abc700cccb86cf6"
        },
        {
          "alg" : "SHA-384",
          "content" : "61415b631b105f16898ee7e88f49cffb6f58440b91115743e3938c8c0cfbedb176b90a6913242f7d084e850c996d0b26"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9432022ecc13aaa5363b61272a60117219f4e62b391022028edb3669880570cf2fa89fa01b16c51785dcb2928081f862"
        },
        {
          "alg" : "SHA3-256",
          "content" : "973658f5634db80ba5479ba47092477622328551d8cb3ea8eec876e414ec1e9d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6fcbba982ab9a982f226fa63d9d769340b6d1dc406e33fae8657867f1f948f7f3521ac5447de932aaae246fc8983fad4c7899dab04fc4e4168be70a2597d7b21"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-reporting-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-reporting-impl/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20in%20(maven-reporting-impl)"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-reporting-impl/tree/maven-reporting-impl-4.0.0"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-site-model@2.0.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-site-model",
      "version" : "2.0.0",
      "description" : "The Site Model handles the descriptor for sites, also known as site.xml.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4da689094c6e4a2d6457d21ce959ac42"
        },
        {
          "alg" : "SHA-1",
          "content" : "6a43c5b58b9acbf789618efdda23d5cb9fb0981f"
        },
        {
          "alg" : "SHA-256",
          "content" : "f6ec9ef75a41d1b826e5ecf02d92c5de90a6bc70ea93d5340988703223bf2205"
        },
        {
          "alg" : "SHA-512",
          "content" : "cbc57a27b6aee02de03e5736e753174c85ab9ca484e3ecf29f14d0e5414bae6c7d8d85746dc0be36e69a465f646e3414b4d42cfe0afe5ec84696c7183dce44fb"
        },
        {
          "alg" : "SHA-384",
          "content" : "5792b264ac5100c74ee032f0cd17d6e206de13c0edc9fdcfaac15720f6cb1257398fdcadfc9e4dc82974d45fc5846122"
        },
        {
          "alg" : "SHA3-384",
          "content" : "428cf97b0c580abb9585a1c0944f247e7b06f67e91a9dcd5a806980a18f6efb93433e5e0c736ea6ed7290d1a4dacd9f5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "93838a46d4982cb621cb9cbf9937efd9eee1ea3e66e3ae38c2e6f5b9c6485e28"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3c1f1ecdf57031a6e52f945d6d83578ad6ef718799c27344848a28612498b4e657b761f9254c27ef155d04a282f1b64fa966e95f14509b7f929e3e9ee502c5f1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-site-model@2.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia-sitetools/doxia-site-model/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia-sitetools/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIASITETOOLS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia-sitetools/tree/doxia-sitetools-2.0.0/doxia-site-model"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-integration-tools@2.0.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-integration-tools",
      "version" : "2.0.0",
      "description" : "A collection of tools to help the integration of Doxia Sitetools in Maven plugins.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b8e18118b11a20e0ddc66b235989682e"
        },
        {
          "alg" : "SHA-1",
          "content" : "ce08d289ed826416983860fb2adced6dd7ade550"
        },
        {
          "alg" : "SHA-256",
          "content" : "4aee72f9b30b507964c2f52b63f70e7b41fb9d957359cb5dc13c428abb4b6189"
        },
        {
          "alg" : "SHA-512",
          "content" : "f1283e59206ef36d30b461a3acd492e0293ef43408e3836b383cef2008dec2c67855bd834477dc6c570948eb23c0563513ea1e77ed70c4fe740cf497b5aedf7f"
        },
        {
          "alg" : "SHA-384",
          "content" : "571f23ff6805482534a2900ea0d31f60990e66a23ca84c7c1277dd7e835a6c366444758b74449c06f34e417e6f023b97"
        },
        {
          "alg" : "SHA3-384",
          "content" : "be39da056d82de338c6e162b4ddb394fe5403c191940705b1432a6e63e4fd471bb62287f67b944f294b3b51d0ce5949b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b23f619e2527c6cb933a128e5a46ece0ab7425b731b80499879216e691f34c02"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a5546b3480e2427fdf78cd0329f6824d679391873dcac4b1a2a1f7d4e0a097a8161e49266803531c99b366c5f50be6969395ab1c40f53e3265799ae1f6f73937"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-integration-tools@2.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia-sitetools/doxia-integration-tools/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia-sitetools/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIASITETOOLS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia-sitetools/tree/doxia-sitetools-2.0.0/doxia-integration-tools"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-site-renderer@2.0.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-site-renderer",
      "version" : "2.0.0",
      "description" : "The Site Renderer handles the rendering of sites, merging site model with document content.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0af057ade4d5bc3b41a06cf1100bbd93"
        },
        {
          "alg" : "SHA-1",
          "content" : "b68214ec1d3250a4594f598f054977d961e66ac8"
        },
        {
          "alg" : "SHA-256",
          "content" : "6cdee370194f4b9f742d12ef46528042f480d9bdf3de832de2792e1ae9ffc68d"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbd9b5c101c908cfa1a1152d86bd85b34aeab040af2031eed82e40391f2a1f8672665c29e798d9eb0ffc8bbd8daf7d5650ac5498c4674d45e3a2136497bd039d"
        },
        {
          "alg" : "SHA-384",
          "content" : "3f0a3411760b923e905272ffef3acdcb521823509c854d676392748b1610b2aff000c1ddac0e06b20839d5f509d113ca"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0f0ac53a476af63dea74bee5704aafa778bffec18bd83c09d74c475d9f6f77170b22281bc82726115fd466f6615d1094"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1c8dfaf0807068d1c3fca0e0b819ffef373c0dd7f7644d59a133929ab3dbef33"
        },
        {
          "alg" : "SHA3-512",
          "content" : "59bcc9793a679d2d23698a2ee066e15529e1c5c78b32c55e69af6bac4c3fca6bf3431cc9be19eaea73ac05c204ed784cfa36f79e34579d29d071cbc3e2b5c18f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-site-renderer@2.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia-sitetools/doxia-site-renderer/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia-sitetools/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIASITETOOLS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia-sitetools/tree/doxia-sitetools-2.0.0/doxia-site-renderer"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-skin-model@2.0.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-skin-model",
      "version" : "2.0.0",
      "description" : "The Skin Model defines metadata for Doxia Sitetools skins.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9daee5a484a8a9cb32b2fe6cfea42531"
        },
        {
          "alg" : "SHA-1",
          "content" : "86913a4d7f1acbf26d426c97adecb18e21938ebf"
        },
        {
          "alg" : "SHA-256",
          "content" : "3ced0d90353f49e8eb1458f54664b93ec117d79b9789a576da41e2f6f99723e0"
        },
        {
          "alg" : "SHA-512",
          "content" : "c2c7b6b284566175ab474cc65d3cae4e788e0443a0002d8987879e85f1c0a34a05cd02c4ebac0ddffa616d927d6879bfa962ee765bd26e0c96acfe5b888d574f"
        },
        {
          "alg" : "SHA-384",
          "content" : "75878eed8636aa36bed4c9d94749d7366fb37fd6f85a733d69b61a42693334e0777500bd0d1dc3743be20eb043ba6bc9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "426009912e94a4701e8b5f60b050baee2df2308568b1e9a41cf116b5302e4a459aa4a27d960268fede81f096438ea826"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7f32e9ee1107485d9d5132d96858693fdebd92a477902cf79f61677f9802cdd6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "64aaadacb6f783cb666753f52e24c51c8c5e1cf7c58330f774eb30adc9160ea1a77853070c4e59a0c9e2fde97f589cddb361a82f756a0435a97c5cbaabea9554"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-skin-model@2.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia-sitetools/doxia-skin-model/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia-sitetools/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIASITETOOLS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia-sitetools/tree/doxia-sitetools-2.0.0/doxia-skin-model"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@2.0.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-module-xhtml5",
      "version" : "2.0.0",
      "description" : "A Doxia module for Xhtml5 source documents. Xhtml5 format is supported both as source and target formats.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2369dd687d9b13d115157299d09ca7d4"
        },
        {
          "alg" : "SHA-1",
          "content" : "15fbcfe42e0a50eb33adbc061c9b4db84ec0470e"
        },
        {
          "alg" : "SHA-256",
          "content" : "c91557679a0eb9fde3175055628ceb7b8fd5ab6d308340770d236fb06265dc26"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a6e7cdbbd4cac4f7f275ae4668a61fee7610b1aa4cc1277c17c01b6e28c2e12e82403404d839a727b9aaf08d5c33328c95772e18e3416a5dbdda7bad5a8a13b"
        },
        {
          "alg" : "SHA-384",
          "content" : "11eb926fb6bf0c57d461bb890488c800a374857bea22e6543f2b82273a23fe66ed2f9c6115f1ac7a9169f71160cc76d7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e1b87e1d963f0191797308fd9a1a7b3d99d21cc218a7e8adabc422aec5b37760c8f232638aac4b4d2040992ad2ac6809"
        },
        {
          "alg" : "SHA3-256",
          "content" : "65d5775f67a3b4ac04506c0f03f34d7fca0bfcb57fc2f2ffc5b5d609c458a8f1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "91102caa2091dc1a033bc2d1cd768998093f124bb4b49f8e526fdb9d99f77a0d4eb055d9a1d728ee3733ad350cb447b6d88f38c08f44ee4886689026ef4636cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@2.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-modules/doxia-module-xhtml5/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-2.0.0/doxia-modules/doxia-module-xhtml5"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-velocity@2.2.0?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-velocity",
      "version" : "2.2.0",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fd4bb44db19036ab360720360f09dccc"
        },
        {
          "alg" : "SHA-1",
          "content" : "75a983b74a4c0adcd0751528ff397ae308ef6d0c"
        },
        {
          "alg" : "SHA-256",
          "content" : "3e7e902f492c973cf210ddb8267843a3b65e83f5067467e2f4d9af0051f6b8b9"
        },
        {
          "alg" : "SHA-512",
          "content" : "c8cf2a0cb9b96e78d71559a45a21fc8c74df5088f9934790efdc1bc2da14dc598a551f90addae210798d6a1eecd7c56934e301a601bfc5f1add9a35ee0a364dc"
        },
        {
          "alg" : "SHA-384",
          "content" : "74927582b56f2e46ab5a268ea38e45092d1e1de35c0f2263337cd5470b3934cc239a32eca6407922450ef139f8490ad4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b28c88e9054b6b94afdd971979f5293f92a866e0bc88f557653f1e796d67a94957333247df6616580837476b308e1b6c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "38631c8e26284bb97611dc2387d72b69ffeccc24755ead8b67ffdf040d99e53f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "79b8722161304b4a7359fd29f1ac0fddc5a4038a456333f2651b0b3bb63577f8dfb94606662f56a82c90942ffefc693fe65481e7b2d729cb086b68d94c481d65"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-velocity@2.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-pom/plexus-velocity/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-velocity/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-velocity"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.velocity/velocity-engine-core@2.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.velocity",
      "name" : "velocity-engine-core",
      "version" : "2.4",
      "description" : "Apache Velocity is a general purpose template engine.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8dc3c7a26823ee88253f7aa9250c094e"
        },
        {
          "alg" : "SHA-1",
          "content" : "55dfc20bbc4968cf70c5ae5165b5b0324e0067d9"
        },
        {
          "alg" : "SHA-256",
          "content" : "1bf78c2ade46f209bf93ebe72ed2af5b989ca7a1de0a015fc1b92a62f56b6549"
        },
        {
          "alg" : "SHA-512",
          "content" : "af60619861ba97a672a530247a5468230613701c441602be7e633444b41e417c0279aa8914c98d603d2510e857cc43f2442dfbea1110d2579046d963be5f764e"
        },
        {
          "alg" : "SHA-384",
          "content" : "c5306caa3bd659e26cd7f7485fae8c7aa77354c1f44818d2f0629f9bd1d76528d9051e8977bbb7af52728797b054fd50"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9e11bab5a208a1672dce61f1b9f31ed97afc386d9bbc12e84e25f228a06661891b363afcbecc74bb4a1f37155eaa5daa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "81d19e190e8b6f9847b823888f3d61f2d78a03ec22e444d9e727c98e8c08f8f6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "98aafda7d0ec5822692ef38bdb45d12b1f20c76f68cb73c94da13debc644b51a875fbca5b114832b12cb71f873ffbab86f6a6ef9976c3263c51c3673ab7e2124"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.velocity/velocity-engine-core@2.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://velocity.apache.org/engine/devel/velocity-engine-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/VELOCITY"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?general@velocity.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=velocity-engine.git/velocity-engine-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.velocity.tools",
      "name" : "velocity-tools-generic",
      "version" : "3.1",
      "description" : "Generic tools that can be used in any context.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "76f13879ead8693fd4d5751a8a236089"
        },
        {
          "alg" : "SHA-1",
          "content" : "07aaa49086a64cd9dab967a8437cc03abbfad655"
        },
        {
          "alg" : "SHA-256",
          "content" : "8258cfdcaa16127f35ffe610a3fa4f76b7ebe51b88922c73c4ee39ce8f378ce5"
        },
        {
          "alg" : "SHA-512",
          "content" : "51e7249e92d516f9e8a92a1068856d920edee512563131cca2dede45ed6de0e8667dfe0f54cd59712f255f9019d92ea521b8182622ba303af3a45b9740a6d54b"
        },
        {
          "alg" : "SHA-384",
          "content" : "7aadd12f098af99f43a390b4620ffba74008dd3308fbdd18ca0c012929b80196f3977b8748c967312e12546f8e065ce1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "221fa964a36d4ee566a50164569df5f905082f2c94cf95bb763e1611f77806bb63000bade25fa3d205d16eea576d7781"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3aa26883c32b31553ba468cd678ae0b6aa70272a683aea0d0cb8149afe404dc9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5d32822a5d3c913dacdece7c1415016b6f7f1320589397509c4ea689ae3a585e289acdaed7df14e2fe64be466956179b3260211bca013c11f71fa0542d28336d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://velocity.apache.org/tools/devel/velocity-tools-generic/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/VELTOOLS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?general@velocity.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=velocity-tools.git/velocity-tools-generic"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-beanutils",
      "name" : "commons-beanutils",
      "version" : "1.9.4",
      "description" : "Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "07dc532ee316fe1f2f0323e9bd2f8df4"
        },
        {
          "alg" : "SHA-1",
          "content" : "d52b9abcd97f38c81342bb7e7ae1eee9b73cba51"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a"
        },
        {
          "alg" : "SHA-512",
          "content" : "7762b348caecead49038a38a89754ff7d9be6199324315495ba47cf24f52c06faadf9306d925c8fe47c587589a939c82e491e1c730267fdf354243a68c0f96ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "dcd3845917b8fb189cf4034b0d7c6d266ec7110f85ffbd2711cdea9eb94b4fa3e1cee9120b484c6a120b82769230ed3a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dfdb8845989be083de807184910124ad7e7e372959b34686cd5f5020f193a2997831ead497b0a5a0233f031aecdf55f6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "127a81068335d6ca47f5f5e12d849dc1bc5300b2ad8d3f9b64ca30ff2a76d479"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f67405d0a7667adf7cd35cd7416c54e1759380cdb9c8f179a10175058e40292808e17e69d48df4d4d6b5e268c314127cf3ab87af6920a271bb2e6e0df963940d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-beanutils/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/BEANUTILS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/beanutils/tags/BEANUTILS_1_9_3_RC3"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.2",
      "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "040b4b4d8eac886f6b4a2a3bd2f31b00"
        },
        {
          "alg" : "SHA-1",
          "content" : "4bfc12adfe4842bf07b657f0369c4cb522955686"
        },
        {
          "alg" : "SHA-256",
          "content" : "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
        },
        {
          "alg" : "SHA-512",
          "content" : "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-digester3@3.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-digester3",
      "version" : "3.2",
      "description" : "The Apache Commons Digester package lets you configure an XML to Java object mapping module which triggers certain actions called rules whenever a particular pattern of nested XML elements is recognized.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "41d2c62c7aedafa7a3627794abc83f71"
        },
        {
          "alg" : "SHA-1",
          "content" : "c3f68c5ff25ec5204470fd8fdf4cb8feff5e8a79"
        },
        {
          "alg" : "SHA-256",
          "content" : "1c150e3d2df4b4237b47e28fea2079fb0da324578d5cca6a5fed2e37a62082ec"
        },
        {
          "alg" : "SHA-512",
          "content" : "a2063f01fd50f96cfd8765c49935249a77df47965ff0ae375bb1f1e47e3cdeb5e82eaf0b0e32183e581c01821499f9d4c57419e90352a7aa96b97850950e8652"
        },
        {
          "alg" : "SHA-384",
          "content" : "1691e34753c8ce3bb16729de8901f65def9362a989887e7b5d3cb05ded854e5b25b01b7725201228a97d17c4d68eb5f1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aaf22fbe0faa7303fc7b3c96ece73ae0e980ebd01454e344f612f7ccb10059c89d29cd579fbf2d211967708a7884a5c2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0c06a70800e0baf107e23e79a2eb7087694e06565fb9a27dc1ec920420b25fb1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2ed528a469c368296f63b6c1bc0ffe0eb01208cf8adf4127c350d38223c47550409e572c33ac2ed567792cb44b46cc002c5a0ec52019beccdedcc5dcc84a7155"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-digester3@3.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/digester/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIGESTER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/digester/tags/DIGESTER3_3_2_RC2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.cliftonlabs/json-simple@3.0.2?type=jar",
      "group" : "com.github.cliftonlabs",
      "name" : "json-simple",
      "version" : "3.0.2",
      "description" : "Java 7+ toolkit to quickly develop RFC 4627 JSON compatible applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "148c0d1bdc1bcb24394627d6930ee9ad"
        },
        {
          "alg" : "SHA-1",
          "content" : "2337afdb06134a12fc0239299c3ceb2e9c209516"
        },
        {
          "alg" : "SHA-256",
          "content" : "fda65a9ad0e1ac0c88987106e89aa4d8b2a2495e7e042371efa83813f65b7295"
        },
        {
          "alg" : "SHA-512",
          "content" : "c77f7423fd96b5b6159236536e4e4b509032cea94368186b86c99f4ec72cf40ecfb26821cc7124077363902ce2b91644e32e53fa7de3fce9885b400b0424ecd0"
        },
        {
          "alg" : "SHA-384",
          "content" : "805dced7fef08b98489ff09ffedda93998369ed6a024674f09ae8d4e62e8ffab5da235d64e5f91eabc1840f6695a7e43"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d0a6dc8d23efc7dd2bd19036d8550a7ea1125528872765ab3094c72b9d76d287e7909abec239d4d8bae2a1d55c8621f6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d4239bd87f94a37ab4eeb653d9789a5a53899e5074d93ba66bea26f80b1ea2ca"
        },
        {
          "alg" : "SHA3-512",
          "content" : "448912379c297b72afad74ab6f7c9ef796046476dcaa8a2b4f1905ace248c4f52558c4683b3887e1aeddb03029b9b41ef8a90841cfd088734061c35489eb69b5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.cliftonlabs/json-simple@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cliftonlabs.github.io/json-simple/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/cliftonlabs/json-simple.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-module-apt@2.0.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-module-apt",
      "version" : "2.0.0",
      "description" : "A Doxia module for Almost Plain Text source documents. APT format is supported both as source and target formats.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f6613830c1f558b909b32d3e3e271911"
        },
        {
          "alg" : "SHA-1",
          "content" : "0505b4e8d57eb3f8c3d66adcca85ce09311742ba"
        },
        {
          "alg" : "SHA-256",
          "content" : "f4a846c448ca85358279184a310f6ee3f46fa39688f74a72961c1bfe222f28a6"
        },
        {
          "alg" : "SHA-512",
          "content" : "97bbf8b640a29efd19693e09403bda9b1ab0c5b78fd3ea1e383b57d61be8d8fc112a2d2098fee1bf8b84b5b23c52bca1f820245274fb959c74e2c5ff66435705"
        },
        {
          "alg" : "SHA-384",
          "content" : "cb4781e22a3c1f17c7cd630c38a704d5cf7289dcbbd90667ae63eaacd925a93d22678e700a6ab0a59f03757a823a05ba"
        },
        {
          "alg" : "SHA3-384",
          "content" : "36ba428bde2da90c56f47a39e2bfe6ae2a3f21bf4244f6e77758e433ab355eb8a2ab7f59ee66d212b6d00aeaacc3df8a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aa461bef4ef9be4357f26c06233e5352293067a6e4146891e68660bf73757c2a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8f45c3d4a73a0d943ab7c86e106e38c44fa8435035ae44e007bbb5162f8699588e0828ef300d52bc5ea8ffd3e9379fea68617f7655467f4f09fc65857d49acb5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-module-apt@2.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-modules/doxia-module-apt/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-2.0.0/doxia-modules/doxia-module-apt"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-module-xdoc@2.0.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-module-xdoc",
      "version" : "2.0.0",
      "description" : "A Doxia module for Xdoc source documents. Xdoc format is supported both as source and target formats.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd12065dc641017da7006cb39f0490e5"
        },
        {
          "alg" : "SHA-1",
          "content" : "fe3a51c0226cb7cdfdcc97b73681f6ee80fad72c"
        },
        {
          "alg" : "SHA-256",
          "content" : "7956aca14f8adbc48bac86b218701dd44cc990063a69edbfca363b105994a474"
        },
        {
          "alg" : "SHA-512",
          "content" : "34d0ff9cf1de22f57764fb3fc5212794393faf97d7f25a2aeb459cdc3768dd8a9d7ba1a722ab8856a9e9cfae8d0f6155d069275028f6d7e064ca1cee909e283e"
        },
        {
          "alg" : "SHA-384",
          "content" : "f42887fa6cfe11eadef20b1de3445c7985764cee1524768044e7cd9b5359a3d252e852099130715a12bc51255bcc92de"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5d6da0a4ac898aa36b259a78998d3033ed37341471b6e811e722b5341ced7b5ad02542b4d9f72877640305a3a471c55c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0708739dbfcc78dea964478de746aed9dacba22c29de850802756867568b0d91"
        },
        {
          "alg" : "SHA3-512",
          "content" : "535580ea82e12ece01b4f913bb9055af2e726188af5e948831fe34dd35bc4186515168220d9ddcd865a334e3f6da65cb8782be278a5f4dc5eb9afee6a31e0a90"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-module-xdoc@2.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-modules/doxia-module-xdoc/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-2.0.0/doxia-modules/doxia-module-xdoc"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-archiver@3.6.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-archiver",
      "version" : "3.6.2",
      "description" : "Provides utility methods for creating JARs and other archive files from a Maven project.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "742b3136d8ff1fcb66f5fd7f3c267c8d"
        },
        {
          "alg" : "SHA-1",
          "content" : "a2d949d87fed6db197cc3cceec93012dd2317ca0"
        },
        {
          "alg" : "SHA-256",
          "content" : "1f895a587df4844d9b7565e8e9a6352afe1d55532458a0dbeb746bc1d02e9216"
        },
        {
          "alg" : "SHA-512",
          "content" : "352f7af9cff067f4a4e959dd9d450f5eae6cb5dd6ac37c11813f11f83cec0b31143f0f6f30860403aedb9f6bd03c7d7a7fea322ee9b283b5c3a053673177133c"
        },
        {
          "alg" : "SHA-384",
          "content" : "f4d5965d5713ed15449677d971777fba4dcff34109cb3d573af8d9a307675a57cf7cf41b31ea6de543f72743c6ed8ecc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e05e2c8955181adea2bf8e0fa2e1ad413183b1c905d9ccf0cfee0efdbebc2a04735d8ef53f46e289961d5961976ed5f1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6c43e3a38137addaab770d33d9fb26f75c09b0f8659128f62a122d4364084b74"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d91d9158d349d816d14ac81ec6adf98c4394d7f36da17d275e2bf882ac67d8e052a3085960e5e8d02123192ee3fefc52537f19ede8ead73e9691f0e4a17a02ba"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-archiver@3.6.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-archiver/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-archiver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%3DMSHARED+AND+component%3Dmaven-archiver"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-archiver/tree/maven-archiver-3.6.2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-resources@1.3.1?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-resources",
      "version" : "1.3.1",
      "description" : "A component to transparently retrieve resources from the filesystem, classpath or internet.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "077efa77691dac1edc837447989ec6e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0eedcf8d17e63b0acefe17c1a742c9d1fe70a3d8"
        },
        {
          "alg" : "SHA-256",
          "content" : "41deb2adc7b19ff4bfd7db30347223718229ce0ae196862acdfb90bf1afc6ccb"
        },
        {
          "alg" : "SHA-512",
          "content" : "c3e3c950d5ee94ee1df09c17df6835f19aa3249cd33ba6467d451bc77f7ad912cf26dcf23b525fca62b815ab3426fb669ca646335f9bce3f63e13dfe84e4810e"
        },
        {
          "alg" : "SHA-384",
          "content" : "029a9088e7925d9a53305467e4683b37a9a292905fbc05ee4b418cb247d1d6ef0006f3690dcf817d3297d72a377f0efa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "94dce916afb5d3639538b71949011fa2f894e158c126fb925520f7e164c86e0740eb5ac287689501f01a9083e4fb2641"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cdcf6673c334c3eb79c2f9de8b9f704cd34737481ddedcff32679dda85bcce10"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6372d8c38714c23b7ce39471fc65b34a32e4bccf68cd0948f76c02b65ae41c45da04922d6652922c8857655c811394dc17417117092b39beab73f2ed25799a89"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-resources@1.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-pom/plexus-resources/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repo.maven.apache.org/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-resources/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-resources"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-utils",
      "version" : "4.0.2",
      "description" : "A collection of various utility classes to ease working with strings, files, command lines and more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4cfdd73e436702d319d551a44fcea500"
        },
        {
          "alg" : "SHA-1",
          "content" : "9526a9548b302572f23337fcc217fb4cc713b9c3"
        },
        {
          "alg" : "SHA-256",
          "content" : "8957274e75fe2c278b1428dd16a0daeee1dd38152cb6eff816177ac28fccb697"
        },
        {
          "alg" : "SHA-512",
          "content" : "a99751d7990df50fd1adc10634c4e14f5deddff8fc1b7c6d26a5c7fc517d3f0e3a8d39435c512c507a0737fc9c3ee67a8f121f9e2aa8b9bfe14d9f01a99a3aa6"
        },
        {
          "alg" : "SHA-384",
          "content" : "52a12d800c5aa70fa149d4628fd6a485e3324dbfbbd6a2f24e120176ee8c48e13a4d321f76d64ff86684c2523409a62a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "beaf7889c9facf6649bcce19dcc4356db98de628f5d597cb101793ca454ab81d5a436f9652a957c9d1573e9149a0fe49"
        },
        {
          "alg" : "SHA3-256",
          "content" : "26369ecaf957f19dc5992708c56ed3816129c40531505eb4bc702755a2fd4b49"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f51af4b8d2e097716129f84b69e95947b08cf3c8617b0c6997f55ea3d02f0481284943e474d2935d590ec57975b1edce2774d5006734acc1ca1af567372bdf25"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-utils/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-utils/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-utils/tree/plexus-utils-4.0.2/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-xml",
      "version" : "3.0.1",
      "description" : "A collection of various utility classes to ease working with XML in Maven 3.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cd868918ebc742350840124ea4422ab0"
        },
        {
          "alg" : "SHA-1",
          "content" : "b0e73c21402f03c2765674b8dede21673b3288cf"
        },
        {
          "alg" : "SHA-256",
          "content" : "c1a510a87a62bd2d74ac1472dd31c3f9e9b0b8b8568f37d77c0f135415bebd05"
        },
        {
          "alg" : "SHA-512",
          "content" : "422f2ccdda00dd8c90c2f5b5f4ad6f0410fb6f2bcb3429d196f7f39c96a44a6709c70539648214d5b7686a70240a6c16c7b985b943f8002d318f90896230a259"
        },
        {
          "alg" : "SHA-384",
          "content" : "da397eb08963f4366d2119af1d993efa00fee25e50b09454422805ce83e662507e2afc7f6b4171a9c5da111d7ada3365"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d21cc3459871a9f6e9a893df8f8bcb85a4f20cee96e821098e2a0f2655b20c9f01f1139e7dc4a80444d627d9854c56f6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bdf4b087b5d0ed2473c5ff7524b7c6dff791738715aa5499f14ed11729b3690b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fedd50a88c651e5a5da1639d5c507634bd50cb9103acfdec9e0db7827656855b7d1ee19ec7318de91996e86dc5e9c38f1b507433498c75ae327b865534999a9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-xml/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-xml/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-xml/tree/plexus-xml-3.0.1/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0.0?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-i18n",
      "version" : "1.0.0",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e2e9f4090c9260ed3f770515bbb3760c"
        },
        {
          "alg" : "SHA-1",
          "content" : "e782c09d9461d5a7c241ce1620eb49232d559106"
        },
        {
          "alg" : "SHA-256",
          "content" : "2975d6fb322d32705d8320c2eacfd74d1280d245b500ae531e5209c28b066b24"
        },
        {
          "alg" : "SHA-512",
          "content" : "f54cfcc693b5f686d9784f58201d0480c8b9c4ae48dbde3860afdaa9e2e70db1cf4a1a0798c744b78ba69258d1ec4d26d454d9fdbd45f9e1446d5a517916985a"
        },
        {
          "alg" : "SHA-384",
          "content" : "09ef98609bacad91734d48b185676e7ab9120830068828b6e1b1088623e69ca21961329e5e78eaf348a91cf40b85ae9f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6f18ab950b22b8f04091c61a7944eead79754d7ffb3976e7045981d6b628f1b6820fd7dc9a7c58c40f040a4fc64668b9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e176422c30a229c672f33765969391a65cc6cb29f284e02b2333e27b17e98720"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e9015362ac279cf6d5a7bb9a4e056534d362ae95501f5c4ae0f1018eb73875ec53b00ac29fa52eafcbd96d180bdef675c7c40b96f0bb6cf134737dfc80a38906"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-pom/plexus-i18n/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repo.maven.apache.org/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-i18n/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-i18n"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-archiver@4.8.0?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-archiver",
      "version" : "4.8.0",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d2ec7fb02b77712dc9d95250f0c759f8"
        },
        {
          "alg" : "SHA-1",
          "content" : "3083832db67d19f03b5a8d50754a2c295ddcb504"
        },
        {
          "alg" : "SHA-256",
          "content" : "24513c9bc6d52716f5a22f7ef03e26c310f62ebcde309de9833deac6a4ac32e3"
        },
        {
          "alg" : "SHA-512",
          "content" : "4932381bf32646ac73bffc3104b57cac5a07357ecfa0ed9da369cbb92ad70b709b4fa06873aac4b6514cccdd387ed6e2d56a73258ab5cd35f6837656fbbd46bf"
        },
        {
          "alg" : "SHA-384",
          "content" : "c0784c380992d17c30cf11f156ed1450806f2828cc9acae91262118b705a062585e606368d0c315b4041e16eba721efc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1afd40d221e9e0036bbb20102ffbb11cf094cec12b4ebaf8b229f2fc10e570113c8bbbad3cb82afb593fd796156c30ff"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b0552cc06c828a585b07be684633303198fe712ef1e557d79248876e2ffd8355"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7661343c59c0c9f34ad1c89c7b3759dca1ba6a93ab12fcf773e0489f16049297cae54984c40963900b25e80dae02fcb8048dd722d01aa8707605946b21a941ab"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-archiver@4.8.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-archiver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-archiver/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-archiver/tree/plexus-archiver-4.8.0/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-io@3.4.1?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-io",
      "version" : "3.4.1",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7921fc78e18b1dc3dabe8ca5e3558657"
        },
        {
          "alg" : "SHA-1",
          "content" : "e9dc0280372501917a124af943dcb709f73577a2"
        },
        {
          "alg" : "SHA-256",
          "content" : "ac3be07c2968f98656604ddb8fdf08f1cfc560bc7b329fd17847f151510dc2c4"
        },
        {
          "alg" : "SHA-512",
          "content" : "c1555c9c23b61cd9fa1ee39c4015652eedf7e593e0515188d60ce66d1e33852e3570db7c6a471c3d128cbb0cb3bad1aaa526d2db532b0ed73b85678fb5436a5c"
        },
        {
          "alg" : "SHA-384",
          "content" : "96a7ad4a6ace76b43a3188e621431b316b671b416f1fb894db73ab8c57729234c2ae4b4f0680045df7a3f54e1699107b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6e6295afe879f7236bd223f14102ceb3714f18fe539c9c1c65782d9fa250aaf90a57a433ff9df264a66053170408dc68"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ab97d2c2f4df777fb6e1a01b781c58e644b4bd2f6093d0dcd31533685d01bee4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9d2aa908d414745ad92fae20b8b2cf833e137293a5e01d95c5308ab1464636696d7aa6351cf62323858e7942aa64a6af676710c8788ea6bc1ebadb094353a2a4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-io@3.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-io/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-io/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-io"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.23.0",
      "description" : "Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "96b88349958aeaa15cdf6e5e877bdced"
        },
        {
          "alg" : "SHA-1",
          "content" : "4af2060ea9b0c8b74f1854c6cafe4d43cfc161fc"
        },
        {
          "alg" : "SHA-256",
          "content" : "c267f17160e9ef662b4d78b7f29dca7c82b15c5cff2cb6a9865ef4ab3dd5b787"
        },
        {
          "alg" : "SHA-512",
          "content" : "e1ee5b7526ca1b6b67b3a6671d13899048f078bf0e73c1e9c601d947dcc9fd5c78cec9592b2a7a586faf4a7fba1c6885f679375cc2f06680a13ecfdad1ed41dd"
        },
        {
          "alg" : "SHA-384",
          "content" : "10e49e696c18750c37eee7807aca1ef28fadf2c9da6eabb3b5443bb0e1fa8ebd6638addb2042f27e9a9874495eb10d1c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fe9088b53e6a4e89332b61320b31f206b9217f3eb0adc66968a7d82c020ff263b39b686bcef6ef672d14954515edc514"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9e2ed6dd76655e6c27cd0e4e27a00c32f6e08ad058be4865a33268781484424f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "30b82c3fe576ed24cd82f2941c5bceccd8ceca3b868b91d0f8cdc2d64ac801101c47519ef4984a7af3b5f1a18e5e87bc6572ac8d21f4b91e689d3cd2e0f14694"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.iq80.snappy/snappy@0.4?type=jar",
      "group" : "org.iq80.snappy",
      "name" : "snappy",
      "version" : "0.4",
      "description" : "Port of Snappy to Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f0792d1dbe7f90d8b34c7c19961e0073"
        },
        {
          "alg" : "SHA-1",
          "content" : "a42b2d92a89efd35bb14738000dabcac6bd07a8d"
        },
        {
          "alg" : "SHA-256",
          "content" : "46a0c87d504ce9d6063e1ff6e4d20738feb49d8abf85b5071a7d18df4f11bac9"
        },
        {
          "alg" : "SHA-512",
          "content" : "dfd2559bf0388c6f1987d1393497a423203b2a72febbe648b3429e4d07b47a504797228e6e4e39a94c6800c5d3df8d3792863a3b841e6e8f65cfdcda91b6f0ab"
        },
        {
          "alg" : "SHA-384",
          "content" : "7b5feeb0f1ee3fd3f5cd17c5ea31a75cdd060e7beaa1773474727711c308d2cf5b900b5717965afe8c14912e33c41538"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d96d486687e858c1ebe1fadbd731d33e0233922eee703f1a4e36e68fa1dcc527cdcc4fae8fc91894ebeada2a1214606e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cf1b329b3f46891dc9e86fe9c6350a023dc0cb411739d2fd9d35490dfa8397aa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3a8584d15b63d4c371fed5b615f7a121fe2530d35d234b2caa499c53e7c558376ed22d289828276fbc77cd7c1311ba4d6c1af03edf08c5f051d5b674f01e6120"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.iq80.snappy/snappy@0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/dain/snappy"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/dain/snapy/tree/master"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "group" : "org.tukaani",
      "name" : "xz",
      "version" : "1.9",
      "description" : "XZ data compression",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "57c2fbfeb55e307ccae52e5322082e02"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ea4bec1a921180164852c65006d928617bd2caf"
        },
        {
          "alg" : "SHA-256",
          "content" : "211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac"
        },
        {
          "alg" : "SHA-384",
          "content" : "aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://tukaani.org/xz/java.html"
        },
        {
          "type" : "vcs",
          "url" : "https://git.tukaani.org/?p=xz-java.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.5-5?type=jar",
      "publisher" : "com.github.luben",
      "group" : "com.github.luben",
      "name" : "zstd-jni",
      "version" : "1.5.5-5",
      "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0e164757192c4dcf3c524f6cabeb8494"
        },
        {
          "alg" : "SHA-1",
          "content" : "74ffdc5f140080adacf5278287aadd950179f848"
        },
        {
          "alg" : "SHA-256",
          "content" : "c78d4e139894f555d956d12fbfcf3d45af751d4b2f183880ed5f99b69b284416"
        },
        {
          "alg" : "SHA-512",
          "content" : "00e9e20c68e74a890be0089b6f10a677876a2ecfc6b1b98f449bcf13d0fa91d4c68c7cc3dc7fec5fc575053d778517af52e0a7ffcb1c26d8e7bc02ed304edda5"
        },
        {
          "alg" : "SHA-384",
          "content" : "fec680d74af046105be755c727f04cc753872820405fee71e1c7c27cd0ef18c77f629925e379f8b54f6daafada85b809"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bf25464025522c6555d14fa7c05dbec1316aba69b5c2cf0b1a2ae334c47289b23a176cab853977d023b9c706ef9034b0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "68ef7b45e04c61c16991172e9dc67273c466729b1e9969aa2c3cd7bd010f1ece"
        },
        {
          "alg" : "SHA3-512",
          "content" : "050d8a505a924a31da1190c76c0b70c4fbe9589c907c94a5ad08469ec5bb7f13a10ca7f78fd5f96799a1561f793d8853452ebd638b68b5936da0f300bd4a009e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.5-5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/luben/zstd-jni"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.24?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-api",
      "version" : "1.9.24",
      "description" : "The application programming interface for the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "de8a3374ee199dccbb112223e2dbd24f"
        },
        {
          "alg" : "SHA-1",
          "content" : "45e695114b35034e1b589dca4d5c74c825968a9b"
        },
        {
          "alg" : "SHA-256",
          "content" : "c0ce14849298720dcf3b09fe9e263b3c576d2d6cd43c61f8aa9d6117e04e5e47"
        },
        {
          "alg" : "SHA-512",
          "content" : "34aaae149242fa0d597b791c805bc13ae53583410377f54e29d8230c41d73a793d6f0e3368bda69b87c64e8019c80709e0978a938144347787d9183a4b03b649"
        },
        {
          "alg" : "SHA-384",
          "content" : "0d3f0d789f64025f9f8632f35dc0cada8bd9c9ed472385a3741e11aefdce08eddb8e7652e1c9abcfa25946b6940804fb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3a2ab94ab328e4fc36b92636c17548fbfbd1388a778718bf424b9a7699866ff950f3e24f85c9edb120052cc551a6fd74"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4c492c8ef93b6c156596c590132701f8310ebd725f467dba0a9db4fd4671dbab"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c7f04b30b134d597646036de3cebfa3948c783edcbc517defdbdca1477625f1881e197588dbb3bde97857094e1a16bff2978911d544488bc22b5798e7fc006c7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.24?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven-resolver/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.24/maven-resolver-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.24?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-impl",
      "version" : "1.9.24",
      "description" : "An implementation of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d65b8f2a8e7c8d276857462f3a43d1b7"
        },
        {
          "alg" : "SHA-1",
          "content" : "20a43aded0089adec9732529e6ca6ca82c1e8a80"
        },
        {
          "alg" : "SHA-256",
          "content" : "3cd88edda00c46242cdbe57aefb47703519d176d9e8a500333de15faf41b0e1d"
        },
        {
          "alg" : "SHA-512",
          "content" : "45a8dc09f72de5e3a1a856ec6638a107a9dca4c89099539ac5a8cdd10c48c75c43430dc204e8be326843d3d861a341ef38c4ae7f0829ca1dcefe66c1f993978b"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8850c539e59439b45b226fa64182a805e3e3652c0047be72a6479502c771245c3717a745389d3b1d2bdf3df02786bf0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1fa685f2a9bdf897c2c3acae2772136440149ef1d10bb1f2e35655d28a2c5f4b52d5b71ce69d91982e67c9bd6dfb4bdc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "20a855ae5e3fadccd17134ca32589a2f22135efd5b2ae11dc6bbfa131b4dfe65"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8dff5471c51621aaeb72bf5efd1c05214acefe22d515f15873d28ce2d0529d957026f2c3d87a9cb2c47278917126b1f23163c50fe84a05dd507df33980b52b56"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.24?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven-resolver/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.24/maven-resolver-impl"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.24?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-named-locks",
      "version" : "1.9.24",
      "description" : "A synchronization utility implementation using Named locks.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ae20976db7bb654603306f00602fd5ff"
        },
        {
          "alg" : "SHA-1",
          "content" : "724667367b1e56ea2a6b58a6a3f8cb78e8b9b0e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a222b0a5ca4c145e8e0f45207a23bcce18bdbe1f1c980e4e9fb332591ee8c91a"
        },
        {
          "alg" : "SHA-512",
          "content" : "b7796449f077d72e1b2418d3ba6d5ff0b2cd16bb4a24ec77bf8c29e2111e5d7d083d1509d2752370c156e1cad631c7c7ef504b34454ba5761ed06b6d9d5ba03d"
        },
        {
          "alg" : "SHA-384",
          "content" : "6486c8add723854cb72eaf94a9f050ceeebfee39283886f34650e7ee5dd566c59d0a7fc7460beb14967d148139c0d1d9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d27f6b7094acca85fedbdab1fc27533f737be2a44e17b0849450302e3fdeb5a0e38380bc66014c6257a77ad014b32ae3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a158685fa3e505c62ab4c518d87331a1b461f346516aeb8ada6650821876fc5d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9f353ff18170dc25622904e005c79820b60ac2b4bf4136b6840bed50e13617e5ddf1969343c5e14bdfae9fce7f7ab25a9c8805175df9bffaac14b3f943b6d81f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.24?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-named-locks/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven-resolver/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.24/maven-resolver-named-locks"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.18.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.18.0",
      "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2abf189633424b9292fd57a3192c0ed5"
        },
        {
          "alg" : "SHA-1",
          "content" : "ee45d1cf6ec2cc2b809ff04b4dc7aec858e0df8f"
        },
        {
          "alg" : "SHA-256",
          "content" : "ba005f304cef92a3dede24a38ad5ac9b8afccf0d8f75839d6c1338634cf7f6e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "4d974c2203dd6780da6e50ec1c7d8ff727f9ed55fba706fdc50b9484fc5da5e03b67bc6ad2f0d9ae74f823ecce04a40c513bbabd8bf9e91ac8fec04cd3519ffa"
        },
        {
          "alg" : "SHA-384",
          "content" : "75d428b434c25041068005fd48f720ddfec8a9fc044b8df53a668828894e9ad542b92601a224d618200e3953ee3c8966"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b0d03e9b6b548ec3b7e3c0ddc644cf40d36203606fd69be3fccc72c86b0e048bb6c8e7bd74afb77e371e839bce7cc6aa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c33f900364c7ba15976e262ac26dbe4ece516bed72278da0e6c636d2c7ffabe6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fefe6c1c33f63b9a873a522f8b1f605e4197ed9fe849af650ad8791503cb58cf3d4facafe4f46e070ea11ccfbaec1084e11294154531a07d8ec18ea9c40d9769"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.20.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "94e7e6b9b5fe82388687b584d3571081"
        },
        {
          "alg" : "SHA-1",
          "content" : "36f3474daec2849c149e877614e7f979b2082cd2"
        },
        {
          "alg" : "SHA-256",
          "content" : "df90bba0fe3cb586b7f164e78fe8f8f4da3f2dd5c27fa645f888100ccc25dd72"
        },
        {
          "alg" : "SHA-512",
          "content" : "fea08e150473673b0608eaee3ae1cb4e73834039db80d3b758710d6baf3a5840a0878a4eb64739ae9bb21ccc7148c8520fe873616a3f6d5cdb4305deabdd015c"
        },
        {
          "alg" : "SHA-384",
          "content" : "22db5e18e3512ed44474e75a124a052d5a1a6f35ce458f6a201a5ccc9510c57c10c117dba80ac6ce91745cf2b51e63f2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a70700d24df3c276ff387c359e0e940b834e413b72a49917de9a82615836eca8cca1bee1ed71790606c795da795e9151"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a8d044d3a4a069d0f20d24112b6427a3a6f02a925b31b932721d1f545ff32cec"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3417bf811d7e5fc1e71b8540f3379751434ea8540c421ff2c8bb5f5ce34401cd0ad8a829b65aa55e055c57141181762c4827099352c2bba453e48ad2df67526a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-io/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.maven.plugins/maven-pmd-plugin@3.28.0?type=maven-plugin",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-core@3.9.11?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.11?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.9.11?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.9.11?type=jar",
        "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.1?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.17.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-java@7.17.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-javascript@7.17.0?type=jar",
        "pkg:maven/net.sourceforge.pmd/pmd-jsp@7.17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0?type=jar",
        "pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-resources@1.3.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0.0?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.24?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-core@3.9.11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.9.11?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.9.11?type=jar",
        "pkg:maven/org.apache.maven/maven-settings-builder@3.9.11?type=jar",
        "pkg:maven/org.apache.maven/maven-builder-support@3.9.11?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.11?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.11?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.9.11?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.9.11?type=jar",
        "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.11?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.24?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.24?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.24?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.24?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.8?type=jar",
        "pkg:maven/com.google.inject/guice@5.1.0?classifier=classes&type=jar",
        "pkg:maven/com.google.guava/guava@33.4.8-jre?type=jar",
        "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model@3.9.11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings@3.9.11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.9.11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-builder-support@3.9.11?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.9.11?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-builder-support@3.9.11?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-artifact@3.9.11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.9.11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.9.11?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.11?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ow2.asm/asm@9.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm@9.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.9.11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.9.11?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.11?type=jar",
        "pkg:maven/org.apache.maven/maven-builder-support@3.9.11?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.9.11?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.9.11?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.11?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.24?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.24?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.24?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.24?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.24?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.24?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.24?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.24?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.24?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.24?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.24?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.24?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.24?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.24?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.24?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.inject/guice@5.1.0?classifier=classes&type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@33.4.8-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
        "pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.8?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.13.1?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.49.5?type=jar",
        "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar",
        "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar",
        "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.13.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.38.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.38.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@3.49.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-java@7.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.17.0?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.8?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.49.5?type=jar",
        "pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar",
        "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-javascript@7.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.17.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
        "pkg:maven/org.mozilla/rhino@1.7.15?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.mozilla/rhino@1.7.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-jsp@7.17.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-site-model@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-integration-tools@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-site-renderer@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-module-apt@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-module-xdoc@2.0.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.apache.maven/maven-archiver@3.6.2?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.24?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-site-model@2.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-integration-tools@2.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-site-model@2.0.0?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-site-renderer@2.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-site-model@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-skin-model@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@2.0.0?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-velocity@2.2.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/org.apache.velocity/velocity-engine-core@2.4?type=jar",
        "pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-skin-model@2.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@2.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-velocity@2.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.velocity/velocity-engine-core@2.4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.velocity/velocity-engine-core@2.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.velocity/velocity-engine-core@2.4?type=jar",
        "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
        "pkg:maven/org.apache.commons/commons-digester3@3.2?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.github.cliftonlabs/json-simple@3.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-digester3@3.2?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.github.cliftonlabs/json-simple@3.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-module-apt@2.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-module-xdoc@2.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-archiver@3.6.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-archiver@4.8.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-archiver@4.8.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-io@3.4.1?type=jar",
        "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.iq80.snappy/snappy@0.4?type=jar",
        "pkg:maven/org.tukaani/xz@1.9?type=jar",
        "pkg:maven/com.github.luben/zstd-jni@1.5.5-5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-io@3.4.1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/commons-io/commons-io@2.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.iq80.snappy/snappy@0.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.5-5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-resources@1.3.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    }
  ]
}