<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:18f74826-a945-3793-afb5-a45ce505ded4" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.plugins/maven-release-plugin@3.2.0?type=maven-plugin">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.plugins</group>
      <name>maven-release-plugin</name>
      <version>3.2.0</version>
      <description>This plugin is used to release a project with Maven, saving a lot of repetitive, manual work.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.plugins/maven-release-plugin@3.2.0?type=maven-plugin</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/maven-release/maven-release-plugin/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-release/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven-release/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-release/tree/maven-release-3.2.0/maven-release-plugin</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.release/maven-release-api@3.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.release</group>
      <name>maven-release-api</name>
      <version>3.2.0</version>
      <description>APIs to implement to extend maven-release-plugin.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1551fc60bb4cd40d7398704fdfa02729</hash>
        <hash alg="SHA-1">27448f3f8a47a88b2ebce0efe8d6042ec9429e66</hash>
        <hash alg="SHA-256">990d6062effb391ffa49cb65c6366c36bbd4b66a4bd2b82b5b1fd3860ce3ea6e</hash>
        <hash alg="SHA-512">2e3d32bdc2a107577d9c2cec4b0c30c288c2d68a0cb7155dffd59fc76a3241caa7c7d5c49ecb9e3b3d3c1d8c24924f7be37ec33cc8aa590ac6ba64e858095cb8</hash>
        <hash alg="SHA-384">8840a1f5710a534c18d2c11682f78ecd8755ca3fd2c038bb84fac53f19b13ea4e76b0c21050717d9429c908489cac8e3</hash>
        <hash alg="SHA3-384">bbe02e1db7559876d86b03f1e89c5bbf4b5bf44bafb219077ff8561c81c57ae32a4464fdac097a43fc382a8aa53edaa2</hash>
        <hash alg="SHA3-256">4d3ac91fcab1e8bde8da07b27506313ca487db11b96be1bf6a6845655d05839d</hash>
        <hash alg="SHA3-512">a29f64ddb6761703da477ed576ecdd628dfd08148fa6b2c91c1e79c430d1f5a57263458534645c759c4e67e9b6ba5110aa31248f59f2f8238c78e60a07f7c6ca</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.release/maven-release-api@3.2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/maven-release/maven-release-api/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-release/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven-release/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-release/tree/maven-release-3.2.0/maven-release-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.resolver</group>
      <name>maven-resolver-api</name>
      <version>1.4.1</version>
      <description>The application programming interface for the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4566dcb75f3d95fcc4c2fc83ae562f71</hash>
        <hash alg="SHA-1">ceee6b7ea1bc252afa585fa32f76c2cda206bdcd</hash>
        <hash alg="SHA-256">33dc67306cc95da14e5444e8b494d967924abf1d01bae1894676164cbd3f6112</hash>
        <hash alg="SHA-512">da56ddeecfbb6d285d08fa60f88fe125d1f08f48ea24013b83b6aadf24835c034c9b45cdb815d99505b35e0605c48b6d7e5949f1735a874049b0790e8a8461dc</hash>
        <hash alg="SHA-384">5756381d718729e842637a3865b1b597757575ff087d4a248b04eaec300f990ff505c174055f00918ab26d14e9ecff88</hash>
        <hash alg="SHA3-384">a42f1e01f6a6350d37d7db4e0a1829d399241e809cbfa713bd047105ee155d6fbdf9334ee3d7a1ddb5f9b6e959b0ba61</hash>
        <hash alg="SHA3-256">1742e3d180c14936f9e0d003c1492e94095ba230b866038250a6a66aea6a5cb6</hash>
        <hash alg="SHA3-512">bda39f42b160f16bbf9bed080a6d896a0022787d3593b8434aa3bb730825a21f19699d0c4fe676f09d0db86dae08233c6b1153572aed09b839b99ed00bef69ed</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/resolver/maven-resolver-api/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven-resolver/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MRESOLVER</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.4.1/maven-resolver-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.resolver</group>
      <name>maven-resolver-util</name>
      <version>1.4.1</version>
      <description>A collection of utility classes to ease usage of the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">96e142730857ccda441a5b9baefeed73</hash>
        <hash alg="SHA-1">3f6d4f4bc3e24b46a776b47ccfeaed9d2ed01549</hash>
        <hash alg="SHA-256">6b2184872fa7cc2ef5a90481b56af9711c15b371e69ab52f0f31bf24e910dd82</hash>
        <hash alg="SHA-512">35a0b284fefad99b77c60f15d091c1bad3417baad1fc86fb6850a347a8a75a9cea26fa227ec601577f4096184b82ce198b4472441e95fce556f7d332c6a155cb</hash>
        <hash alg="SHA-384">29608703ce5c5130762d9c117602bcb5c842b27bd4576291cae8342f835628781589ed5da02ae54bb0cf444f2ca3dc11</hash>
        <hash alg="SHA3-384">3889ea3c5dc697f39f99bd9f4c2a23c51daabdd4454ad33c1e3621a6506bec45b09002eb1230003cb026997993144b26</hash>
        <hash alg="SHA3-256">9e0df8db7beb418484bd4db007c586272df4ca2b0b22e0d08e00aceeb40de911</hash>
        <hash alg="SHA3-512">29318d9c1c068d6b47f162a31303d8c1aaf156713c3af9492b888fa2d41b84f635711c6fea2bb1112b4e471fb31f2d433449bbd25a44a6c6537af050521409e9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/resolver/maven-resolver-util/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven-resolver/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MRESOLVER</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.4.1/maven-resolver-util</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.release/maven-release-manager@3.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.release</group>
      <name>maven-release-manager</name>
      <version>3.2.0</version>
      <description>Tooling to release a project with Maven, saving a lot of repetitive, manual work.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a90bcb35079eb467a85c925d209acbfc</hash>
        <hash alg="SHA-1">9ebb93ef72424e721a15cffae4d7946b45967293</hash>
        <hash alg="SHA-256">46f993df99277450384116f833245d7d33eb8e96da424596b6ad05a1cd38cb43</hash>
        <hash alg="SHA-512">2237f860f2282cbf7d08b9fe6d14f459c37b727f3d8638ba8d4129a9ca6df18aa7a062b8b1c545abd604f782636c7bbb6d6157cacb722a778660e09447536dd6</hash>
        <hash alg="SHA-384">e5ecb7eeb5cc30e301a8e9b5075c491817b9c4458624223a97228965f3c13f60e6d66db86d3616eaf4079b2ec029ed1d</hash>
        <hash alg="SHA3-384">c585314a9f12c75aa750900239b70b32bdc3cf5421edd16ebae2f57a3c4afa7d5ad78a78379689c604a99bf5894e10b8</hash>
        <hash alg="SHA3-256">3cfdeee96128e5602bb2507500ba74a23e49e93cb66289d20c7f54c7395a8446</hash>
        <hash alg="SHA3-512">f12941a3a36c3549c7783b359d4756192d0bf415ed417bf614a0c23c776b767b1ce92e46b21953e63d93b0ef8ff0a074d29aa3f7431d7c53acd0b9ffd1438fbb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.release/maven-release-manager@3.2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/maven-release/maven-release-manager/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-release/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven-release/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-release/tree/maven-release-3.2.0/maven-release-manager</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-xml</name>
      <version>3.0.1</version>
      <description>A collection of various utility classes to ease working with XML in Maven 3.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cd868918ebc742350840124ea4422ab0</hash>
        <hash alg="SHA-1">b0e73c21402f03c2765674b8dede21673b3288cf</hash>
        <hash alg="SHA-256">c1a510a87a62bd2d74ac1472dd31c3f9e9b0b8b8568f37d77c0f135415bebd05</hash>
        <hash alg="SHA-512">422f2ccdda00dd8c90c2f5b5f4ad6f0410fb6f2bcb3429d196f7f39c96a44a6709c70539648214d5b7686a70240a6c16c7b985b943f8002d318f90896230a259</hash>
        <hash alg="SHA-384">da397eb08963f4366d2119af1d993efa00fee25e50b09454422805ce83e662507e2afc7f6b4171a9c5da111d7ada3365</hash>
        <hash alg="SHA3-384">d21cc3459871a9f6e9a893df8f8bcb85a4f20cee96e821098e2a0f2655b20c9f01f1139e7dc4a80444d627d9854c56f6</hash>
        <hash alg="SHA3-256">bdf4b087b5d0ed2473c5ff7524b7c6dff791738715aa5499f14ed11729b3690b</hash>
        <hash alg="SHA3-512">fedd50a88c651e5a5da1639d5c507634bd50cb9103acfdec9e0db7827656855b7d1ee19ec7318de91996e86dc5e9c38f1b507433498c75ae327b865534999a9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://codehaus-plexus.github.io/plexus-xml/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/codehaus-plexus/plexus-xml/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/mojohaus-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/codehaus-plexus/plexus-xml/tree/plexus-xml-3.0.1/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-interactivity-api@1.4?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-interactivity-api</name>
      <version>1.4</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">786445feb10c620690d33af22773e556</hash>
        <hash alg="SHA-1">089039c8d54a2dc00524274d98fb5183818099f7</hash>
        <hash alg="SHA-256">3d82c3b8afb0ac42d0087adbb6d9aa77e7253beb6e8b31f9159a3fcd74d5ee3c</hash>
        <hash alg="SHA-512">fad1a170fcb18b64f97d440c8345d2742bf6ab701569b7ebf6e458881ec0394dc4184a0b0b0a91c7e9a1d1411e3930f05c752cad4c8e360c3bdc5ab3cb3999b0</hash>
        <hash alg="SHA-384">4e82330ea4274db5c4fcf05061125a6607ae4f64ec4f337fd375a125f858f8d8d825dc0071e7119c59ec4fb5be792282</hash>
        <hash alg="SHA3-384">3480fdfbe7d5be1b41a650b0937497ec81fdd761977bae8fcaf599366bf8420332c8c007d3892063fc41256399a078c7</hash>
        <hash alg="SHA3-256">277a828919fb4bcc599dc036291c44e8b9a9c046b5d13935d605a62634a4a323</hash>
        <hash alg="SHA3-512">5042b72f37eeadf8e2da49ebafdf9d4c0dbe7a3f7fe50a71b352f0b57afef895b97e630db6de13b536351922469ba8b81672777b7e79a68bbe11e91e76d7bab1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-interactivity-api@1.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://codehaus-plexus.github.io/plexus-pom/plexus-interactivity/plexus-interactivity-api/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/codehaus-plexus/plexus-interactivity/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/mojohaus-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/codehaus-plexus/plexus-interactivity/plexus-interactivity-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-interpolation</name>
      <version>1.28</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">68fd3527539ddb2a42e2e776ad8240b7</hash>
        <hash alg="SHA-1">90d3608cd99f21717a581f036a1c69ff762f5ed6</hash>
        <hash alg="SHA-256">ab2a8715570438a2e4164d85ad3e8d489eabc38ea5093c2eb8ab7f58403535b5</hash>
        <hash alg="SHA-512">3684e8d20c9bd83082b053a69129e6b7192d78a14f17a02942236fcb254425b36b0eb6b31f78c86f06d6f83f50b77bc1767cc3c46ced172db801ecb9750b6502</hash>
        <hash alg="SHA-384">e35cdc38959f787d38c65de38702c9f58ffd23dc29aaf713114a28ffce595a31ea2c28abeb233c59f7b55705b6b90b88</hash>
        <hash alg="SHA3-384">9bc157f46aab17f546dcc575c179de0914037f935afc73ec4eb20272db355623cd6738c0fc5e70664b6cb3ffddd204a8</hash>
        <hash alg="SHA3-256">886e82c9884b4d08a163e0f75d2a91355f6ee825e972cc811857373124bcc4e0</hash>
        <hash alg="SHA3-512">3b35d7c1af3bca14c827048d81ab71ff8a1a2e4a40dc4f901b650a5996f5324d8e68ce497bb7a14d69ed23e3d5ced4e2526afd6180a55b9b949297fb0db8a53d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://codehaus-plexus.github.io/plexus-pom/plexus-interpolation/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/codehaus-plexus/plexus-interpolation/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/mojohaus-dev</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/codehaus-plexus/plexus-interpolation/tree/plexus-interpolation-1.28/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-sec-dispatcher</name>
      <version>2.0</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e68635a721630177ac70173e441336b6</hash>
        <hash alg="SHA-1">f89c5080614ffd0764e49861895dbedde1b47237</hash>
        <hash alg="SHA-256">873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb</hash>
        <hash alg="SHA-512">ad4e814c8baff780a4eee064903e52b09ae00420a59fb075ef72dbb8d64d12d3d5009b03d56c15f93587d931c3a7f06cad6351ab2dc9415ccc6eeab0daebeb07</hash>
        <hash alg="SHA-384">4af3426b6409cce7d5fcda4e2af407fc2dbae9873e06d98332bcd032c0039d9080a291e42223ea2bbef9825d3d63493f</hash>
        <hash alg="SHA3-384">41720858dd5804f9cb26a8878c16dbdf0372a90e99c037809fe76c3de2c5517ba252af8f8cdf534c1a09900702e6a917</hash>
        <hash alg="SHA3-256">50fa723aefb551a3fd5888375d01f1d776c534cdf833baea392818e9bfa8166e</hash>
        <hash alg="SHA3-512">a43f823d31b377c0c7ec8d36ace69e5dbcdaf4dc4ebb45ff0561fea9e12d74c06090ee24b29b06769d4031693faf5d7e3146583d3a64bfaef6b7c79773a8831f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://codehaus-plexus.github.io/plexus-sec-dispatcher/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/codehaus-plexus/plexus-sec-dispatcher/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://archive.plexus.codehaus.org/user</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/codehaus-plexus/plexus-sec-dispatcher.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-cipher</name>
      <version>2.0</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">55d612839faf248cbe3e273969c002c2</hash>
        <hash alg="SHA-1">425ea8e534716b4bff1ea90f39bd76be951d651b</hash>
        <hash alg="SHA-256">9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a</hash>
        <hash alg="SHA-512">8f187b07867a7c29d77454aae4b76479300238d9c4e777c1afa2aebe33b88dab916e29111dd55acac1341849f4579fe91a5470fdd45ccba0e05709c2ce3a1d65</hash>
        <hash alg="SHA-384">6973eefe06a8992aa8db1775c0f43a84cbef54eeea9122a5a30c362af3e4fb13b6cbd6fba229142e2a4495f97d71f409</hash>
        <hash alg="SHA3-384">ea780d218f96e61005c5582bf3785ddbb33b53ccb4efbffd76ab58166cf261d3c256d52fea28759380684b7e9b0db8eb</hash>
        <hash alg="SHA3-256">e2e51d5350ffdce341464ddcdf9ae60108bff40bf5174dc6be43e33ffcd84af9</hash>
        <hash alg="SHA3-512">f3e17ea31bdefc8094ba3495b8231ec7f90c7175839b009d9fd230110b66ac4c68c912fda1a6e644d93dbce639d738e2535f1ade5841e072a604f5f8ac536729</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://codehaus-plexus.github.io/plexus-cipher/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/codehaus-plexus/plexus-cipher/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://archive.plexus.codehaus.org/user</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/codehaus-plexus/plexus-cipher</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-invoker@3.3.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.shared</group>
      <name>maven-invoker</name>
      <version>3.3.0</version>
      <description>A component to programmatically invoke Maven.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">adb05ae23cfc780b9dd6899870840378</hash>
        <hash alg="SHA-1">a4b04e28abf90c3528868545176c5fcd6dcfa06a</hash>
        <hash alg="SHA-256">f9785c3bcf4ceec8208b05199adf473115e4e49ea66e60b2b533beb743c67a2a</hash>
        <hash alg="SHA-512">4713a1b47d73c5458cddf7d992bd9b826a21a70d8eccc8718033f11c83dc3d52c966964e9828459f7682244d93f8ac72337e750c295cbbf9216ba9aa7f117d68</hash>
        <hash alg="SHA-384">4a9b2803a1fa26ec58e883beec834c7650aa23c7c2615a4fd9148fdf660bbc78c357ed4fed44fd649e46de053c3f6380</hash>
        <hash alg="SHA3-384">f4ddcb6fc140ca5797ff4e05404e5beb0c2a241fe4ee2033ca1fc0ca7d38728258133ae45a920b0656d85b8e0cc12313</hash>
        <hash alg="SHA3-256">feeb602f8d473b4bbf663d93a110ff22f444e8cc133df73b3dc612bfb47a203a</hash>
        <hash alg="SHA3-512">a11746d4b1fcf4e46df2c960630fb74ce271a1867915b113a48534bc0deb8ce409df9c72b1231539f2aee4e0646fbad57e0943a3bfdf646e5de29eec4d1ca989</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.shared/maven-invoker@3.3.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/shared/maven-invoker/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-invoker/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-invoker</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-invoker/tree/maven-invoker-3.3.0</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.19.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

  The code is tested using the latest revision of the JDK for supported
  LTS releases: 8, 11, 17 and 21 currently.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
  
  Please ensure your build environment is up-to-date and kindly report any build issues.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2ac2db154e365d55d167ec1215125a3a</hash>
        <hash alg="SHA-1">d6524b169a6574cd253760c472d419b47bfd37e6</hash>
        <hash alg="SHA-256">32733ab4bc90b45b63eb72677d886961003fd4ed113e07b1028f9877cb2ac735</hash>
        <hash alg="SHA-512">24cf9bfc7c32736277d2a1e82a455d004ec7d4989e8d0dc2831c910a04b6ff8b30ca9c49ec25562cf0b7f1ffc27726e7510a54bb99e75a3be83ddf6030c37978</hash>
        <hash alg="SHA-384">90c567c8f42b58d0f3f24233260258e7e3bae1f8284ee33f9730e1cecc4fe2c98b7d6ebbba2a6598b50d444ddfa70722</hash>
        <hash alg="SHA3-384">397a7aafd4f66cdec80cf4682a72db0873b3fc6a3db3cdd7be747b24ae13804dfc290e2441a115d50b0add9ce76af2dd</hash>
        <hash alg="SHA3-256">4c0809e7ff0474603b0a1bcdf2f745cec9233ffdc6c652b077d93f2630d52f8b</hash>
        <hash alg="SHA3-512">25564027878618e00dc24ea5caf8365a9396c25597aaf4ea8a37997fd699dabdf4b6f9ce4c1c9f86abedb4afa26041ac234d238c63ffecc207ce2068a6271956</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-lang/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-lang/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/LANG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/commons-lang.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.scm/maven-scm-providers-standard@2.2.1?type=pom">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.scm</group>
      <name>maven-scm-providers-standard</name>
      <version>2.2.1</version>
      <description>Parent for all SCM providers supported.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">240a9a618a1de1f9ae8da4a8c3b3d3bc</hash>
        <hash alg="SHA-1">a08ce7480ea74dbdd26a5207889ef2cc51e549aa</hash>
        <hash alg="SHA-256">13d23e1a0d59e8504efd69477f4623ed1581f8cae70e222e04693f2f5827952d</hash>
        <hash alg="SHA-512">933d56803e3bb427f7fdf1438f308dbee50d1e0e4cc86b286b0a4f31ee94b3a341d41cd21c1210fb52f484dbf7d02f75d11802c87d087ff3523f46a6fb407ca8</hash>
        <hash alg="SHA-384">82bbefd1f433251267beabda714f2f2aeee05709400f8587c43dc243733a2914349f7b60b3c60143da4848e9bfcb8f76</hash>
        <hash alg="SHA3-384">b19f7971a67ad4de8b0426e68c429d380ae3b93cbef7fbc74dd759e080ac101d97237847e11bf06a412c85d3f49af7fa</hash>
        <hash alg="SHA3-256">8b1c06de1835126f74568ccd602cb72c2509859f15d063ae7164bc34fe96bf3a</hash>
        <hash alg="SHA3-512">f2ed96c75b14412ddcfb8977718dade8b35cf40b9e02b693f7276825a0a6ec171dc1a255dc5de83f57163527a682c0531754607d8a545b2185eedddb6f52763b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.scm/maven-scm-providers-standard@2.2.1?type=pom</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/scm/maven-scm-providers/maven-scm-providers-standard/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven-scm/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/maven-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-scm/tree/maven-scm-2.2.1/maven-scm-providers/maven-scm-providers-standard</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-gitexe@2.2.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.scm</group>
      <name>maven-scm-provider-gitexe</name>
      <version>2.2.1</version>
      <description>SCM Git Provider relying on the Git CLI</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d2d9bd2231cb02449f93274809d98754</hash>
        <hash alg="SHA-1">fcf03560d007dc1c4c9da27ee481933bae7ed274</hash>
        <hash alg="SHA-256">e39b2dbc6e7c2c678648aeee3e7698c0f67678b938d05bf9b14c7826a5458adb</hash>
        <hash alg="SHA-512">b71da2528c634b32b469bd7e1d9d309dae7cb327f7f3eb45961580ccc87d7649bcd49c14120f30dcbcecab9c38e4fccc21054b3ea344d90a858a9e3872e5442c</hash>
        <hash alg="SHA-384">439153ba7fe95107601a7506fc0e51bfad4ec0a2c285c8efdc33ad113a426aa46bec9260cbdae876a601eb9b96eaac4f</hash>
        <hash alg="SHA3-384">ceecff401dd771577ad11a2fdbc4014bdb135188b86feb5dfb9d8ceb0223ee8fb42c5bc7fc7a9ced21be6b2a482a28e7</hash>
        <hash alg="SHA3-256">718b81e595554fb0d801fad89dcc70da8152dd800cf6b3186fce9462c5e3330c</hash>
        <hash alg="SHA3-512">461ab5ad2f35570484265fa1d197b7f5226b78700cfa5ea0d93fa2b38470ae9b2d57e6afb59f4b190809c69e546a6ca3a84666709a086687c92f94cd1d016dbd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.scm/maven-scm-provider-gitexe@2.2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/scm/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-gitexe/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven-scm/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/maven-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-scm/tree/maven-scm-2.2.1/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-gitexe</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.14.0</version>
      <description>Apache Commons Text is a set of utility functions and reusable components for processing
    and manipulating text in a Java environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">54960a12a82d52df3d5548d6934d87b2</hash>
        <hash alg="SHA-1">adcb0d4c67eabc79682604b47eb852aaff21138a</hash>
        <hash alg="SHA-256">121fce2282910c8f0c3ba793a5436b31beb710423cbe2d574a3fb7a73c508e92</hash>
        <hash alg="SHA-512">4975879372241025bd0a47fe540ed7d0cd3e5eba474b12af67a8c6016be0fbb4f4a3a4a0064f4d2b6aebce67d88ee814da345a5ba3a6ee4f6293b3b4e7bbd065</hash>
        <hash alg="SHA-384">a038f1a8b58bb7ec17ba55238d3e40f5d9386dfb17870630a728b22741a9592819374e9abbbc6402a439eea4db5b739a</hash>
        <hash alg="SHA3-384">5325922bb72aa73d2d51cb3fb5592fc77097614fd3ab3ac77e3acdc0fe1dc8c18893cdd9a05768bb725fa40dd8c14527</hash>
        <hash alg="SHA3-256">31008266592ec8503bcc7f6b4e7125b0e377f57f3a697cdcb02ee7f20f84ddf1</hash>
        <hash alg="SHA3-512">385249425d8c6ab181039195a03c6337f393a1e1419527e9f072d695367bc0bd6546e752d1912df557bd8788329f7609aa1c63ce42eb135e2d27b6141ce9280f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-text</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-text/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/TEXT</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-git-commons@2.2.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.scm</group>
      <name>maven-scm-provider-git-commons</name>
      <version>2.2.1</version>
      <description>Common library for SCM Git Provider.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">27481c012ba069b900c3c8e7f2b4a79c</hash>
        <hash alg="SHA-1">ecffb44a1ef2fedea19ea361a676364046679a69</hash>
        <hash alg="SHA-256">2002d91bf483d6ec6686c12f12a1cdcc21330d3547aa8cc15ed7e9eee543ae10</hash>
        <hash alg="SHA-512">6ebcc8332f9bd69247efd090b9be788af38b7575747497c203aafbeb011d5479cf5c2e8d2601f62a2f21a237adb9b245c8dbf7b555a21c0367ca3b0b7e3fb9e7</hash>
        <hash alg="SHA-384">91dc9bf1e4f3e833b28a64215f31205dfe8f062f329b361146ae2e168e4d21de008f686f1206ee9a6096bcbb0391bb1f</hash>
        <hash alg="SHA3-384">38196d31636b38703b30de0447252df9478f6432f2020186060f6b25c64c0d6f1a4d2e6588d739750fc9a66f15800449</hash>
        <hash alg="SHA3-256">935db93fd8f57dd706eff835847d2f4daeb8c9b60a5bc26b8d7446c46c59a130</hash>
        <hash alg="SHA3-512">a1e7a824b299124844d9dc4b8ccc609d932de60c51cf8f4e20f91a1549ff4d22ad79ab42bb75898468a3218fc295cf618668908c739f748cc73f5fd9e44a7744</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.scm/maven-scm-provider-git-commons@2.2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/scm/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-git-commons/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven-scm/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/maven-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-scm/tree/maven-scm-2.2.1/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-git-commons</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-jgit@2.2.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.scm</group>
      <name>maven-scm-provider-jgit</name>
      <version>2.2.1</version>
      <description>JGIT implementation for SCM Git Provider.
    see http://eclipse.org/jgit/</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e97c61467207996d7f472cca4600d223</hash>
        <hash alg="SHA-1">7bcf1817d07349affbfbc3434fb17dfd336a229c</hash>
        <hash alg="SHA-256">390d3d0a0ec09cd5d9ce4260351bd23b54e36b24770332ab67621fb51ee30172</hash>
        <hash alg="SHA-512">101849d1e83038a936aa16bbc95f12ab49ef773cfa6a9b3ae265c03200c3d22599d5bbc2b39d9f8da9bd5777661f4fd60719255d6cbe0ac49ae8e9134731f48d</hash>
        <hash alg="SHA-384">d81ee949231c397aa81666d94cd081c599b5470849fd40ca1814d4e18f59868264a3e3e544c63d167dc104aea2c07df3</hash>
        <hash alg="SHA3-384">e7dec765c9166fd9844175b977ebb210f46adf8d9160e882037ebe7bf5f1ae57f63cf6261c984574d9cadb3a3ff98a01</hash>
        <hash alg="SHA3-256">6aed05bbc3265e57e5d20f04e1fb8cf58d59d4ae621abef24aa203b1970d3a7b</hash>
        <hash alg="SHA3-512">c4930cf2b2095c0ac5ef9dd5b2bfc251465ed00c56c2d1bbeb274bb78c509271cb78985797ca017f492f78a85210be972e3901d74d461e0456acc77214193df6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.scm/maven-scm-provider-jgit@2.2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/scm/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-jgit/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven-scm/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/maven-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-scm/tree/maven-scm-2.2.1/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-jgit</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.3.202401111512-r?type=jar">
      <publisher>Eclipse JGit Project</publisher>
      <group>org.eclipse.jgit</group>
      <name>org.eclipse.jgit</name>
      <version>5.13.3.202401111512-r</version>
      <description>Repository access and algorithms</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">37a213f59c76b11db423c37a1bfe084f</hash>
        <hash alg="SHA-1">7949cce60ba913f99259a0f421ab5ebf6c2524b4</hash>
        <hash alg="SHA-256">dacb74c28b089bc378f8c2a1dcda5110c20f52124f5a020aef2684d70ef7f1bb</hash>
        <hash alg="SHA-512">d027115ae98f41ba48f7c50af80e8f993642284aed61a8d66367203b0360a24b9622211eb974eca6b8ef30282bc09704380bfe6155ab38556dea7b9006bd32b3</hash>
        <hash alg="SHA-384">16881231a96dc4267049d22173e096fe0eda459f2db9693509cf15617f1013c8ab13ac0749f7e2a6813af92ff64781eb</hash>
        <hash alg="SHA3-384">ab12d1cef1eb89bf7a3d38d4c6743f65a522c3dc0c4b05104b3fcfad096b5672f70df60bf2f2c5a36726afff05a9b216</hash>
        <hash alg="SHA3-256">1f5e539444eba6a6e5c56b927cb6631963b437019935c1a87f6fdcc566c5f7fc</hash>
        <hash alg="SHA3-512">353355d7a6c4922a4ccc2023826334318e9b696b63641d189e9fbc03eb25c11632be44ea1cc7fc81eb7c3ec8a464a3debbf91dfff1c9a91db6b71e34edd8b205</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.3.202401111512-r?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.eclipse.org/jgit//org.eclipse.jgit</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.eclipse.org/jgit</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.eclipse.org/content/repositories/jgit-releases/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology</url>
        </reference>
        <reference type="mailing-list">
          <url>http://dev.eclipse.org/mhonarc/lists/jgit-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.googlecode.javaewah/JavaEWAH@1.1.13?type=jar">
      <group>com.googlecode.javaewah</group>
      <name>JavaEWAH</name>
      <version>1.1.13</version>
      <description>The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression.
  JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme.
  The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a1eb305e5cc5bba238d4360e3139abb4</hash>
        <hash alg="SHA-1">32cd724a42dc73f99ca08453d11a4bb83e0034c7</hash>
        <hash alg="SHA-256">4c0fda2b1d317750d7ea324e36c70b2bc48310c0aaae67b98df0915d696d7111</hash>
        <hash alg="SHA-512">5a3821a07eebc9b56f87054c71b9bafa0d9d0b556aa16191f8676d748cec755a741cd5500e8676493ffca69e6c9608caf86d80b60b5934ee108d77030c490194</hash>
        <hash alg="SHA-384">5eae5ef0a6fbc29244cfd4c758834371266b2c1a767de6d65e6e5a7f458e8ae41dd92f74232b267591eba367d05a1cda</hash>
        <hash alg="SHA3-384">5c9ef6d1620a72506f5adc77cea0c6a4dc8e03fb7753cea90bfe5d6c9e12396c1bfa394721e45a398ce578ae2f7f67bf</hash>
        <hash alg="SHA3-256">66d5629a6ab04f994475137e9677dae9fbb77f9249ca781204987357e15d6c34</hash>
        <hash alg="SHA3-512">cb6b876b3cb354679d1a6cc1af912388a56ef99834bc1381c32c92f330d36a4a429882b323a29f31945101ad45bfd7a4d28c0a3574a79e1396238ecb29a71a04</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.googlecode.javaewah/JavaEWAH@1.1.13?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/lemire/javaewah</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/lemire/javaewah/issues</url>
        </reference>
        <reference type="vcs">
          <url>scm:git:git@github.com:lemire/javaewah.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@5.13.3.202401111512-r?type=jar">
      <publisher>Eclipse JGit Project</publisher>
      <group>org.eclipse.jgit</group>
      <name>org.eclipse.jgit.ssh.apache</name>
      <version>5.13.3.202401111512-r</version>
      <description>SSH support for JGit based on Apache MINA sshd</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9ef2fb9de8764177dbd5169682b765fc</hash>
        <hash alg="SHA-1">c7603dae536aa086cccbac433d953b83154b7427</hash>
        <hash alg="SHA-256">b89de5f791712efb07cf22be871de65b22645be5296233b6cadbcc6f2cd8eb4d</hash>
        <hash alg="SHA-512">610e7159eb1d1b005d0075cdce0946e95a2ea28b43b8ec372cbb15385378ae2199b0cae4baa34cd42555b8c34e6148f1f4d1823a32699bd203d22e3ce2d4359a</hash>
        <hash alg="SHA-384">a5aeed2563be457a3eb0223f9eaa51e345386ae0de407f131727a2c4d392e5b93fdc4c46d658fddd998dd49f5723e4d4</hash>
        <hash alg="SHA3-384">75563281e55ec16e824ed81a9029370d2e93ed91a0ed509ac4d76dfbe33b0428c30c878890e67bd7bcf5c5b2aafa3dd6</hash>
        <hash alg="SHA3-256">019fd874108faf4074a12ccf314824263dd044409312ed53b2676abe84abcafc</hash>
        <hash alg="SHA3-512">8379baa0060fababfc9ceb02a9a847c7f795086c1598c17ca37014795a6be202e4b94d63b1708f21bb37d8ff1c897de9eb942809cfe551fea4e8a06d46c3f7b8</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@5.13.3.202401111512-r?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.eclipse.org/jgit//org.eclipse.jgit.ssh.apache</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.eclipse.org/jgit</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.eclipse.org/content/repositories/jgit-releases/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology</url>
        </reference>
        <reference type="mailing-list">
          <url>http://dev.eclipse.org/mhonarc/lists/jgit-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.ssh.apache</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.sshd/sshd-osgi@2.7.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.sshd</group>
      <name>sshd-osgi</name>
      <version>2.7.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">19b45a04d902be3e1a8ab0692ad0d7ed</hash>
        <hash alg="SHA-1">a101aad0f79ad424498098f7e91c39d3d92177c1</hash>
        <hash alg="SHA-256">17195d9df825d8c04286df1e2184f1e830bd8e9b5b7f788cb567eb3de65275d5</hash>
        <hash alg="SHA-512">c94bf65a74fc7f44735b3c7dad9a9cd5cc906174b19615bb16b6d325cea6e3584502ea9a4813f7153dcda4a9ddf0822700c9ac73e056ca2b5dc65db4c0610ad0</hash>
        <hash alg="SHA-384">41c7da9620807e0d40ce769110164631c53ae0485652b1c26d457e9a52f224bc7eb52a67598f720f20a250c093381d12</hash>
        <hash alg="SHA3-384">72be4d6e2b44eb153788c100297cddf4b1cace4ce65956f3fa1eb83a2788b0825ea23fa6f13bd59cb7002646d78b7078</hash>
        <hash alg="SHA3-256">a2f6fa7178f2d9f2b981c73bae382c9df32c3963fdea30b29ba081568e238f05</hash>
        <hash alg="SHA3-512">e37434910175c1127593897e96b77eddbd55168c18370b2637c61110b7cad2b5c767743936b1e59b6361aafbff3bcf072c705e1da2ebabbfb81aeb3ef6e64b57</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.sshd/sshd-osgi@2.7.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.apache.org/sshd/sshd-osgi/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/SSHD</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/mina-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/mina-sshd/tree/sshd-2.7.0/sshd-osgi</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.sshd/sshd-sftp@2.7.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.sshd</group>
      <name>sshd-sftp</name>
      <version>2.7.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5c941a20eeb43c2ae7dda61de46e75bf</hash>
        <hash alg="SHA-1">0c9eff7145e20b338c1dd6aca36ba93ed7c0147c</hash>
        <hash alg="SHA-256">90692aaedbc6a1d7f5e61a03d811dd0cc6058b424a86e82d96843e2f5287b70c</hash>
        <hash alg="SHA-512">9b4a459f924c74a317e35551922e65b176b79eea200eadd2e6ad7b03177389b7520d58b6ab047f6a46534aefa3245548e4934781f2a2eeecd2b6b8a00cc2f487</hash>
        <hash alg="SHA-384">973cc73f8ad9e68a3bf03d27a27939cb9cd3a537397234c78b496a0ccfa463cbae71c51255b1f295273be785ca6f1df7</hash>
        <hash alg="SHA3-384">3bc61b1ad6fcc822c8e22f961c838f858b9d21ea748d2c870bc6f7b0d229bf17148ca1063567eb1d586a98f7b80b6ac3</hash>
        <hash alg="SHA3-256">2bdf8f342480beda72a14122f2961800eea7783ed8c6efb98a07dfd17b8c8c4d</hash>
        <hash alg="SHA3-512">bef076eb0adf64dedd7ceefd25966f2d15fe38a5b318c3a0bb27491e4b53eae9639a2689784d4817a59bb22bf71ccfe340d7028e6f2eeff7cebd2c2275e14393</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.sshd/sshd-sftp@2.7.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.apache.org/sshd/sshd-sftp/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/SSHD</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/mina-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/mina-sshd/tree/sshd-2.7.0/sshd-sftp</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.sshd/sshd-core@2.7.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.sshd</group>
      <name>sshd-core</name>
      <version>2.7.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">38d8a9c37469025340a1f5bfa68c7f86</hash>
        <hash alg="SHA-1">6059f31f67f82b815e334faf3758037f473c59bc</hash>
        <hash alg="SHA-256">2f23d666dd1fd3317891d784f324542e236d89658c02adc7c02d137aa556e636</hash>
        <hash alg="SHA-512">6ba2b0c18d3c6b2cb20fac12497a983a691e554aa21f83f5f0eb3e233a46745facc37b53d890785a4807efb64a49ca47242efe6ea96c1442e97ea21060c0af38</hash>
        <hash alg="SHA-384">0ccbf2f3d687c4fa76e339bd1668ab076b8b2ddb4a321420c14fd72a91ac674785baa77667c209a2fad02bac1b26ad08</hash>
        <hash alg="SHA3-384">603ef1eb182c78ebfa00691736acbfb202db529b1c1d5a9275e5dcb9c7309f0b102ed15ee1a8082f2f2b76663842048d</hash>
        <hash alg="SHA3-256">67fd656ea63f76f4078772c03a56e5c8a99275750e08c3d5424a5617b14d0480</hash>
        <hash alg="SHA3-512">48056de46a3b6e97449a983bfc04122f000b65c3a91097430805c48c3b8d4812105fb05c70e25379214f71fb0064b7587aa049acc4e337f13961d7f313127bca</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.sshd/sshd-core@2.7.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.apache.org/sshd/sshd-core/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/SSHD</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/mina-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/mina-sshd/tree/sshd-2.7.0/sshd-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.sshd/sshd-common@2.7.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.sshd</group>
      <name>sshd-common</name>
      <version>2.7.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">727f0f3106d5ad14ee8bd0b71266abf0</hash>
        <hash alg="SHA-1">468c0ccd0947287e6eb4c23e1d8e40a3c66bc245</hash>
        <hash alg="SHA-256">bbd38821c00f4b0d20271d8a4cd89336d7e7ac57458486c1c9c3798a6e4b873d</hash>
        <hash alg="SHA-512">946aabd681703ce663bf9b29f06caa9dc02b4374f3538130d74777af58bd2deafad22bd2ae0da7c58b305b2fcb0d169c4baba97c699cb02935fd3dca112810c9</hash>
        <hash alg="SHA-384">2f9be4c1126ea57935823c8981aceda61782890c1221b1cb76f9faeb32a2113c6128e5826ef84e042bfeda6f0917a26b</hash>
        <hash alg="SHA3-384">864e9eb4ae68f57038438f3bca7079f5c2ebc6bfa3087f25b4c22ea2055f85ed78542193958afe1557a9afcd878083e0</hash>
        <hash alg="SHA3-256">a7ebab258a8225debe68c62f44dbea32098042522bd519da8aa67f8f6f87c367</hash>
        <hash alg="SHA3-512">cdb9c05ca3228325a461b7a4b23b52b9473f0227369823ddacbaaedf6ffe5192fd4402988675ba5b5394ea573b4b7b636fc57a1065ff6a7c17aca2749ef4fd15</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.sshd/sshd-common@2.7.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.apache.org/sshd/sshd-common/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/SSHD</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/mina-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/mina-sshd/tree/sshd-2.7.0/sshd-common</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.i2p.crypto/eddsa@0.3.0?type=jar">
      <group>net.i2p.crypto</group>
      <name>eddsa</name>
      <version>0.3.0</version>
      <description>Implementation of EdDSA in Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ee7de3b6f19de76a06e465efc978f669</hash>
        <hash alg="SHA-1">1901c8d4d8bffb7d79027686cfb91e704217c3e1</hash>
        <hash alg="SHA-256">4dda1120db856640dbec04140ed23242215a075fe127bdefa0dcfa29fb31267d</hash>
        <hash alg="SHA-512">637e75ef4b58b280af057546afc176dbf3becf2b69f7dd31a716a90e01c01d7b1bcd400b29efeeea6b34df9ade7922c0665a000a3a2db5a446df293f8d1429cc</hash>
        <hash alg="SHA-384">e13f22b10a675c9a4180ac051c7e07b839e2131188837071e8760162377c649d7c56e64e279f5ff990547495535b4632</hash>
        <hash alg="SHA3-384">fa7f056ced9efd6cd90b124ef97a63007d9fe68ffd954c9bbdc15229af958807122460a79aa46f1bcbfff0036afc71d4</hash>
        <hash alg="SHA3-256">852e263100c291206a8a2afa9a2d9e6f486d3ef40a7fe3b1c3d58e5a8a2c8b60</hash>
        <hash alg="SHA3-512">0a8c062bec2abdbf97028611b5001b392a433183c1467383e61deab3bf4481f3766c3c7290cdca8bd02a007d7dcd8f2ace99a6c07eb3f74aac48ecd139ba3884</hash>
      </hashes>
      <licenses>
        <license>
          <id>CC0-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.i2p.crypto/eddsa@0.3.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/str4d/ed25519-java</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/str4d/ed25519-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>jcl-over-slf4j</name>
      <version>1.7.36</version>
      <description>JCL 1.2 implemented over SLF4J</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8065610cde33ed9fd5d34367912c1938</hash>
        <hash alg="SHA-1">d877e195a05aca4a2f1ad2ff14bfec1393af4b5e</hash>
        <hash alg="SHA-256">ab57ca8fd223772c17365d121f59e94ecbf0ae59d08c03a3cb5b81071c019195</hash>
        <hash alg="SHA-512">ac231ab44521bb5478742af13624db5c14aea809c3a2c13b989fba30186ba6db840f2d1b4aea54f9c1f779547b975fd042dd353f54025592774d40192bd71148</hash>
        <hash alg="SHA-384">618704032ab3f8f87091ac797e2c9319a4b7f36a53e060695d56173b67ce9bc9e16c74cba228e758ac90e279df75428a</hash>
        <hash alg="SHA3-384">95a189173932d8080d91de8b71b9d1bca49a330db7cad9c41d51fe9514a9f6299b24e31441f06681b3dcc188807dcf40</hash>
        <hash alg="SHA3-256">7aef3380fdeae9b7a4adfa6ad69c2c92f246fcdbd4fcd3d1056ee846d8ef92fb</hash>
        <hash alg="SHA3-512">da7d1b8e5a150300e1051dda5755df64275e5822256ef624fd8a37c582cc2774aadce97f8732de52e54b1c74e28ba601d3bfc3482abb4a24f7e9f779e7e8dd64</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/jcl-over-slf4j</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-hg@2.2.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.scm</group>
      <name>maven-scm-provider-hg</name>
      <version>2.2.1</version>
      <description>SCM Provider implementation for Mercurial Hg (https://www.mercurial-scm.org/) relying on the HG CLI.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ae4787ac558b25630d5b57e2cfd092af</hash>
        <hash alg="SHA-1">bf642740e9c2aaf86a7b035af291720840316c84</hash>
        <hash alg="SHA-256">24662a4829426557b361b4582d268e13a791cefb637c7d18b62a4cda64e8cad1</hash>
        <hash alg="SHA-512">6384c395f36505864ea2f00317491f33871bf0648c36e6006c3618b8debd19525727d06eecd14908c48bb124f21066190c7f57b47b95111a65431a52266b95f1</hash>
        <hash alg="SHA-384">319b9c918fa16bebdd5cf4e13bcb88f922cc39d570df732c329980d2428983f247f4161efeaf0bf6e6d48cc1bef5bd80</hash>
        <hash alg="SHA3-384">87db4843bea3fc65ddc60a863deb55a15dc5109307cebea33bc5ebb6b3fb370331830f1ef693d3a4d023386ff3de9e96</hash>
        <hash alg="SHA3-256">cf2cec8bd02a86a046586c32f918a28c60d2e56a8db89936abd5fed65e7331f2</hash>
        <hash alg="SHA3-512">1500c150356070b326806b6923976e49616ebade4d4a68131b6e09b94075fac31ef36b578814a5d7b71236171097a7e1d28c1e51e727c787a6900298b7288a52</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.scm/maven-scm-provider-hg@2.2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/scm/maven-scm-providers/maven-scm-provider-hg/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven-scm/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/maven-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-scm/tree/maven-scm-2.2.1/maven-scm-providers/maven-scm-provider-hg</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-svnexe@2.2.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.scm</group>
      <name>maven-scm-provider-svnexe</name>
      <version>2.2.1</version>
      <description>SCM SVN Provider relying on the SVN CLI</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5e7eeff1bea19182a5b178a554658f63</hash>
        <hash alg="SHA-1">f1ab17116835a54e90cd47aa49d883ff64ffcd60</hash>
        <hash alg="SHA-256">f114c01dc69290698dd5df00202436e266b465ac183381c98ac8984d8c95e36e</hash>
        <hash alg="SHA-512">8238dcb0a1c5723321ab24f88b4b2b5794fe1d3e2c3f00d5ca7367bf9c3a593ed63d8a97cb9ce43dcee645bd6450b925d944cd5cb9120ef53222b53e1827435a</hash>
        <hash alg="SHA-384">c96d6943a50911c174fe37e2f47f0e18bd1bad170807490be8db5eb6a227c23e378f9092fa96878510408130b54d33d4</hash>
        <hash alg="SHA3-384">157d831b447c60f35169b881b29c34085a1fb8992eedcf3bcb1bde56fa1691b743a47f75cf971b11a9099f21c5537c9f</hash>
        <hash alg="SHA3-256">d24169c670e9789420a6feeeb532f0d5af92947626b57cc9f4cb172efd3ac124</hash>
        <hash alg="SHA3-512">1878fa85b7710b8a051b8d72fc05ba59d8a947959a4178c5fc9e9bdc935de81e24fc6ec2170fc57c49ed755456d1722d7f5ce4714bd51b1cf32207c84c445f65</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.scm/maven-scm-provider-svnexe@2.2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/scm/maven-scm-providers/maven-scm-providers-svn/maven-scm-provider-svnexe/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven-scm/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/maven-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-scm/tree/maven-scm-2.2.1/maven-scm-providers/maven-scm-providers-svn/maven-scm-provider-svnexe</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.scm/maven-scm-manager-plexus@2.2.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.scm</group>
      <name>maven-scm-manager-plexus</name>
      <version>2.2.1</version>
      <description>SCM Plexus component.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5d24b61aa2a5560f49af8b5770418b55</hash>
        <hash alg="SHA-1">ada4c73749482351ffac8f175ce20aeadda8397a</hash>
        <hash alg="SHA-256">88bce530f81b43a8b4c430214db54b045ad460965a80fcbd4ab11501836ecde0</hash>
        <hash alg="SHA-512">08b440a3348a03a818fc1b3ccd154ea7c3b10112b863dc9098cac24a58a388f63dbd5e6069672ecddff774c714b3d934e6047030ff7b088620e8a8cc976773dd</hash>
        <hash alg="SHA-384">713223ded513defd8fdad0b82f1ef142998c18e47e33153d17aacd1e3178a1e595b8f2a840866f67b1161d9f87cc0b11</hash>
        <hash alg="SHA3-384">2ef84cc77bf5d5b2e333edc0b14a69e7b050ae5006b3bde228f9763c280b66a11b73bf88aaf2f68151634397694887ad</hash>
        <hash alg="SHA3-256">1806c31c91ca9a35c8c0269ffe689dc0d7a6036dae8c396d61e175de058bdecc</hash>
        <hash alg="SHA3-512">05af617825fda0ee81a1812c032d1d003082b5685b1cac820887f392637df3adae3cb45cd1016a8dd3605dcb3b20b8d2b5cded5dd31557524d3e1cddc7b4706d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.scm/maven-scm-manager-plexus@2.2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/scm/maven-scm-managers/maven-scm-manager-plexus/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven-scm/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/maven-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-scm/tree/maven-scm-2.2.1/maven-scm-managers/maven-scm-manager-plexus</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-svn-commons@2.2.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.scm</group>
      <name>maven-scm-provider-svn-commons</name>
      <version>2.2.1</version>
      <description>Common library for SCM SVN Provider. Includes the svn-settings.xml configuration model.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">94cc83c00ae367dcccafde0f3b287d1e</hash>
        <hash alg="SHA-1">f6275a6684708b6dab6ad30e43bba19ef7eaad6a</hash>
        <hash alg="SHA-256">0bd9f983b8e5a0ee0e14ce21e256b379c0f470da48efd1339c64aa914264be5d</hash>
        <hash alg="SHA-512">aa1ebfec2bab2219f960c78cb3d0625c453983271aac6da7b6b28405e622d28142f9df1f240fa134d7822421ecbec7e7da0d121904c0440e222adfd1d4ddcea5</hash>
        <hash alg="SHA-384">53fa218cdefea53601c3f4563c2fdc6ac67c236a910c61b5ab0bd0e552429c74588b1010880c99e0757f612f0c23faea</hash>
        <hash alg="SHA3-384">d580c4a8fbe559b21177446c7e35d714087e2e7336c6cec031f145f0ee9f5119457ca9b4b49e1930862b595bd912ef12</hash>
        <hash alg="SHA3-256">488dc8d4bb2075c68591cb875d9144b735d8fb0677403d81b448e020d05c22a2</hash>
        <hash alg="SHA3-512">69ec49364f7af0bfbef09927344e5a51b5dfa747bd81e8e98e99a1079f99727101b7964519dfba7fbce36ce5baa6cb66ca5064b3e5aa345f288cdacff6b41aab</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.scm/maven-scm-provider-svn-commons@2.2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/scm/maven-scm-providers/maven-scm-providers-svn/maven-scm-provider-svn-commons/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven-scm/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/maven-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-scm/tree/maven-scm-2.2.1/maven-scm-providers/maven-scm-providers-svn/maven-scm-provider-svn-commons</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.shared</group>
      <name>maven-shared-utils</name>
      <version>3.4.2</version>
      <description>Shared utilities for use by Maven core and plugins</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">53a038f77a81cb5816ad2b1c7daa8711</hash>
        <hash alg="SHA-1">bfa28296272a5915b08de9f11f34a94b0a818fd0</hash>
        <hash alg="SHA-256">b613357e1bad4dfc1dead801691c9460f9585fe7c6b466bc25186212d7d18487</hash>
        <hash alg="SHA-512">71db8a485a6436cb305276ea9d748f578e1a8ffa1346c8570f7038684ce53d320584174634aeffa1b51629af0171a2d6572854eb07236a83236ad1d9949988e9</hash>
        <hash alg="SHA-384">8f7e2c449282244fea3151ac0c956b42bb7ae6cb2397ca8b18952aea802d33cccad6e08a5f515fc34e52bacfece18862</hash>
        <hash alg="SHA3-384">72ec6c2c5de8cd074bd59dbb8215005bedc9de58795484ec2792fa867eaf13547aaca81daaf06f1ec117d29b21e70cd0</hash>
        <hash alg="SHA3-256">5cf6de29555bde0317d641e8a7afd7d1ed84dddff92c80f8493b4a2873d26c41</hash>
        <hash alg="SHA3-512">836acb2525ddc3b352da7db824e00c0831b25f46cb32a77c1e578b39978621e3c47da3554a901749af15b3981620875a4c4492f421a1833d8eb8e50c4804eff8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/shared/maven-shared-utils/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.4.2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jdom/jdom2@2.0.6.1?type=jar">
      <publisher>JDOM</publisher>
      <group>org.jdom</group>
      <name>jdom2</name>
      <version>2.0.6.1</version>
      <description>A complete, Java-based solution for accessing, manipulating, 
		and outputting XML data</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5be72710c66f3c9ba71f8009e92597d1</hash>
        <hash alg="SHA-1">dc15dff8f701b227ee523eeb7a17f77c10eafe2f</hash>
        <hash alg="SHA-256">0b20f45e3a0fd8f0d12cdc5316b06776e902b1365db00118876f9175c60f302c</hash>
        <hash alg="SHA-512">81642db76358fbf131dfe9c2f1d9c280fc23b6bfde6a16a2d36dacc490a1a2af4e0fb4abb5cd78005718bb1d158a42fd6834cd2bfe616ec59625df01951f2478</hash>
        <hash alg="SHA-384">b50c9b35d4b884a4f6174febd926533d1a23d1779a5b757b2ec95fbf8560771379b1abf138b150b170c3ed7bfbea5fa1</hash>
        <hash alg="SHA3-384">2987085748db12fa958ccf2deca4d9307ef4a96730ace701afb39f828b1f513190497f474f26b5b56c8076135f56f088</hash>
        <hash alg="SHA3-256">a33b1e2a9308fe86fe514356807efd152c7be0fdae8e77b28de8c392c34ddcc8</hash>
        <hash alg="SHA3-512">08eafd9535e52f04650bc841b1f92bf2752938d11fab955c631cc448d6e615b281841c8290f102448927d6d29bcd6a8223eafe9e6f36a20ec94b92fe91aabdf2</hash>
      </hashes>
      <licenses>
        <license>
          <name>Similar to Apache License but with the acknowledgment clause removed</name>
          <url>https://raw.github.com/hunterhacker/jdom/master/LICENSE.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jdom/jdom2@2.0.6.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.jdom.org</url>
        </reference>
        <reference type="mailing-list">
          <url>http://jdom.markmail.org/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-plugin-api@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-plugin-api</name>
      <version>3.6.3</version>
      <description>The API for plugins - Mojos - development.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6819bbe98ec09c2e65a497195f1d3344</hash>
        <hash alg="SHA-1">063fe5967b9c4c1b6fa6004be76e1c939e8bd1d6</hash>
        <hash alg="SHA-256">61a48effa6d0c68b07ba50df17b270a7f5527212022f250f6d11dbc11efc0e5b</hash>
        <hash alg="SHA-512">07090ed707bb3364219da130bc7b38a2a2b9fd31bae51144202b52e5e9f8d9690e8b3fe360bb3327fbeaed3b555c42b52144fb87a5854c8ca2226c07d62e0ed6</hash>
        <hash alg="SHA-384">4c328407527e490bb7bc735150747b8d5fb4baaa4a9e1b947baa005fcbfebc672a14523046c4e4c9a07cdd509c699ebd</hash>
        <hash alg="SHA3-384">0f5ab5b2a18350b084d7c1c267553b69094872ba05a556ae055aefb7e176d4f6edeb562c11371f42d105b6de708d2f11</hash>
        <hash alg="SHA3-256">ef617c858bca5d4465868cd572c9e66bb20815a870aec53acf111e53d2eb3432</hash>
        <hash alg="SHA3-512">cda7e62e3a24dbe42541c72cdc4e515155c6f1826f6c7ef81c86fc16d16901b6526be55549c1da3cb25e1f342bb7b6d34f2342c4db19b891233758ebdfe258fd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-plugin-api@3.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.6.3/maven-plugin-api/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.6.3/maven-plugin-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.sisu</group>
      <name>org.eclipse.sisu.plexus</name>
      <version>0.9.0.M4</version>
      <description>Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">51eea54bbc85323fc68f6a79f9b8f179</hash>
        <hash alg="SHA-1">478f7935e88cd9da7ef01f509e4853e80ede9034</hash>
        <hash alg="SHA-256">b90579bc652eac7331436e0a25533fce14130b9c6e015f2dd3a3d4bb07e942b7</hash>
        <hash alg="SHA-512">a62c9d4485d4a30ec740e70b42aa310463dec0f53cd8ab7100be65ab984a8f946639b0f24650d0fb978aef6a73659a9e6e0b521b241de1dec2a58b342e0dbd2a</hash>
        <hash alg="SHA-384">7d8f5540885cb195ae3227bdb4854372586a90c6694a88da1711a16dd80a780ecfa2511edce7d0601f91a5875640bbae</hash>
        <hash alg="SHA3-384">9b394b0cce809763de8ac26ca97a2810a4116798ef36e3fdca13109069f31daa41dd90326542e77f45d72d5cbeb62598</hash>
        <hash alg="SHA3-256">90367dc33a3cbb1db9081014adaf0424c112d94c523651d9297e3132dde03c97</hash>
        <hash alg="SHA3-512">d977a67598f47ea5e1276693382b895ba79f4f1f623b0aff5eaa7ddcbfa7722932524b7992f850441f28062719b1b7f83206f2dbe5634f9e5f61f060ee881438</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse.dev/sisu/org.eclipse.sisu.plexus/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/eclipse-sisu/sisu-project/actions/workflows/build.yml?query=branch%3Amain</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.maven.apache.org/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-sisu/sisu-project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/sisu-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-sisu/sisu-project/tree/main/org.eclipse.sisu.plexus</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-classworlds</name>
      <version>2.6.0</version>
      <description>A class loader framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">67e722b27e3a33b33c1b263b99dd7c43</hash>
        <hash alg="SHA-1">8587e80fcb38e70b70fae8d5914b6376bfad6259</hash>
        <hash alg="SHA-256">52f77c5ec49f787c9c417ebed5d6efd9922f44a202f217376e4f94c0d74f3549</hash>
        <hash alg="SHA-512">6a58048d9db54e603b9cfd35373cf695b66dd860bec878c663b4fc53b6b3d44dd5b0c92e7603654911b1f78e63ef277cf6b272fe069a360989138550545f274d</hash>
        <hash alg="SHA-384">e839707ea5c4351f2703c6861ee4d58e08df0f7509110af13d4b3824e6ec5cfd65508fa80cc3f222baf5cf6c4ab5d5ac</hash>
        <hash alg="SHA3-384">75389fc7ed9aa3ad33ff317b0d41851fe0073b37aa8c33081722bfafb851493fb0e3b9629f924026fc32841f01399695</hash>
        <hash alg="SHA3-256">3aef41be29373137c58c415693b312c95e048731dce519ab88649eae9ba0e492</hash>
        <hash alg="SHA3-512">312eff142f86b9e110131dcca69527fbec80478e463fed5a34e2bd628673bce7be9ddb6fe0cda7fab2a119d1f310629413740019e686e9162194984ab6e06bf4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://codehaus-plexus.github.io/plexus-classworlds/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://github.com/codehaus-plexus/plexus-classworlds/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://archive.plexus.codehaus.org/user</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/codehaus-plexus/plexus-classworlds/tree/plexus-classworlds-2.6.0/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.plugin-tools</group>
      <name>maven-plugin-annotations</name>
      <version>3.15.1</version>
      <description>Java annotations to use in Mojos</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0723da1364961f527fbfce10c8b9c7dd</hash>
        <hash alg="SHA-1">ca287d08819d5d87f3a06b8f065a79eb33c3ecc3</hash>
        <hash alg="SHA-256">b58bcb3a1f362f6e1efa2772064026bb3d4ad92e6f43a1812d8d2886489912f5</hash>
        <hash alg="SHA-512">c02b9fc1d3892a83bae6aa12d929b2dd49b401f3b39784e0a6ce4b9eef14e5a8b3bf7a9112a8589863c780662c18b8da9efdd01862a12d1c5e02a7b25e9a7242</hash>
        <hash alg="SHA-384">ca1bbef5ee6d2b0a7d75b2fcd4432cf633daf9e347962da5373e67324faad36130bea043e6138f699ef2d1fe226dec35</hash>
        <hash alg="SHA3-384">c3627450180431dc53d77d9a33254e911681332fc60f6c37f9947010a80722c4fdc6c4e64a187a100a71233cc7478db9</hash>
        <hash alg="SHA3-256">425c68faacc75830233a9f74190fed3975ecb390d23dd3eb39c7654dd75a5aa7</hash>
        <hash alg="SHA3-512">742d7cb5f2eb07e638491fdd3ccd4aeb40d1208693e411196c54b5ebd9566e4b24a6156e34ce669c59f846ca2eca87ac9565062380e469d0f0dc6229e85d8bed</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/plugin-tools/maven-plugin-annotations</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MPLUGIN</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-plugin-tools/tree/maven-plugin-tools-3.15.1/maven-plugin-annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-model</name>
      <version>3.6.3</version>
      <description>Model for Maven POM (Project Object Model)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ebf3c5e5556a22271bf315d0cd5b2b56</hash>
        <hash alg="SHA-1">61c7848dce2fbf7f7ab0fdc8e8a7cc9da5dd7827</hash>
        <hash alg="SHA-256">17cef1f58e146ef0d7d9e96b3b92d98a1d6fd7d2b3288ba538e8ff1e0d9160cf</hash>
        <hash alg="SHA-512">7df3d781dd0c3a5947c76a02bb811d2bff0eb9bd0ba1efc3a55001576c58612bb1fd221ceb9cedd7ed84dfdb64c973b61af22c56636e1cfb03a55cfbe83655f6</hash>
        <hash alg="SHA-384">dc128cf5bca0d6c14716170efb7d2e37048f73c9b76393b766490580323a58297578c7aa5d49f63b8f48518fabb7320e</hash>
        <hash alg="SHA3-384">6d17e2e75aaf45e995455913082cafe57c147f17af9d265ce2d55f15b3b0044254c24dc3c55cdf5a0bc6ee4ecdefadf7</hash>
        <hash alg="SHA3-256">7884033d63e0ed6001f98b8c7811542a3f7ff4baad8aadd7cb56eafad16b9aa7</hash>
        <hash alg="SHA3-512">b3dd7820626f65b4d44cd9efc024d88ac0b4339efedf8848e6106e7b377be1768b79852cc28c7c2f454071d80e132f389f9146bc5e7c779569df94897682a5e6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.6.3/maven-model/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.6.3/maven-model</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-core@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-core</name>
      <version>3.6.3</version>
      <description>Maven Core classes.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f8acb450254136ba84d6fa40294e2795</hash>
        <hash alg="SHA-1">eca800aa73e750ec9a880eb224f0bb68f5b7873b</hash>
        <hash alg="SHA-256">f572ed9e2a6ea3e30522d13448c5d9b3b80ce62a23dac652111952d4941e2a3b</hash>
        <hash alg="SHA-512">fe0e2bd7c34267f7c8139d996bee99f41d29bcb6d1bbedbceb055eda31355ef179ed5e319fa97496eb85499bfc5f8738f7ac7f2c17a7118cb87cfacd984708de</hash>
        <hash alg="SHA-384">6d8776a9dec094f9c58c9b649a024a5a67c04268b260d7fb583de7dd7287b799abadda99755be9d45e55c03910cf1ca1</hash>
        <hash alg="SHA3-384">66204bce2f9b0b0388454a7c93775e3ecbc2321e6e7a1394e2da13e2e7666f7670b5a2db4e5039a95b2260dcbd0c8c3f</hash>
        <hash alg="SHA3-256">b1a979a9519c5eeb78b468ce0adbc6b5382cdbc288c8de1107f01125c94bab7a</hash>
        <hash alg="SHA3-512">b44e7fe5f03085fea942a5c627919209078c07c0f91cfa6c3214725b46acec74728dfe4dfed32bd53e479c460331e2485f0e9b5081ea78d4b853efbd834b203a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-core@3.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.6.3/maven-core/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.6.3/maven-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings-builder@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-settings-builder</name>
      <version>3.6.3</version>
      <description>The effective settings builder, with inheritance and password decryption.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ed6418ee483bd6215770362f68c133d5</hash>
        <hash alg="SHA-1">756d46810b8cc7b2b98585ccc787854cdfde7fd9</hash>
        <hash alg="SHA-256">ba611bdc73b691a73b704443bcd7606f625f06cb79588968e101271acbfa0b15</hash>
        <hash alg="SHA-512">f9f9f538a409d7cf2bd2517854f2d6aa45e0476865f217a11832f042ec361c67998241065540c3269d3db3915c903b15b6e4fb57af9623b192f9d8089110ecbc</hash>
        <hash alg="SHA-384">17de0c4b32cb3a748e37e687e06003157f474c9f6ffff2d23b1e7a0844aed47202a4b39d305d3f484dd8d4efbcddea3a</hash>
        <hash alg="SHA3-384">b717ba2300f62de48be92ef8db5381861c7fc4f1d33c3d02cc144e0628eae01ed7c0f851277ace6d4e3d98a6431c75cf</hash>
        <hash alg="SHA3-256">75dc9283cd3e53b7d3e3486e4c310cc08efe62083c011e6409b023156d1fde59</hash>
        <hash alg="SHA3-512">0b194fd91864af46cd2ba71eb020401fe2b253ac74337e8a0211fa83b53317ba9ef565d4d04e4b5a09bc8983614a43c6f00aa92ec6e7d32a696fe524b3e87c02</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-settings-builder@3.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.6.3/maven-settings-builder/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.6.3/maven-settings-builder</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-builder-support</name>
      <version>3.6.3</version>
      <description>Support for descriptor builders (model, setting, toolchains)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f43b5ea301aaff0c77aa3b743965da0a</hash>
        <hash alg="SHA-1">e9a37af390009a525d8faa6b18bd682123f85f9e</hash>
        <hash alg="SHA-256">3285308ea243a9967785417af5e21ae0c094099b20dfb0b7e1c3d211a87a5e59</hash>
        <hash alg="SHA-512">1f72981bf568facf16865dbfb1d5955ecbf82d90b5ed3da2bc096fb7e0f67056202d16078d9ad46945de9b59846aadc8ac010d23ab374dffbef5e7534bdbf1fd</hash>
        <hash alg="SHA-384">03caa416ef387c999dcec4a7f3cbc66f84e5f1b61c22f2d4730dbcc7ee48118ed4cc1170a605c83b2d0956346b205c9a</hash>
        <hash alg="SHA3-384">e40df7f3bbdd8963bdb3eed956d157a740efb0b1e51ec0ec5f2440168c0b9a2ad5a382d1b0cfcffafbd35aebcc346093</hash>
        <hash alg="SHA3-256">f72063e2ad824454224213507a2e0b88f9b40f5fc1fd455de5c24ded7cdbbe6e</hash>
        <hash alg="SHA3-512">a5ddd69fb6deeac6ba03f30ef72655bebc5bd0bb636d3b61c03bbd2d0943937be523db7e3bd9d34bae54d1d1785be181695fe64de9ac69f98af21da1bce92931</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.6.3/maven-builder-support/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.6.3/maven-builder-support</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-repository-metadata</name>
      <version>3.6.3</version>
      <description>Per-directory local and remote repository metadata.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7c49cd8e557ab6584ab9e4d2cd55f6a2</hash>
        <hash alg="SHA-1">14d28071c85e76b656c46c465db91d394d6f48f0</hash>
        <hash alg="SHA-256">2e7f850b20664a151e6ca73dd3af34e639901435c2fe717717e3cbc7ddead3d4</hash>
        <hash alg="SHA-512">9fbaffa07e4bfc091d4d8818330481bdc9d1d96448087321bb2914aac10ccb1c7b5cc6be0f6c76b8c0232b9cb69e4cdeec4fe40df5e9f2d472a4a027e5a3b3f9</hash>
        <hash alg="SHA-384">510834044a480d914eeb1a78f51cc0e47ee837a9399f843a0a44bbf75bba71109d8b5d4eeb8c789367d01e5ed881a760</hash>
        <hash alg="SHA3-384">dcc6a87ed5dd28de73a849b6fba54754c93d8c29874705fbef8fb3c135088a791cf72af8690aae2ab4800721f31325ce</hash>
        <hash alg="SHA3-256">0f1c5bec6e9d257dcabade9a3fdfcc9f18fe4496fb04a74c1480c36deec65b51</hash>
        <hash alg="SHA3-512">f3366430b6e7f864e47551d99ce5c2dcc8f830b3d2b01243d81cd50465d55c71cb80977aa2d7417f8fc95b37168c2c622993881b1b6c710359744c086f38c2c8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.6.3/maven-repository-metadata/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.6.3/maven-repository-metadata</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model-builder@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-model-builder</name>
      <version>3.6.3</version>
      <description>The effective model builder, with inheritance, profile activation, interpolation, ...</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">afa042b1716f60625df9d9a4ed70c6f8</hash>
        <hash alg="SHA-1">4ef1d56f53d3e0a9003b7cc82c89af9878321e82</hash>
        <hash alg="SHA-256">7d9a508edae881054fdb6ad530a5e053a0689ab1318bf7a099016e758b8323ba</hash>
        <hash alg="SHA-512">d65f71a4c755be518061fc2d33582c3da422cb3d52a01cd68bdf906c0fc4bfc1977da7714f9622452a02d34e00b7d4b1b1e4986bb59cbfdc5333bf12c9c7e699</hash>
        <hash alg="SHA-384">2745612bde0c1484f01db481819e5277940b22d7d7f07710130c87c73f91d5ca10e1fc94559d639cace3a831c1679635</hash>
        <hash alg="SHA3-384">8f3e1fceb78caf3c37a33bd6d5c79afa685c6e1e427555d319447863bb48c8bc53824fb67cca9f5c99500c1265a7f78f</hash>
        <hash alg="SHA3-256">d265afae3c868a2f1fc6778f62538150bd5de2157131016c26d2dc0081e1e6c2</hash>
        <hash alg="SHA3-512">39bd4872d744b46bb141a01e140e94e2604c9cd949c00f2c5aabaa9eef33499a25edc7c739c038bfe3445102bc6e31db2338a1a00aea889ccb7b623860fa561c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-model-builder@3.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.6.3/maven-model-builder/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.6.3/maven-model-builder</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-resolver-provider</name>
      <version>3.6.3</version>
      <description>Extensions to Maven Resolver for utilizing Maven POM and repository metadata.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0e5608a1e59e1045934bdef2d2fa0850</hash>
        <hash alg="SHA-1">115240b65c1d0e9745cb2012b977afc3d1795f94</hash>
        <hash alg="SHA-256">2379a5cf0b13ae9e11535c2c34a31b57c3866d9cbb7e116b81f9e288d1823702</hash>
        <hash alg="SHA-512">9febca461a031acd195b96b05fea2f28333a2cb587119a5493a3e9061af87bed4e7e1619acce9a505ad579a71f0a5e740cf78a3642095c2bc45a3d73c358e226</hash>
        <hash alg="SHA-384">72ff99262231234d1d44facece3aa045baf28d3ec52c32712b1df980642a5c35eae5770b975493115810d64434c703c0</hash>
        <hash alg="SHA3-384">960b35f757cb033aaa6c76a90094aa72aa9089413cc9edb06943ae7e0c57039d31a1b6b48eef6a6657265a9b76289796</hash>
        <hash alg="SHA3-256">15cfa486698ec3a61b84de3d27d764e5846c29c9f732d89be869443f31e5115e</hash>
        <hash alg="SHA3-512">a8ed60bb78db20a88fdf63ead0feff1f7d58ff2f4d95b0104b29bf6e4f2c203ba39aece579853d66b0a0714875b602b9eabfbe104f1ca6d7b00a7f2c1271f3b2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.6.3/maven-resolver-provider/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.6.3/maven-resolver-provider</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.sisu</group>
      <name>org.eclipse.sisu.inject</name>
      <version>0.9.0.M4</version>
      <description>JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ee95c1a11ba4ca38368d71ef05676cfc</hash>
        <hash alg="SHA-1">a062d8e12dc62e698c9f943a3fce94e366b4e220</hash>
        <hash alg="SHA-256">1cbd7a965a5e2a9ea823bab311962a4e5aa5c240705bdbad5a52b40ffdfa1004</hash>
        <hash alg="SHA-512">e0ff555c09ec22c637320e1d4ed654d8eae39bf051ce544987253eeb608f9913e332c9a8bf56d189845424a30301ce92cf1c363d8b6b5ccfc7eedaf8ab0474bd</hash>
        <hash alg="SHA-384">695c7c852c924334c1d857ddfb28277fb5108a54effaa30702fad0c6afe9070387b038f3bac941d7837fd6f48958d265</hash>
        <hash alg="SHA3-384">b70ad32b2530a88af5d051cd46657e91550999243d40baa60a388c583dea08bc05f5d52506b2fac917b37ca714084ac5</hash>
        <hash alg="SHA3-256">45098e8e22b3d76bc0d7c4ddc4f49553023cc472be9285be29455863d0ddd23f</hash>
        <hash alg="SHA3-512">3da31b3f27553350cf3acf3c55b95a94f9c1b9d88ef99004435caf5f21f1848496411f7b32713f7b9afd26eee9c8e551032e35c98b84d0274095ae4820208029</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse.dev/sisu/org.eclipse.sisu.inject/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/eclipse-sisu/sisu-project/actions/workflows/build.yml?query=branch%3Amain</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.maven.apache.org/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-sisu/sisu-project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/sisu-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-sisu/sisu-project/tree/main/org.eclipse.sisu.inject</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm@9.8?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm</name>
      <version>9.8</version>
      <description>ASM, a very small and fast Java bytecode manipulation framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f5adf3bfc54fb3d2cd8e3a1f275084bc</hash>
        <hash alg="SHA-1">dc19ecb3f7889b7860697215cae99c0f9b6f6b4b</hash>
        <hash alg="SHA-256">876eab6a83daecad5ca67eb9fcabb063c97b5aeb8cf1fca7a989ecde17522051</hash>
        <hash alg="SHA-512">cbd250b9c698a48a835e655f5f5262952cc6dd1a434ec0bc3429a9de41f2ce08fcd3c4f569daa7d50321ca6ad1d32e131e4199aa4fe54bce9e9691b37e45060e</hash>
        <hash alg="SHA-384">b4ad6e6c1afe432ce8a60367c743107cfc9d1d2f1f1c6b7be4b6ba625cca862cc7ffff404566086bce4b6650556df953</hash>
        <hash alg="SHA3-384">f51a3b7cee5543672cc2a4d71dda7aa992fb900cb68b79908efbd1efcc3e731f4ab8e2c1099e7b905f4aea6350489e08</hash>
        <hash alg="SHA3-256">3c66be179e6b4881b1901a6a8c6fc980d773d1faa6edb54ed878e5985615a831</hash>
        <hash alg="SHA3-512">ccbf812616e5997ba7cf59704cf78e360650d773ac53581243da6c47fe884560db5ec48f8f4b71ccd4b8c2b332619c19aea053458d14abe443fcdd4fa313d5dc</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm@9.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://asm.ow2.io/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.ow2.org/nexus/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://gitlab.ow2.org/asm/asm/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail.ow2.org/wws/arc/asm/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitlab.ow2.org/asm/asm/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.inject/guice@4.2.1?classifier=no_aop&amp;type=jar">
      <publisher>Google, Inc.</publisher>
      <group>com.google.inject</group>
      <name>guice</name>
      <version>4.2.1</version>
      <description>Guice is a lightweight dependency injection framework for Java 6 and above</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">57c18dbf01a6ef7fa4da3fb594cd243e</hash>
        <hash alg="SHA-1">41e5ab52ec65e60b6c0ced947becf7ba96402645</hash>
        <hash alg="SHA-256">158fd8f52d2a4b4ce4293ac2b833bb2427f5ddfe30df4ae0fd4675a1038a3b79</hash>
        <hash alg="SHA-512">51eec8b514cb7b4f05b8e5846e4cfe5dfc42a3e3171ced079a83e122e7113d96defc6edfada375e072f965b01450e170072b1f85fcd11800804239b93c2878dd</hash>
        <hash alg="SHA-384">3ba79400b5419f5963c7ad5f3fcde7a55674e2630edd68e12ca9e8797ca41a777489a34297b6c9678f0f6bef4be66484</hash>
        <hash alg="SHA3-384">e83143d679cfd7a42a5e27ac5038c2da43e75c8bf054f4c63938579df6fb428882fd8371adafbe7db1ba022c5ae13c31</hash>
        <hash alg="SHA3-256">d30b4b222e87e6c30e2543e1b0a172988d1c0757498a928041667b8a09c41e61</hash>
        <hash alg="SHA3-512">ce045743540757b233a4c1731774aa02e9dcbbd3f8cf07bac8ab8268fc28bbfd6d55242433c25b93dc66ce2fcf0adee4688fd2929f6c576fe4994635550e8395</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.inject/guice@4.2.1?classifier=no_aop&amp;type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guice/guice</url>
        </reference>
        <reference type="build-system">
          <url>https://travis-ci.org/google/guice</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guice/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://groups.google.com/group/google-guice/topics</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guice/guice</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar">
      <group>aopalliance</group>
      <name>aopalliance</name>
      <version>1.0</version>
      <description>AOP Alliance</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">04177054e180d09e3998808efa0401c7</hash>
        <hash alg="SHA-1">0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8</hash>
        <hash alg="SHA-256">0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08</hash>
        <hash alg="SHA-512">3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1</hash>
        <hash alg="SHA-384">4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783</hash>
        <hash alg="SHA3-384">2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1</hash>
        <hash alg="SHA3-256">d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0</hash>
        <hash alg="SHA3-512">830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
        </license>
      </licenses>
      <purl>pkg:maven/aopalliance/aopalliance@1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://aopalliance.sourceforge.net</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@25.1-android?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>25.1-android</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, google's collections, io classes, and much
    much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b506eaec680c6d92d5f063fa1d57956d</hash>
        <hash alg="SHA-1">bdaab946ca5ad20253502d873ba0c3313d141036</hash>
        <hash alg="SHA-256">f7b8f8fed176b9cf6831b98cb07320d7fbe91d99b29999f752c3821dfe45bdc8</hash>
        <hash alg="SHA-512">c8f95af9f1e97dee807503c8fbb442c87eed2694e43ad0fd9fc2e62ba99c5e93d476d5ee8f4791f173cb8fdabc88abac0e8130a51de280af836a3e0c4eadaff6</hash>
        <hash alg="SHA-384">c1b18ac69bb1a99766b701b470fa3dd560e5067deb273727cfacc083760f503443f555f41765fc9cea7c65a138742758</hash>
        <hash alg="SHA3-384">acb8fdcce24abde49a5e093908c9a825b610388740d851f11d53ac17ab3e88bd4c81078de9e669b83f8be050ea9d8392</hash>
        <hash alg="SHA3-256">ea0feef6c17ef154cc4f9adfd1ebe1b84fe7af7b03b993e6b3ae6da1fe279f59</hash>
        <hash alg="SHA3-512">3d70e852e2047d6107b9fcfe941bbf84bd19df09d10bc02119ae82fdd48c4c5dfaef108b8b117090f92156f7284d6b4ca6ec2393beb596f3efb80a47c0f29056</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@25.1-android?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava/guava</url>
        </reference>
        <reference type="build-system">
          <url>https://travis-ci.org/google/guava</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/guava</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-compat-qual@2.0.0?type=jar">
      <group>org.checkerframework</group>
      <name>checker-compat-qual</name>
      <version>2.0.0</version>
      <description>Checker Qual is the set of annotations (qualifiers) and supporting classes
        used by the Checker Framework to type check Java source code.  Please
        see artifact:
        org.checkerframework:checker</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b6fb2610dacd211a3e2c3d8af1b60d0f</hash>
        <hash alg="SHA-1">fc89b03860d11d6213d0154a62bcd1c2f69b9efa</hash>
        <hash alg="SHA-256">a40b2ce6d8551e5b90b1bf637064303f32944d61b52ab2014e38699df573941b</hash>
        <hash alg="SHA-512">fdecc20efd6943426e7f8bdfb8bef9d28258f9f934cf29090e2f5b297c501454606cc28593cd7d089a5c14f6d2dcafc59f4606053405d7f91d623a0e3202f4a8</hash>
        <hash alg="SHA-384">647d7bcbfaa000d0ed330eea0af4378e691303bc1d70fde3dc657c1cf0eceb0c2b0abd44745b879fdbd441131a056130</hash>
        <hash alg="SHA3-384">ce6f53807d1006ffc5b1a7db6581090d5a7ea40d5d6af4df8f2aa31b02e0a35b8441c97f8ebd3efc011798cb42e62198</hash>
        <hash alg="SHA3-256">6332c0be53250aaf67b95786e10337e1134ca645aed3b4cc596c68a3555c07fc</hash>
        <hash alg="SHA3-512">74780f6c4d9e615c5be2f7149540721bfccd43e71b2d912054b98cf4f1a5ae5506497eca9c76f9e09f988d988bba8a1ec0588684379722044d894594dc787ea4</hash>
      </hashes>
      <licenses>
        <license>
          <name>GNU General Public License, version 2 (GPL2), with the classpath exception</name>
          <url>http://www.gnu.org/software/classpath/license.html</url>
        </license>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-compat-qual@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://checkerframework.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/typetools/checker-framework.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.1.3?type=jar">
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.1.3</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">97504b36cf871722d81a4b9e114f2a16</hash>
        <hash alg="SHA-1">39b109f2cd352b2d71b52a3b5a1a9850e1dc304b</hash>
        <hash alg="SHA-256">03d0329547c13da9e17c634d1049ea2ead093925e290567e1a364fd6b1fc7ff8</hash>
        <hash alg="SHA-512">bd2135cc9eb2c652658a2814ec9c565fa3e071d4cff590cbe17b853885c78c9f84c1b7b24ba736f4f30ed8cec60a6af983827fcbed61ff142f27ac808e97fc6b</hash>
        <hash alg="SHA-384">03ff39082a3cd3c64d679c3df3be10abc3a87d6a576f6e21585ac6a18439d136608f9293e370186388fc5c8854adb3eb</hash>
        <hash alg="SHA3-384">02e686b3fbe3c3a728d1d9ee67fe7ad5f32688314e24f63efb1666302650d86ccaef4304f5750cd155729404603cfa00</hash>
        <hash alg="SHA3-256">5c7b2ffc8d4073700647681ed44dd783049648aa8e174f37d2510339a65f5466</hash>
        <hash alg="SHA3-512">3f05def83905268da5044c8bd6fbf62b89499d77351b56a357de8d27ef872c6c300385a6bca009590d61be90a39a0f417c4d8358a13b09847ba0452ef416db06</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://nexus.sonatype.org/oss-repository-hosting.html/error_prone_parent/error_prone_annotations</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/error-prone/error_prone_annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar">
      <group>com.google.j2objc</group>
      <name>j2objc-annotations</name>
      <version>1.1</version>
      <description>A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">49ae3204bb0bb9b2ac77062641f4a6d7</hash>
        <hash alg="SHA-1">ed28ded51a8b1c6b112568def5f4b455e6809019</hash>
        <hash alg="SHA-256">2994a7eb78f2710bd3d3bfb639b2c94e219cedac0d4d084d516e78c16dddecf6</hash>
        <hash alg="SHA-512">a4a0b58ffc2d9f9b516f571bcd0ac14e4d3eec15aacd6320a4a1a12045acce8c6081e8ce922c4e882221cedb2cc266399ab468487ae9a08124d65edc07ae30f0</hash>
        <hash alg="SHA-384">8942363710e7473635a2c77ff82db8af1915cb6ac8429851b4acfa04f059183f8e3444dedff75a7da02698f2ee22a181</hash>
        <hash alg="SHA3-384">a9906146d76704f64b1a1aad3d80be86e0d08a987fdb63d4d8d0399937e7e94076d9878a14593fb4465f3a5fccec0df5</hash>
        <hash alg="SHA3-256">275370eeb5f02c15358168ea134c4eab1afed8d27750a8a326b9f9f506dfc9f2</hash>
        <hash alg="SHA3-512">d9e2a3943373e1eab933b45f49997b24e01466eb99a177c40f21c7107c9f21ebb135e14d191b0a5b699e3985d20de8e87662e92c0bf59e5e054d3da85fd777dd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/j2objc/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.sonatype.org/spice/tags/oss-parent-7/j2objc-annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14?type=jar">
      <publisher>Codehaus</publisher>
      <group>org.codehaus.mojo</group>
      <name>animal-sniffer-annotations</name>
      <version>1.14</version>
      <description>Animal Sniffer Parent project.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9d42e46845c874f1710a9f6a741f6c14</hash>
        <hash alg="SHA-1">775b7e22fb10026eed3f86e8dc556dfafe35f2d5</hash>
        <hash alg="SHA-256">2068320bd6bad744c3673ab048f67e30bef8f518996fa380033556600669905d</hash>
        <hash alg="SHA-512">9e5e3ea9e06e0ac9463869fd0e08ed38f7042784995a7b50c9bfd7f692a53f0e1430b9e1367dc772d0d4eafe5fd2beabbcc60da5008bd792f9e7ec8436c0f136</hash>
        <hash alg="SHA-384">f84c3a6589e4fd49764595bad99ef2ebb443f1c9a5f11177a2073b54156989979b5e97fac591714f18304fbcf26bb1c6</hash>
        <hash alg="SHA3-384">1821c7ba68f3b43cb25b3038fa732631d1db6063ecc5c7f84b31fdadfa8ca43434dc960e602af02a2891237cd90b8c29</hash>
        <hash alg="SHA3-256">9b624360f936e928bc63bf44e475d8fd052148c0d0cc56c3c88c26429b430c08</hash>
        <hash alg="SHA3-512">5f0a62a96445cfeaf101d2ddc56472621f5c3dafc54ad4b230a373012833b7da83e96af7c07b60a586768361b3bce3f3626ed2cc09fbbd84e840e0714d6344ee</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://mojo.codehaus.org/animal-sniffer/animal-sniffer-annotations</url>
        </reference>
        <reference type="build-system">
          <url>http://bamboo.ci.codehaus.org/browse/MOJO</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nexus.codehaus.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://jira.codehaus.org/browse/MANIMALSNIFFER</url>
        </reference>
        <reference type="mailing-list">
          <url>http://markmail.org/list/org.codehaus.mojo.dev</url>
        </reference>
        <reference type="vcs">
          <url>http://fisheye.codehaus.org/browse/mojo/tags/animal-sniffer-parent-1.14/animal-sniffer-annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar">
      <group>javax.inject</group>
      <name>javax.inject</name>
      <version>1</version>
      <description>The javax.inject API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash>
        <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash>
        <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash>
        <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash>
        <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash>
        <hash alg="SHA3-384">fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d</hash>
        <hash alg="SHA3-256">5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6</hash>
        <hash alg="SHA3-512">fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://code.google.com/p/atinject/</url>
        </reference>
        <reference type="vcs">
          <url>http://code.google.com/p/atinject/source/checkout</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-component-annotations</name>
      <version>2.1.0</version>
      <description>Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">141fd7a2ae613cb17d25ecd54b43eb3f</hash>
        <hash alg="SHA-1">2f2147a6cc6a119a1b51a96f31d45c557f6244b9</hash>
        <hash alg="SHA-256">bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac</hash>
        <hash alg="SHA-512">cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88</hash>
        <hash alg="SHA-384">dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f</hash>
        <hash alg="SHA3-384">2b335733d7683e8bae312b0608af7c17b1aa22a1b9cbc4cc11549faf6bacc51c7591f1073aac99e5d70fdea31c6253c4</hash>
        <hash alg="SHA3-256">2e9f44d1c5df160563d3cedaf01929682fb3e0432beca7c782d8ba0324fb32b1</hash>
        <hash alg="SHA3-512">5051e4210310ec60fae9f32284a93da3cff63bf43a7dda30eaf2715d24cfc7f2353a6c2731521f4d6ef32e7a3e2526b6a41c8a11b0889c8dbf7ffc7914812641</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://github.com/codehaus-plexus/plexus-containers/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://archive.plexus.codehaus.org/user</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/codehaus-plexus/plexus-containers/plexus-component-annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-settings</name>
      <version>3.6.3</version>
      <description>Maven Settings model.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c7da2b5dfdb0b0ba67e1279a32f40054</hash>
        <hash alg="SHA-1">bbf4e06dcdb0bb33d1546c080df5c8d92b535d30</hash>
        <hash alg="SHA-256">d3904bcac30f11fb49e44f5cecaaebb2e9a7a5e4a9a55f20484fbb9fcc1bb66c</hash>
        <hash alg="SHA-512">dae78e5bedde2009c8a7fdf0b77c91b87b8c4c4cb5bc73f799107edd75597a3c90dc497abdfa43254e7dc31eb7707384254d91fb656c74bb5d86cd868e36209b</hash>
        <hash alg="SHA-384">a920fa55fd2df6cb39e61a341074feaf38ed5746d516d0281a7ec5dd53bfb34bb935d4ae2e7097fe557ddfff4e9d74ee</hash>
        <hash alg="SHA3-384">853c446d877ac42d49e4f8fc8e84d9d1e2df48afc49af067cc6f157517be929634b52e358d6fa1ff17e584ebc03f7f5f</hash>
        <hash alg="SHA3-256">5d18bf0c53eac0bd969936fe50264f2e0bd066c01cac7a7930f47f150be119d1</hash>
        <hash alg="SHA3-512">33715333b6957a22bac890951305b97b6572041a9c902b0d0a442112ddafc398b6d58b71eecd694212d1f5fe5a3ff7ce7fb56faf106812cfcc6ec6ecf4c7d9c9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.6.3/maven-settings/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.6.3/maven-settings</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-artifact</name>
      <version>3.6.3</version>
      <description>Maven is a software build management and
    comprehension tool. Based on the concept of a project object model:
    builds, dependency management, documentation creation, site
    publication, and distribution publication are all controlled from
    the declarative file. Maven can be extended by plugins to utilise a
    number of other development tools for reporting or the build
    process.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b83c1943a0783f3f81d4cd4c83c363e1</hash>
        <hash alg="SHA-1">f8ff8032903882376e8d000c51e3e16d20fc7df7</hash>
        <hash alg="SHA-256">61b20da4e1e3db837630d0810a6a7a5ac9fb7ea31b0a55638062aad6e479c09c</hash>
        <hash alg="SHA-512">53726aee76ea01de2253c623292f64b5bf7784c6e223ebcc7548a2136922cbdf69d3bc42c44d00e6fe2015d2304b67d02d7a988d400da2ed036d489c6ed8fbe6</hash>
        <hash alg="SHA-384">d5905d7b94a605e7b7bbc72d2806ee0c475210436c2b2220b8a61b73a58b4cec0fce3bc7d24158d994bb8a73d954b868</hash>
        <hash alg="SHA3-384">68e5c7eec8ea3a8cdc0259b9baa64cc3014760d2b073d00c552937629f06ae0104f178bc40ca59f17d7742d3d8f99cfb</hash>
        <hash alg="SHA3-256">9f984256f0043acef50ba9953ae796338d495b31246771aea7c8b14c6925d3cb</hash>
        <hash alg="SHA3-512">723f0abf401dd62a99c6c03c3d363b7695dbe10912d1c46f0c26dbfbc697b09ca5b52c8567159c58f8adeece9caf9cf9ce560be110283fe315473d48a091d16a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.6.3/maven-artifact/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.6.3/maven-artifact</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.scm</group>
      <name>maven-scm-api</name>
      <version>2.2.1</version>
      <description>The SCM API provides mechanisms to manage all SCM tools.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1ef6b239f79a41c52e4eb871ddaa3c13</hash>
        <hash alg="SHA-1">451345bd695fa717ec2ceb177d3543153cd3d77d</hash>
        <hash alg="SHA-256">d843c0611a21191e4a34804152c8bd9ec364f41e076713df8db99f6df7f386d3</hash>
        <hash alg="SHA-512">108ad02e13b7570320cc51253bde65dd59149c97b47b91a0184098e06ee9ecb666dcb109c96cd82331c4cbeb41bbfb56742f9aeedb4f461238dd7a528fa4fc38</hash>
        <hash alg="SHA-384">151a0d2e2d4a7b227be830e3b363e0707cc8f7168b4030619b0f7c47f0e28c0e0ac6c0ae6073b93caef6a1821436bbfe</hash>
        <hash alg="SHA3-384">11128722564f47949f6a5bb2c865cda739eb0d011647cf0517c2a1dc58ae6cdea59725828c8a6bbaa8416c19ea7a0239</hash>
        <hash alg="SHA3-256">565c000a5886356fa98e7d640c72a63879ef77627d59b020e4935c4cb6b106e7</hash>
        <hash alg="SHA3-512">032991413ec048823a319a341d656d82ac1ee4fbef032ed3c88d3149eb9c1650f681e731b8f307a63782dc1ae40a33d2d1ffeb3ac22a729567784559eadc7a33</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/scm/maven-scm-api/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven-scm/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/maven-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-scm/tree/maven-scm-2.2.1/maven-scm-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-utils</name>
      <version>4.0.2</version>
      <description>A collection of various utility classes to ease working with strings, files, command lines and
    more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4cfdd73e436702d319d551a44fcea500</hash>
        <hash alg="SHA-1">9526a9548b302572f23337fcc217fb4cc713b9c3</hash>
        <hash alg="SHA-256">8957274e75fe2c278b1428dd16a0daeee1dd38152cb6eff816177ac28fccb697</hash>
        <hash alg="SHA-512">a99751d7990df50fd1adc10634c4e14f5deddff8fc1b7c6d26a5c7fc517d3f0e3a8d39435c512c507a0737fc9c3ee67a8f121f9e2aa8b9bfe14d9f01a99a3aa6</hash>
        <hash alg="SHA-384">52a12d800c5aa70fa149d4628fd6a485e3324dbfbbd6a2f24e120176ee8c48e13a4d321f76d64ff86684c2523409a62a</hash>
        <hash alg="SHA3-384">beaf7889c9facf6649bcce19dcc4356db98de628f5d597cb101793ca454ab81d5a436f9652a957c9d1573e9149a0fe49</hash>
        <hash alg="SHA3-256">26369ecaf957f19dc5992708c56ed3816129c40531505eb4bc702755a2fd4b49</hash>
        <hash alg="SHA3-512">f51af4b8d2e097716129f84b69e95947b08cf3c8617b0c6997f55ea3d02f0481284943e474d2935d590ec57975b1edce2774d5006734acc1ca1af567372bdf25</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://codehaus-plexus.github.io/plexus-utils/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/codehaus-plexus/plexus-utils/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/mojohaus-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/codehaus-plexus/plexus-utils/tree/plexus-utils-4.0.2/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.release/maven-release-oddeven-policy@3.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.release</group>
      <name>maven-release-oddeven-policy</name>
      <version>3.2.0</version>
      <description>A version policy that proposes even version numbers only for releases and odd numbers for development</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">e67ed824ca494123dd77a1b8049fad65</hash>
        <hash alg="SHA-1">808523293095a3c4ccd17710d856294d4c74bb97</hash>
        <hash alg="SHA-256">9b4b506433748219ba771554c0503c16743a74d03a9a8b0b5dca6c976b0e56ef</hash>
        <hash alg="SHA-512">7d5befeb8010f3c47b6ef50fd07ba458ccfae5435359a5752ec18596432e2f7d1affa47f6232bad927fd6b2161e65f4edb36a3bb7e3118b6522ba83b03581091</hash>
        <hash alg="SHA-384">388cfe8f6cb1d86f880522deee32f624cbb33eb09608336ea6f1c75712ec4cc8432812027f8e57dd8c6b95d0de609414</hash>
        <hash alg="SHA3-384">cf47e3139ae5c9eb2c88336fdd296c99977c91de07e8f9095a101e9753b123502238fcb47cdf4fc1d8a04262f40ede8d</hash>
        <hash alg="SHA3-256">51910d3a4e3dd2c7f173d32aebe1b9a59292a72a8a7c8059a4913cc3a8bd0f42</hash>
        <hash alg="SHA3-512">db8829376e57c80ad56a779d9e207fef2683d653f21d6fdd0a02f41f3e35dcdcbe3c237d28f122904796e2ec930fa1036ad95bc6b32dd5ca75a442887e97cb74</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.release/maven-release-oddeven-policy@3.2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/maven-release/maven-release-policies/maven-release-oddeven-policy/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-release/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven-release/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-release/tree/maven-release-3.2.0/maven-release-policies/maven-release-oddeven-policy</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.release/maven-release-semver-policy@3.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.release</group>
      <name>maven-release-semver-policy</name>
      <version>3.2.0</version>
      <description>A version policy that enforce SemVer format and upgrades minor element for next development version.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">fadb61ad0884e922afe978f65ff8148e</hash>
        <hash alg="SHA-1">1d13fee2aadd6ff04f3c982db88cb04482e7d9d3</hash>
        <hash alg="SHA-256">720d9dec756d44eb6fe61f12d9ac29b85977774888e682842426c7dc4742c563</hash>
        <hash alg="SHA-512">6a3381f294494450e9018878299a2e9c9c49c1b2acfbe8099d4d4f161aadd94a12f57b3271fd882e5b3b706b3c3819c78c597efd3008da61d547388245eec5bb</hash>
        <hash alg="SHA-384">63f3d615d3c6331d120f2d2fe7520aede5dfc789d693b674f7e6d1d3086466b176bd75f9d5eafaba761807535447e742</hash>
        <hash alg="SHA3-384">4b2e035c72ee2501afd6090df388c50b9b2df72bb7d7b769fddf25425342b20386c37b1c05b47063087c16b83ca01dfc</hash>
        <hash alg="SHA3-256">8d0d9bb793bb045a1a03263f06f58eea45c26eb822cfafe6e0ec729687233cf5</hash>
        <hash alg="SHA3-512">57ba3c6d445a22016b5b6237d08aa9bc6263a4f24c7c8b9a1f591c12bc5e7ecae4963abb7c8b5c840af125bea563b0d5833ca95b8dc2d9c5f133bfd5592e4d1b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.release/maven-release-semver-policy@3.2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/maven-release/maven-release-policies/maven-release-semver-policy/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-release/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/maven-release/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-release/tree/maven-release-3.2.0/maven-release-policies/maven-release-semver-policy</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.semver/api@0.9.33?type=jar">
      <group>org.semver</group>
      <name>api</name>
      <version>0.9.33</version>
      <description>A library to automatically validate if your project's version number follows Semantic Versioning principles</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">f967c53fdbbc4907b94f7775cfdc6ea7</hash>
        <hash alg="SHA-1">2a1136d4534fb5645f307c659a9327ab5bbd93dc</hash>
        <hash alg="SHA-256">31c6d3d6a3a0794cdcf9e7551c62468e96649c40ef7ece45839b495ae7c62df2</hash>
        <hash alg="SHA-512">b18c72e0f512c4bd414dc28e92729c4e482cc012167695834633b9a21773072355c0c7e6889b729b5906317894c51e185972e7f9bc0bf7e0545107421fd3ef2e</hash>
        <hash alg="SHA-384">4d10b7ba95058923e9ba11880014864ee6ea8d857c4fb2e8685101cbe177a3092cc04b27b1881d85f10741241dde644a</hash>
        <hash alg="SHA3-384">d8c5c4ea78d6a7a7f3429c8f784a3b88730d01a3562bc32426ff9a412ad864a85dfa718870a0cd13c437e93a7ec7be13</hash>
        <hash alg="SHA3-256">60df9b1bb5b993c7adc363fa9a92f213c3b13fe1004fd3dc586f1ac3eb6b1190</hash>
        <hash alg="SHA3-512">52402499871ce692f2508761b964043e8d068c3c344992025f948863f05758c18ab85ff7cac4747aa388e3b701f04b1b82c3107b27524d1ebbe4c1b29703e8c0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.semver/api@0.9.33?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jeluard/api/parent/api</url>
        </reference>
        <reference type="build-system">
          <url>http://http://travis-ci.org/#!/jeluard/api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jeluard/api/issues</url>
        </reference>
        <reference type="vcs">
          <url>scm:git:git@github.com:jeluard/semantic-versioning/api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@2.0.0?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>2.0.0</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">144c0767e2aaf0c21a935908d0e52c68</hash>
        <hash alg="SHA-1">516c03b21d50a644d538de0f0369c620989cd8f0</hash>
        <hash alg="SHA-256">1e7f53fa5b8b5c807e986ba335665da03f18d660802d8bf061823089d1bee468</hash>
        <hash alg="SHA-512">b3b832489ef9249b22d8a0b9d6eee1895c9d93ef53d5968724a65184cb3f04e17cc74938128b98916da7829c6566be0bc6d60fa8801248cc24620730a060eac6</hash>
        <hash alg="SHA-384">595523bb57ac2b6471658dfab62d6ba47d92ffdbaf219febf9565a42fa3127400586f2e0c2b0cd8e0c6f20e51884525c</hash>
        <hash alg="SHA3-384">52ef62371c0860b0d8a7288950d331d2aaedda3762aa59c32d744974ba5714a06aaaa9f03a97af231485eebac599f77f</hash>
        <hash alg="SHA3-256">0aed9a5f1c5cfe5e2a19f5b999f7b3ed41336ec0a1a9bdf54a47de30e81e8f4a</hash>
        <hash alg="SHA3-512">f70adffe522e5b725cef745f7e21b09a6f154387cb35da0af32a00d354f5c5d578560b57234116d125223920b99cfd31712e4c3d2740a1d9ddd188676c9df133</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://findbugs.sourceforge.net/</url>
        </reference>
        <reference type="vcs">
          <url>http://findbugs.googlecode.com/svn/trunk/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm-commons@5.0.3?type=jar">
      <publisher>ObjectWeb</publisher>
      <group>org.ow2.asm</group>
      <name>asm-commons</name>
      <version>5.0.3</version>
      <description>A very small and fast Java bytecode manipulation framework</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">49c4bd16df054f7b7376fcb80de5a225</hash>
        <hash alg="SHA-1">a7111830132c7f87d08fe48cb0ca07630f8cb91c</hash>
        <hash alg="SHA-256">18c1e092230233c9d29e46f21943d769bdb48130cc279e4b0e663f423948c2da</hash>
        <hash alg="SHA-512">702037de4cc53d3c4689d25223774384ce93372f4569d05e7e32e77a0d8a7efacaf3f574ee6e3ba5547f06431cb1595426da62f307d6fcf9321aaa9c4d7f6f77</hash>
        <hash alg="SHA-384">cf67d6185dab08278e741166de629c3ce74b46b7401e8dc25aec21d2c23a4b276e6e38be8e71846e55cdeb8731d59d43</hash>
        <hash alg="SHA3-384">e513199c78ebf2285da63f390480e7e08b2c549d199bb88459e870b82a5fef3e305ef35956aa4270a0b72ffa010fdb45</hash>
        <hash alg="SHA3-256">de52f4afa554268e440db87db8c47d6e2fe77e468d3cf7af50ae3275a8b1a859</hash>
        <hash alg="SHA3-512">500ff543cbbf18ec6be00d6a9e441db03c395e59b4e3a78c0ce9d75c66101f83e83c866000848fc5ed095eb1375d63f51931051f1c8d3e0903401abf77525af4</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm-commons@5.0.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://asm.objectweb.org/asm-commons/</url>
        </reference>
        <reference type="distribution-intake">
          <url>http://repository.ow2.org/nexus/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://forge.objectweb.org/tracker/?group_id=23</url>
        </reference>
        <reference type="mailing-list">
          <url>http://www.objectweb.org/wws/arc/asm</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.forge.objectweb.org/cgi-bin/viewcvs.cgi/asm/trunk/asm-commons/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm-tree@5.0.3?type=jar">
      <publisher>ObjectWeb</publisher>
      <group>org.ow2.asm</group>
      <name>asm-tree</name>
      <version>5.0.3</version>
      <description>A very small and fast Java bytecode manipulation framework</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">94abc9b0126e1ec2c12625dfce54e32e</hash>
        <hash alg="SHA-1">287749b48ba7162fb67c93a026d690b29f410bed</hash>
        <hash alg="SHA-256">347a7a9400f9964e87c91d3980e48eebdc8d024bc3b36f7f22189c662853a51c</hash>
        <hash alg="SHA-512">41fa352a4b1fcb482cc71a5cf8eb25770e16aeaa926ffc5c9ef5e09ffa29a19cf9f274d7d413839b889620607b16c649fb3df82a41347269fe77c8f0f0e861db</hash>
        <hash alg="SHA-384">3a50bc80460a2fe31234d36cc949a0f89882d64a2f60702a6aa63668a82f3b8dece257bd042b7276c1243362f2a7f21a</hash>
        <hash alg="SHA3-384">b52f32f5407a3aaf5fb0348ba000afbe03b0747c326b1f3f0694e82cb7555498ca88995257d5d489cc878dbf1bcefe79</hash>
        <hash alg="SHA3-256">0fc931dd740d091b16c4aa25f56f074ce99526a5b3eebe9c5215dea301c0503d</hash>
        <hash alg="SHA3-512">7f9ced9a44c67efec51603f9e276b0ae39ac2c5012ebeeb9f77640ae99bdd091de51cd947f32f48b340995f86a8168abb23a3d7f69e718309059c263203f76d8</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm-tree@5.0.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://asm.objectweb.org/asm-tree/</url>
        </reference>
        <reference type="distribution-intake">
          <url>http://repository.ow2.org/nexus/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://forge.objectweb.org/tracker/?group_id=23</url>
        </reference>
        <reference type="mailing-list">
          <url>http://www.objectweb.org/wws/arc/asm</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.forge.objectweb.org/cgi-bin/viewcvs.cgi/asm/trunk/asm-tree/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-lang/commons-lang@1.0?type=jar">
      <group>commons-lang</group>
      <name>commons-lang</name>
      <version>1.0</version>
      <description>Commons.Lang, a package of Java utility classes for the
    classes that are in java.lang's hierarchy, or are considered to be so
    standard as to justify existence in java.lang.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">c55477a7214dc0b55e4aa7b7955d4394</hash>
        <hash alg="SHA-1">ac4ab3b02823ea2997c163433d9d44132bd2446a</hash>
        <hash alg="SHA-256">d327c033f798997b9ad85b33242e2e88b49bbb1369cfe23e10b2686bd4cf3218</hash>
        <hash alg="SHA-512">6ad72cf5cb72080ff2792c56228cb145b7bc691f0d8026c6b0a837721026854a220881bf5f88d7551fc2f0fc395ec3c052cddbe37d9ca145fcd02981172c7906</hash>
        <hash alg="SHA-384">e0da74674959c7f888a27088adc28e766d3cbc6a4735cd796a58ea2ac183afd9eda44560af324b155ddc09ca0b6e14bd</hash>
        <hash alg="SHA3-384">696492e0fd7f94525165b7df7318b87030c5637e550657ab7e1bfe50d2d681749c7131387dda024395787335b83e3490</hash>
        <hash alg="SHA3-256">e4963dd3c767cfa561cde334bf69513f769d16a03fb28b35cf6c111146d4dd74</hash>
        <hash alg="SHA3-512">bf5cab73ec6feac7a9710d72d2b39f6a046d75c650a01b46687c8d3baaff4f0f466b7f6f940d666a04e76d43bb40037e9b0dc69dc0f7a5d86cb78be3b3f9b693</hash>
      </hashes>
      <purl>pkg:maven/commons-lang/commons-lang@1.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/de.tototec/de.tototec.cmdoption@0.2.0?type=jar">
      <group>de.tototec</group>
      <name>de.tototec.cmdoption</name>
      <version>0.2.0</version>
      <description>CmdOption is a simple annotation-driven command line parser toolkit for Java 5 applications that is configured through annotations.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">37eaafeef7bc7f06f07b4affdb85fd83</hash>
        <hash alg="SHA-1">1e9607554ca50229876bd69b0ce187d8bac9e98b</hash>
        <hash alg="SHA-256">0dd7dcc62323c7e5c425f261fc026dfe5e69afb8dd49ee51d56b8efc6f1121f5</hash>
        <hash alg="SHA-512">998ab8c54b44b44323b762e75b954c3ad431e06c6560974dd1976fc227cf5281562bb2d5606c33633513bc6e0d5b1c07002e181ae8d4955aa8e4adfda4df81a7</hash>
        <hash alg="SHA-384">e79315232932b8a4d96f6dcfa302f2d7db3f2395a8e880ba4ae81ee9d51659f4edf967f5d45641dda673986d93ca5257</hash>
        <hash alg="SHA3-384">070c6d28723e1105fc9643801d78d9498a8e743c0081a53b89925d6d6fc90df75b94d6283728cfd115ef1c454d37cd11</hash>
        <hash alg="SHA3-256">b9095c38dffdbab79de842344ba299b6b73a34c2bc71c085271e7ab50d7cc025</hash>
        <hash alg="SHA3-512">3d1c04c1b51b3a37d9ddc04893f16446d8f0dedc412579d00d2c55f26785b6f7b0de8021134c1e76eb9d82ff7498ffb35e5ab0f2d06722349b2b60591cd0adee</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/de.tototec/de.tototec.cmdoption@0.2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://cmdoption.tototec.de</url>
        </reference>
        <reference type="vcs">
          <url>http://cmdoption.tototec.de/svn/cmdoption</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.2</version>
      <description>The Commons IO library contains utility classes, stream implementations, file filters, 
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6ad49e3e16c2342e9ee9599ce04775e6</hash>
        <hash alg="SHA-1">83b5b8a7ba1c08f9e8c8ff2373724e33d3c1e22a</hash>
        <hash alg="SHA-256">675f60bd11a82d481736591fe4054c66471fa5463d45616652fd71585792ba87</hash>
        <hash alg="SHA-512">ad08841278fef6f1ebcb2483059882175d30481c75fae916f768d08087bf6159c7d3f4a7ef382f45ec2294235bbcb596c60b1fa98aa04e9dfd8fbafbfa2cad2c</hash>
        <hash alg="SHA-384">f72ace0f8826c676cc5950ddcb4717740051d8eefda10d492ee150509bd846d3ad809ee374ab405c781008a37599c7fe</hash>
        <hash alg="SHA3-384">1220e3662131c21a4ca1b1814dc601d9a5a1a52781a106f31099a893dd235eebe4da2aeb5de35b03906e749ade982c09</hash>
        <hash alg="SHA3-256">36fed46c53e104d3f2d5593bb24434534399e39347d43fae6b348879434b9901</hash>
        <hash alg="SHA3-512">e784ceb6db96928b9956432b2b7a3ba7d0cd206c9babd974ea2a1c62cd04510c8af8132103bd5a4f9e2873595b209bfabb942612740870a1b101e29cf375b367</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://commons.apache.org/io/</url>
        </reference>
        <reference type="build-system">
          <url>http://vmbuild.apache.org/continuum/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/IO</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/commons/proper/io/trunk</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.maven.plugins/maven-release-plugin@3.2.0?type=maven-plugin">
      <dependency ref="pkg:maven/org.apache.maven.release/maven-release-api@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.release/maven-release-manager@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-core@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.release/maven-release-oddeven-policy@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.release/maven-release-semver-policy@3.2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.release/maven-release-api@3.2.0?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.release/maven-release-manager@3.2.0?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.release/maven-release-api@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interactivity-api@1.4?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.shared/maven-invoker@3.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-providers-standard@2.2.1?type=pom"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-manager-plexus@2.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-svn-commons@2.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar"/>
      <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interactivity-api@1.4?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.shared/maven-invoker@3.3.0?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-providers-standard@2.2.1?type=pom">
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-gitexe@2.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-jgit@2.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-hg@2.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-svnexe@2.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-gitexe@2.2.1?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-git-commons@2.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-git-commons@2.2.1?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-jgit@2.2.1?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-git-commons@2.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interactivity-api@1.4?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.3.202401111512-r?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@5.13.3.202401111512-r?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.3.202401111512-r?type=jar">
      <dependency ref="pkg:maven/com.googlecode.javaewah/JavaEWAH@1.1.13?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.googlecode.javaewah/JavaEWAH@1.1.13?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@5.13.3.202401111512-r?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.3.202401111512-r?type=jar"/>
      <dependency ref="pkg:maven/org.apache.sshd/sshd-osgi@2.7.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.sshd/sshd-sftp@2.7.0?type=jar"/>
      <dependency ref="pkg:maven/net.i2p.crypto/eddsa@0.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.sshd/sshd-osgi@2.7.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.sshd/sshd-sftp@2.7.0?type=jar">
      <dependency ref="pkg:maven/org.apache.sshd/sshd-core@2.7.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.sshd/sshd-core@2.7.0?type=jar">
      <dependency ref="pkg:maven/org.apache.sshd/sshd-common@2.7.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.sshd/sshd-common@2.7.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.i2p.crypto/eddsa@0.3.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-hg@2.2.1?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-svnexe@2.2.1?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-svn-commons@2.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-provider-svn-commons@2.2.1?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-manager-plexus@2.2.1?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar">
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.ow2.asm/asm@9.8?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-core@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject/guice@4.2.1?classifier=no_aop&amp;type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.19.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.28?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.inject/guice@4.2.1?classifier=no_aop&amp;type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@25.1-android?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@25.1-android?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.checkerframework/checker-compat-qual@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.1.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@2.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.checkerframework/checker-compat-qual@2.0.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.1.3?type=jar"/>
    <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.release/maven-release-oddeven-policy@3.2.0?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.release/maven-release-api@3.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.release/maven-release-semver-policy@3.2.0?type=jar">
      <dependency ref="pkg:maven/org.semver/api@0.9.33?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.semver/api@0.9.33?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.8?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm-commons@5.0.3?type=jar"/>
      <dependency ref="pkg:maven/commons-lang/commons-lang@1.0?type=jar"/>
      <dependency ref="pkg:maven/de.tototec/de.tototec.cmdoption@0.2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.ow2.asm/asm-commons@5.0.3?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm-tree@5.0.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.ow2.asm/asm-tree@5.0.3?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-lang/commons-lang@1.0?type=jar"/>
    <dependency ref="pkg:maven/de.tototec/de.tototec.cmdoption@0.2.0?type=jar"/>
  </dependencies>
</bom>
