{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:64fb92c1-5e4e-47d7-8b89-56aed67651db",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2023-09-09T07:40:45Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.9",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "8e595cdb67f17e4b41e046456970591d"
          },
          {
            "alg" : "SHA-1",
            "content" : "69e8ca804520d09ce4657e7235bae84d01cbffa6"
          },
          {
            "alg" : "SHA-256",
            "content" : "aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8"
          },
          {
            "alg" : "SHA-512",
            "content" : "1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b"
          },
          {
            "alg" : "SHA-384",
            "content" : "b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-sql_2.12",
      "version" : "3.5.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-sql_2.12@3.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spark.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@spark.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/spark.git/sql/spark-sql_2.12"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-sql_2.12@3.5.0?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "Facebook",
      "group" : "org.rocksdb",
      "name" : "rocksdbjni",
      "version" : "8.3.2",
      "description" : "RocksDB fat jar that contains .so files for linux32 and linux64 (glibc and musl-libc), jnilib files for Mac OSX, and a .dll for Windows x64.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b436b922b1721bbfdc83ccd4ad004622"
        },
        {
          "alg" : "SHA-1",
          "content" : "58691480ac749ec2b12b1f3ea9941ac9f7d5a361"
        },
        {
          "alg" : "SHA-256",
          "content" : "289cafede18172b2a477833485360f938fb82f5fc2c4aaaf2801a8b62f8e153b"
        },
        {
          "alg" : "SHA-512",
          "content" : "37abeb585d3e091b006ff322383d8f1defbf1eeecb4013f709aa18b8f43e27f87bdaf6545f005f6dd6638b02a2e5472be520fc7d046697691f96797a899c5faa"
        },
        {
          "alg" : "SHA-384",
          "content" : "d6cac15a6675e9d6c1dcc67bed23454e3529fa42ed052ba37cfa6bc35c04ad512a587a5b93b6ef1f795b989b6955fc54"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU General Public License, version 2",
            "url" : "http://www.gnu.org/licenses/gpl-2.0.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.rocksdb/rocksdbjni@8.3.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://rocksdb.org"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/rocksdb"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:https://github.com/facebook/rocksdb.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.rocksdb/rocksdbjni@8.3.2?type=jar"
    },
    {
      "publisher" : "Univocity Software Pty Ltd",
      "group" : "com.univocity",
      "name" : "univocity-parsers",
      "version" : "2.9.1",
      "description" : "univocity's open source parsers for processing different text formats using a consistent API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7032ba85007afd0bfc702a72bf486fd0"
        },
        {
          "alg" : "SHA-1",
          "content" : "081827d186e42129f23c3f1e002b757ad4b4e769"
        },
        {
          "alg" : "SHA-256",
          "content" : "31685122d5e392e98672ed6009a95a4c1623ca1185567bd44ee94527d454e5c3"
        },
        {
          "alg" : "SHA-512",
          "content" : "95656c856840b203507e42c33ef15bbf1995ad364ff229dba4f6358713259cbcad96a4aeb11db57d3f5ace2500bcfd702dd9457bea45186aa5ae7ed1bfd60559"
        },
        {
          "alg" : "SHA-384",
          "content" : "c29f921251bafd86bcc18b5cedf28fa53a3cbbc0fb8631c72c61038b02ce53c2141900faa54586edbbaa519cc5a815ab"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/univocity/univocity-parsers"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/univocity/univocity-parsers/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/univocity/univocity-parsers"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-sketch_2.12",
      "version" : "3.5.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "68542336b07aafe54ea16bad7291a405"
        },
        {
          "alg" : "SHA-1",
          "content" : "ff906e537723f708bfd62c571cabe78561098bc9"
        },
        {
          "alg" : "SHA-256",
          "content" : "e2c38fc342187fa4e93ce9f74543d5cd4b3f7c9fca36228733452e503c7cdb43"
        },
        {
          "alg" : "SHA-512",
          "content" : "8390d81ef34ceaa3601a46482568af6e9dd4aaf807ba8709827bfb12704b3fab109331b0cc4cf7d113aa091ab40e13d4ef45ec85f3015f2983efbffcbfc33769"
        },
        {
          "alg" : "SHA-384",
          "content" : "41339f8f8cd659cac43751142879749d23d0dbae9a98c6e8ea9a3485493a1fc286e64ea8143ec5cf74d4b4e801a929eb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-sketch_2.12@3.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spark.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@spark.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/spark.git/common/spark-sketch_2.12"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-sketch_2.12@3.5.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-core_2.12",
      "version" : "3.5.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0f11380844fbfc3cde2dfe19a97022ad"
        },
        {
          "alg" : "SHA-1",
          "content" : "630374b44a8004bca5f5a4ea655916eaa75f06e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "45d3b17513330a7381219f350b0f1556e9090bc798f2d98bc18693e14c9b25ce"
        },
        {
          "alg" : "SHA-512",
          "content" : "e1e0e6c05f59593fbe023fc317783c1d27c64c147733b0f1d659c72e8981d844acc1d861f079589fc05d30ecf04242082a55606e2a01f603c7a0263a0d2e0942"
        },
        {
          "alg" : "SHA-384",
          "content" : "9df8666a850fada9d66906667f65f8d9821d4238e99ab40908ab4a03587597ecc129a9c5a9d82bff06796a466c7dbfb7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-core_2.12@3.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spark.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@spark.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/spark.git/sql/spark-core_2.12"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-core_2.12@3.5.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro",
      "version" : "1.11.2",
      "description" : "Avro core components",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "31ec52433bce066f1b5698142e138e5d"
        },
        {
          "alg" : "SHA-1",
          "content" : "97e62e8be2b37e849f1bdb5a4f08121d47cc9806"
        },
        {
          "alg" : "SHA-256",
          "content" : "31fa41e47437b2a4168fd57a24a19c687b7347b4ed01388f4779362085b2f92a"
        },
        {
          "alg" : "SHA-512",
          "content" : "e313df5bb18791807899591c040e862803b122d8479b43f7c81cfa6e29ffb4a77a6e41a06cac1cafe1f30a7e36fc53e07934252fa99be17cac68a857173117ae"
        },
        {
          "alg" : "SHA-384",
          "content" : "255fb78980edd0b0630a3f57126cd29d78d050db952b7715c863bf33715029eec29a03a5b3e9b4c80ab44f89c03629bb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro@1.11.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://avro.apache.org"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:https://github.com/apache/avro/avro-parent/avro"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro@1.11.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro-mapred",
      "version" : "1.11.2",
      "description" : "An org.apache.hadoop.mapred compatible API for using Avro Serialization in Hadoop",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a4b1366138bcd33efdf09bdde02f61c5"
        },
        {
          "alg" : "SHA-1",
          "content" : "2005a729189450b43092633ad1a5d7379a901585"
        },
        {
          "alg" : "SHA-256",
          "content" : "930b6b3dc811e45621ff2a32bbb190f2925e2cfed9419f94b78578075a838041"
        },
        {
          "alg" : "SHA-512",
          "content" : "93eb6ecc6c82a1bc5f37e73872b2c7a8314478d7d1c7182a1dc3801708b39c41c3bb9bd196fcc20edb1e3d8c64890cd49ffd156835bd9bfc863af6ba75cbe554"
        },
        {
          "alg" : "SHA-384",
          "content" : "bc0634fd11f8f70c1a7453c21599590f753b1c43203f2d901e170628537c841ecfd7a1c0b879113b77be359b14ff86aa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro-mapred@1.11.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://avro.apache.org/avro-mapred"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:https://github.com/apache/avro/avro-parent/avro-mapred"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro-mapred@1.11.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro-ipc",
      "version" : "1.11.2",
      "description" : "Avro inter-process communication components",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2aed3e6e6fc397990cbd1f94a96e09bb"
        },
        {
          "alg" : "SHA-1",
          "content" : "45c8d7b32c67ae28ee56b4ca16a74db7332c9402"
        },
        {
          "alg" : "SHA-256",
          "content" : "810dc8f137a98de150dee029ae7991190ec898a09383c4d908346f711994ff2d"
        },
        {
          "alg" : "SHA-512",
          "content" : "34fea3dc88eb511f8c8919bee7c69bc93da08ea475e2735bfdc2737759193c506ca5ac10a8043413de1beb05ca8231c8dd713085ab5c5ecf946ba3f71916142a"
        },
        {
          "alg" : "SHA-384",
          "content" : "bf095b523b727bb4265a3c0335c4adf59fcc7a3c63ab92904429d5e0f54c274d711926e97fab2dd9a7d447759a54f80b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro-ipc@1.11.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://avro.apache.org"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:https://github.com/apache/avro/avro-parent/avro-ipc"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro-ipc@1.11.2?type=jar"
    },
    {
      "group" : "org.tukaani",
      "name" : "xz",
      "version" : "1.9",
      "description" : "XZ data compression",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "57c2fbfeb55e307ccae52e5322082e02"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ea4bec1a921180164852c65006d928617bd2caf"
        },
        {
          "alg" : "SHA-256",
          "content" : "211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac"
        },
        {
          "alg" : "SHA-384",
          "content" : "aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://tukaani.org/xz/java.html"
        },
        {
          "type" : "vcs",
          "url" : "https://git.tukaani.org/?p=xz-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar"
    },
    {
      "publisher" : "com.twitter",
      "group" : "com.twitter",
      "name" : "chill_2.12",
      "version" : "0.10.0",
      "description" : "chill",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a2cedd70ae6d7327696c24ff5464072d"
        },
        {
          "alg" : "SHA-1",
          "content" : "b208321208c0b3232a305fccd59df3d6a1f1eecd"
        },
        {
          "alg" : "SHA-256",
          "content" : "5cb5db46112699e6de681dedc0c1d0b300f5ccc2c0921b6bb3e4dba2e66c6fe6"
        },
        {
          "alg" : "SHA-512",
          "content" : "862d7d4c3de2d7cb94a6fa90dcec683e14c67944c6a542a30b7cf522b46c306fed6399dd300b5c4357fa7a9d6ce166081326c0800865af28dc5b7994d2577d66"
        },
        {
          "alg" : "SHA-384",
          "content" : "575c027e5be30fb1a43637ce7a4739b48c5c42418b6000f74477d2921d8d6db48420e510bbfa55d810b0207c1c017faf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/twitter/chill"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/twitter/chill"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "kryo-shaded",
      "version" : "4.0.2",
      "description" : "Fast, efficient Java serialization. This contains the shaded reflectasm jar to prevent conflicts with other versions of asm.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "27717b481916c44eed34ea7a68782ed5"
        },
        {
          "alg" : "SHA-1",
          "content" : "e8c89779f93091aa9cb895093402b5d15065bf88"
        },
        {
          "alg" : "SHA-256",
          "content" : "a4899f57fef456b9ec66f730e7b493ecb3dc494cc5758721ed9c18416fd2d3b6"
        },
        {
          "alg" : "SHA-512",
          "content" : "21d3500194117f5f34951c7374bdde658be18b842866ea68f16ef47453d4dd31b11d384af2dab3ac4340b015b414402f6b45d4e6a10354fbda5bd8a17e4ce3e3"
        },
        {
          "alg" : "SHA-384",
          "content" : "33c8d09ba00c14a077e82f2d7c1a54496a21d20896505d1d97cd30f22d9cb773e060061abc43fc14f15b6619ba4f0c86"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/kryo/kryo-shaded"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/kryo/kryo-shaded"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "minlog",
      "version" : "1.3.0",
      "description" : "Minimal overhead Java logging",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5ab0ee168b90e0ad7010b159e603d304"
        },
        {
          "alg" : "SHA-1",
          "content" : "ff07b5f1b01d2f92bb00a337f9a94873712f0827"
        },
        {
          "alg" : "SHA-256",
          "content" : "f7b399d3a5478a4f3e0d98bd1c9f47766119c66414bc33aa0f6cde0066f24cc2"
        },
        {
          "alg" : "SHA-512",
          "content" : "ca319c94b7fd8a275dcc3c5102fc01d73071ac77f5e14b4fc5b6547f96574a4fff0e8cb7b0b0d5006e71faa00575a91defdbfc92a94d9d38dd65520d4ab52000"
        },
        {
          "alg" : "SHA-384",
          "content" : "3f9b5b7fd91332ad64d235024d486e24b00760e714713153a61f10e6867bc3e5b617a7bf0bed889a01f0cdb435415d6a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/minlog"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/minlog"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar"
    },
    {
      "publisher" : "com.twitter",
      "group" : "com.twitter",
      "name" : "chill-java",
      "version" : "0.10.0",
      "description" : "chill-java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3c0e9cbbb2016364333f2cea3922ae97"
        },
        {
          "alg" : "SHA-1",
          "content" : "0fd2eb52afd9ab4337c9e51823f41ad8916e6976"
        },
        {
          "alg" : "SHA-256",
          "content" : "52afd3c1256d6f89293ba616c0c9ebf11191bb9e8159cd0c1cfdc99e5e0c5ffe"
        },
        {
          "alg" : "SHA-512",
          "content" : "48ae455095f0a9ff7ed9b84c9b9bf339c14f6599703b7a34a473ea9c457b0ae700f793d6bf00d1af5e0eb307c9a68d2a10309faea77aaf2245afded08420cb8d"
        },
        {
          "alg" : "SHA-384",
          "content" : "7641e1570bd40b064e17c98c656b8b80680b36d2678973c53ea0557fb212d9ce535eda748cb7234813d953ef90e2cb8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.twitter/chill-java@0.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/twitter/chill"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/twitter/chill"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.twitter/chill-java@0.10.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-client-api",
      "version" : "3.3.4",
      "description" : "Apache Hadoop Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "775eddc3008e69e63b68440114b0f0f5"
        },
        {
          "alg" : "SHA-1",
          "content" : "6339a8f7279310c8b1f7ef314b592d8c71ca72ef"
        },
        {
          "alg" : "SHA-256",
          "content" : "e513d71b78086b5caaa439f4402b43e20df01446d56b66084ad419452878701c"
        },
        {
          "alg" : "SHA-512",
          "content" : "b8ba99015ffd22dae5e4dd900e25e1f56f535cb3bd56168d867b313f2ab797b5c12aa01c9fe0e2817b178a6c8f9a7b8afb3a291ec01f0c01a8d9b3c6f6b5b6b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "6200dbba45d512975da88ff6acce21442f70c92514bb470a5bd704091692d0f69b42342d399fae406add7c4311f7ef75"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-client-runtime",
      "version" : "3.3.4",
      "description" : "Apache Hadoop Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "64245768b537a07e4bf1687d1a9c4eaa"
        },
        {
          "alg" : "SHA-1",
          "content" : "21f7a9a2da446f1e5b3e5af16ebf956d3ee43ee0"
        },
        {
          "alg" : "SHA-256",
          "content" : "9377a68071137ae5f5c8cdc2ed20d6f904a1df4d06df26b47ed8872a1b0d8d47"
        },
        {
          "alg" : "SHA-512",
          "content" : "2d0442b3bcb04d18f2de036f5d189745b8866c14de72e5027901718f1100f5090fb14ece684cc8f93a9e2227645db5b13c4abd51c45a9b1156a0a82ebdde97d7"
        },
        {
          "alg" : "SHA-384",
          "content" : "bfc9ec036aebbb73f922cb9add74be3fa0dce8617e75d6bd94e7ba1b3173a9cf0e4195ed4a751015d90ed707845d1f70"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.1.3",
      "description" : "Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "92eb5aabc1b47287de53d45c086a435c"
        },
        {
          "alg" : "SHA-1",
          "content" : "f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f"
        },
        {
          "alg" : "SHA-256",
          "content" : "70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5d1fc8ec4544e1fa0f7c4aae8dbcca466c4987bc92fbbc430b054b10d646b745add4a754b1be9d50edd64330c798c53173a97289db57a966312e16f934e9d1f"
        },
        {
          "alg" : "SHA-384",
          "content" : "00dc41783f4081585e20adcfe83fd4dbb6b5a27236ee633d7e53dedcbca83ba5e5f0ca68d31f95e9c724b365e4c67499"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-launcher_2.12",
      "version" : "3.5.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "94fa2ef87a3d499b03e85d97f1470bcf"
        },
        {
          "alg" : "SHA-1",
          "content" : "f3a571703c8dd4d5d1b7b18f3152beb07c19e1d2"
        },
        {
          "alg" : "SHA-256",
          "content" : "74d53b15abfdcafffb884d5a726e52262aebacfcbecad94257b3437fa90fdd4c"
        },
        {
          "alg" : "SHA-512",
          "content" : "09a141167922e09cf063e2cfed1d15d9a0df75100fe284b1a537a80c0fa89fb6a38ca548a7f2bd866010109d4114f870a772bcd964c4864aae65ac1b8c72b969"
        },
        {
          "alg" : "SHA-384",
          "content" : "1dced90efdc40a55001c14873e227fa08f4b8bdf01960d376edc2a08f274f0e3b67ef717bb1400fde296b3ee2b1b4403"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-launcher_2.12@3.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spark.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@spark.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/spark.git/spark-launcher_2.12"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-launcher_2.12@3.5.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-kvstore_2.12",
      "version" : "3.5.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5c15b0d2cbf5ce1d343a6303cb469730"
        },
        {
          "alg" : "SHA-1",
          "content" : "ea62b9fd78497e88926d6be9d3f2e93e78c9e836"
        },
        {
          "alg" : "SHA-256",
          "content" : "7bea2d31d9cbdb09dcb6c2ad06836503b1eef7b674fcbd7e31a9aefbc22290b0"
        },
        {
          "alg" : "SHA-512",
          "content" : "cd86709aee3fafad084fe300eb91a8ec1f17be4ac998e6350b4aedc51e0c6f06d668f77d2055dde915e3aca3875c4f4ec38ca54870164e3456ed1e161a6f34f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "ea07d43215e24cd50bca9ee5fa4ac114679573fd49f68840a350d96b321e5b8c43477f9e2e4d1983ff1631b42b453324"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-kvstore_2.12@3.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spark.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@spark.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/spark.git/common/spark-kvstore_2.12"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-kvstore_2.12@3.5.0?type=jar"
    },
    {
      "publisher" : "FuseSource, Corp.",
      "group" : "org.fusesource.leveldbjni",
      "name" : "leveldbjni-all",
      "version" : "1.8",
      "description" : "An uber jar which contains all the leveldbjni platform libraries and dependencies",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6944e9bc03c7938868e53c96726ae914"
        },
        {
          "alg" : "SHA-1",
          "content" : "707350a2eeb1fa2ed77a32ddb3893ed308e941db"
        },
        {
          "alg" : "SHA-256",
          "content" : "c297213b0e6f9392305952753f3099a4c02e70b3656266fe01867e7b6c160ffe"
        },
        {
          "alg" : "SHA-512",
          "content" : "2e9f806af5d89c00e345b4516ffd325893a07f30c87274fa5b8ce314aad021633750b665d8c338fbf5adc79a527e19caf96d0b12af57e56fb8d3d8f7fd845a96"
        },
        {
          "alg" : "SHA-384",
          "content" : "f10d7ce88da5a9fada67fcbf6fc02939346e67428ee5dd7b000f884d8046131391ee1ece83885d3de60532d1227a66f2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://leveldbjni.fusesource.org/leveldbjni-all"
        },
        {
          "type" : "distribution",
          "url" : "http://repo.fusesource.com/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/fusesource/leveldbjni/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "leveldbjni-dev-subscribe@fusesource.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/fusesource/leveldbjni/leveldbjni-all"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-network-common_2.12",
      "version" : "3.5.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ff5f51bb0d1f2296bb4a8c7655b040d2"
        },
        {
          "alg" : "SHA-1",
          "content" : "9f6a5ceec94baa63c5f73a5c6dbe47b791f601ed"
        },
        {
          "alg" : "SHA-256",
          "content" : "4627a5a6ff05e2f2ece67d566281c1bf890a5c3676db7494e249284aebe94f49"
        },
        {
          "alg" : "SHA-512",
          "content" : "de41025df22385e3dc396d337d9b4fc2945fd1b69d82dbf48d05d8c9fe201dfee33868cf34c55e07e5df8cefd26b2078cacb7928da52fd01f068852515d1a849"
        },
        {
          "alg" : "SHA-384",
          "content" : "9d1d51797109d9b27f920d5725f95587185a7231ece295710d7b5322cf1087d3ef26ae1264ff742802f55f3ee50b5eb6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-network-common_2.12@3.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spark.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@spark.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/spark.git/common/spark-network-common_2.12"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-network-common_2.12@3.5.0?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "14.0.1",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has two code dependencies - javax.annotation per the JSR-305 spec and javax.inject per the JSR-330 spec.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "58553f87d83b9f8ec74bd3529083ee2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "69e12f4c6aeac392555f1ea86fab82b5e5e31ad4"
        },
        {
          "alg" : "SHA-256",
          "content" : "d69df3331840605ef0e5fe4add60f2d28e870e3820937ea29f713d2035d9ab97"
        },
        {
          "alg" : "SHA-512",
          "content" : "e920540dbdee79fba1a5e0966ae92ac37358aa4126c04a08732e4260916807901d8dea41322037ef7908fc0204281d05a1bfa95401fcfc473630c0bc8e81343a"
        },
        {
          "alg" : "SHA-384",
          "content" : "1f5c72fdf4fbef5fe6044054d83cda82d409ce2b8e304913cc985341ceb13e75728dfcdba522dc87aa04577a054afeae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@14.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/guava-libraries/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/guava-libraries/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/guava-libraries/source/browse/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@14.0.1?type=jar"
    },
    {
      "group" : "com.google.crypto.tink",
      "name" : "tink",
      "version" : "1.9.0",
      "description" : "Tink is a small cryptographic library that provides a safe, simple, agile and fast way to accomplish some common cryptographic tasks.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4dde51a12b3ba7e77c1a179b659c7250"
        },
        {
          "alg" : "SHA-1",
          "content" : "010de1d0ea8401c3e33cad83c0d11df712d40ba5"
        },
        {
          "alg" : "SHA-256",
          "content" : "8faf92d116a0ba138ee4e99a7418e985897818c2f6a9d4c01b8fe6b07db60eb7"
        },
        {
          "alg" : "SHA-512",
          "content" : "f4c72066953f8e411bcb701b75a6e5509aeee31bc0bc4722212b8e291d5e15c34495b262fec476cfdbe8c91696ae3762a896735371c732627bf4de320befbf05"
        },
        {
          "alg" : "SHA-384",
          "content" : "7d726f7568b24f374b8fe50f02fcd3a68c3ac9df962d9c8dc2d17ebb58c5aa415e0ea802e52d37fcd821ad4dfe07f3ae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.crypto.tink/tink@1.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/tink-crypto/tink-java"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/tink-crypto/tink-java/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/group/tink-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/tink-crypto/tink-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.crypto.tink/tink@1.9.0?type=jar"
    },
    {
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.10.1",
      "description" : "Gson JSON library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "df6097815738cb31fc56391553210843"
        },
        {
          "alg" : "SHA-1",
          "content" : "b3add478d4382b78ea20b1671390a858002feb6c"
        },
        {
          "alg" : "SHA-256",
          "content" : "4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593"
        },
        {
          "alg" : "SHA-512",
          "content" : "7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727"
        },
        {
          "alg" : "SHA-384",
          "content" : "48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/gson/gson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/gson/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar"
    },
    {
      "publisher" : "Joda.org",
      "group" : "joda-time",
      "name" : "joda-time",
      "version" : "2.12.5",
      "description" : "Date and time library to replace JDK date handling",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a0f575850531c768542236ea245b7516"
        },
        {
          "alg" : "SHA-1",
          "content" : "698ce67b5e58becfb4ef2cf0393422775e59dff4"
        },
        {
          "alg" : "SHA-256",
          "content" : "10628411ecb40c4634196c544f34681abdeef826f377096357433d1f9a135bc6"
        },
        {
          "alg" : "SHA-512",
          "content" : "300d1acaac8c49e3d6d74077392ecb9aba4115173f8734923413bfb049f01a668f4852099e9682146dd2f41faed244ca2a91c2d70b98930bffb811532f99efdf"
        },
        {
          "alg" : "SHA-384",
          "content" : "acd89d4bfe98d1388b8652995d288ef26441072898d25f68abead84e016d858af7b775cf0e830257c77873c4a7b22139"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/joda-time/joda-time@2.12.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.joda.org/joda-time/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/content/repositories/joda-releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/JodaOrg/joda-time/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/JodaOrg/joda-time"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/joda-time/joda-time@2.12.5?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-network-shuffle_2.12",
      "version" : "3.5.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3d0a0b89d4b2df9a7f059c1d9b405a27"
        },
        {
          "alg" : "SHA-1",
          "content" : "202e4fa3fd56bb96e750cac1f50650812770e863"
        },
        {
          "alg" : "SHA-256",
          "content" : "241f25c3b9eee32669e3c52a74473385128da1ea546f6942381e9214f8a64f62"
        },
        {
          "alg" : "SHA-512",
          "content" : "784f10af981c3011cfe36873b430670d44b749bb4e88b76ca74885638d1233700a0fd6dbcac0ef4af2a05dda9ca7d23c1af126cfbdd9d8c891da234ad4722075"
        },
        {
          "alg" : "SHA-384",
          "content" : "dab5b6ff3e9bd87dc3b82f3cfa153f8965f5f82a0519ec738ca2e845661090c3a8ec765ca14d6a064e32b1eb4133e342"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-network-shuffle_2.12@3.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spark.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@spark.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/spark.git/common/spark-network-shuffle_2.12"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-network-shuffle_2.12@3.5.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-unsafe_2.12",
      "version" : "3.5.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6a32ca47290bd71cf732fe2111faac84"
        },
        {
          "alg" : "SHA-1",
          "content" : "7f701879f433db11aa7e410069bd7b0938f7cc3e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d828d7bec3dc33b053b12297f68ab1af297e98cfe45a61a034d1ede05f8727e2"
        },
        {
          "alg" : "SHA-512",
          "content" : "cc478bede9a660fb9255c9198456733a6786e86d635737ab37dee895a549d80b4b5da4fee47e06760d3975ce2876c7cd474125d317b9d19705d76ce794f4d255"
        },
        {
          "alg" : "SHA-384",
          "content" : "513bbbf829c042a1b5b5b1ab349c42141516be23c248ca5d5c54ee0790047b0373bdfc5cd8e6f47f55217528caa0b932"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-unsafe_2.12@3.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spark.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@spark.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/spark.git/common/spark-unsafe_2.12"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-unsafe_2.12@3.5.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-common-utils_2.12",
      "version" : "3.5.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a0ed1f669f0a0c6c2de23ce2bcbb3515"
        },
        {
          "alg" : "SHA-1",
          "content" : "81dc6744035c565f7b40cef19eb6a12f81671f3c"
        },
        {
          "alg" : "SHA-256",
          "content" : "9d12c0dd999a4c43b1384758822d07d3808050d7eb19dad634d1f83c0b5d6e85"
        },
        {
          "alg" : "SHA-512",
          "content" : "5666894215ad2a2b8acda3400a9cf41de4367718a58014d06e513a7209a84feeb77ebb6563873ed3e59b97823a03179a9041549ac1bcc9f9b90e1126e8180da3"
        },
        {
          "alg" : "SHA-384",
          "content" : "3268b90cacd0a9ac7477da68445327e68049d356125676b355f51bea5efc7b768b0d5f2a4b470570e0ff5904d1193ce3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spark.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@spark.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/spark.git/common/spark-common-utils_2.12"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jul-to-slf4j",
      "version" : "2.0.7",
      "description" : "JUL to SLF4J bridge",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "965fd8c7c67bd57eb63b321d0bedf498"
        },
        {
          "alg" : "SHA-1",
          "content" : "a48f44aeaa8a5ddc347007298a28173ac1fbbd8b"
        },
        {
          "alg" : "SHA-256",
          "content" : "eaba65483bb38c93e68d557a19e5738962322de1946545dbf40e5e32f6293008"
        },
        {
          "alg" : "SHA-512",
          "content" : "7df8d8db9bf6d1eb0f7728ad15fbd820533eca33e55a97ea2f177028f5c3e02ee8142768fff3e9f3204f40cfa9e4cc720a4ef8eb2aac6177e7b78e26702b30cf"
        },
        {
          "alg" : "SHA-384",
          "content" : "04f447db7af836df84dcecd74f8f6c57a7b63276e809bc9810a33815432a3626d1d0273481450b031d50e1c97fd88157"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/jul-to-slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.7?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jcl-over-slf4j",
      "version" : "2.0.7",
      "description" : "JCL 1.2 implemented over SLF4J",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4e8d6cd31f7e6277280c95157ac7845a"
        },
        {
          "alg" : "SHA-1",
          "content" : "f127fe5ee53404a8b3697cdd032dd1dd6a29dd77"
        },
        {
          "alg" : "SHA-256",
          "content" : "41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742"
        },
        {
          "alg" : "SHA-512",
          "content" : "221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17"
        },
        {
          "alg" : "SHA-384",
          "content" : "fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/jcl-over-slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-slf4j2-impl",
      "version" : "2.20.0",
      "description" : "The Apache Log4j SLF4J 2.0 API binding to Log4j 2 Core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "52355bf9fbb12407e08be175c12dfc7c"
        },
        {
          "alg" : "SHA-1",
          "content" : "155c8b9bbdac91d8461d9a403a646e6bd0d365d8"
        },
        {
          "alg" : "SHA-256",
          "content" : "b8dd3e4ea9cffa18db5f301cd8c539158662e691efd4701aa87b4d09961bd8b0"
        },
        {
          "alg" : "SHA-512",
          "content" : "3954329496870ec7acb0494e7c2e4d1d2585ff3695da3dd01cca4bdd4dbd5a8b5d9cbabc2a90cc2b5f257e57a96a458156382bfdb7c93512ca5579d646c98bb2"
        },
        {
          "alg" : "SHA-384",
          "content" : "2a456e835fb8f2d7f7d7bac38331e16fb66c888d48eb79b630504e719b2d703a7b131b47f96931425d37f22febc541df"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j-slf4j2-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2/log4j-slf4j2-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.20.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-api",
      "version" : "2.20.0",
      "description" : "The Apache Log4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f9446464667f0139b839b5e9da37f5b9"
        },
        {
          "alg" : "SHA-1",
          "content" : "1fe6082e660daf07c689a89c94dc0f49c26b44bb"
        },
        {
          "alg" : "SHA-256",
          "content" : "2f43eea679ea66f14ca0f13fec2a8600ac124f5a5231dcb4df8393eddcb97550"
        },
        {
          "alg" : "SHA-512",
          "content" : "851016b38421d21864bb3073089c44000f941bfbaa9dc518db7bf7fb3c7f942bfb2c0c7b832e375e82b2f285379bd0935e42aa1833817daacb4fca2a6a9500bc"
        },
        {
          "alg" : "SHA-384",
          "content" : "12b05c61f49caab0b845e93967228a3bd3ab096c4ea1516cb7263f49963137a688a178ddebe790ccc3c0c73f2d4440fc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2/log4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-core",
      "version" : "2.20.0",
      "description" : "The Apache Log4j Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "20bd40d026d35a93fe710acb141e93da"
        },
        {
          "alg" : "SHA-1",
          "content" : "eb2a9a47b1396e00b5eee1264296729a70565cc0"
        },
        {
          "alg" : "SHA-256",
          "content" : "6137df848cdaed9f4d5076f75513c6c85da80b953f4e7acca38098b770763f55"
        },
        {
          "alg" : "SHA-512",
          "content" : "a7fe8fa2304c1b013513c1838013804cf601a7148dfef95642ea763c9550a6d844d9a1e528c9c21efc7ea830d13fbbb55e2db2c2eeb5542c4d9f00c127f211e4"
        },
        {
          "alg" : "SHA-384",
          "content" : "1d8b0349286118f102014706f02b7851f10ca0b1554bd7a2e1efdda76ccab6e0abd967490d06fca030f2a26289686275"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2/log4j-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-1.2-api",
      "version" : "2.20.0",
      "description" : "The Apache Log4j 1.x Compatibility API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "986cff74b065cdd1d6b860ac1e9a20fa"
        },
        {
          "alg" : "SHA-1",
          "content" : "689151374756cb809cb029f2501015bdc7733179"
        },
        {
          "alg" : "SHA-256",
          "content" : "89d761af83de7e08e3c1916bc757242cedbbc1f38fb76fd13f89ef36b2671a45"
        },
        {
          "alg" : "SHA-512",
          "content" : "64f208ca34f3ca9d7902024d781b629795ffaa41ac4f4dd4487e1e0ff97351d62d83f399d6f8b5a7044af5d9b117a7cdd74a7b0fd2030af5bc4ba05a3e344a24"
        },
        {
          "alg" : "SHA-384",
          "content" : "6c33bce8423e1ac38ac9f11fbec247bc2255dc2a9f1d9994e87c6db861de51df606d1a4163b1c1a3e57987f0f64e2694"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j-1.2-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2/log4j-1.2-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.20.0?type=jar"
    },
    {
      "group" : "javax.activation",
      "name" : "activation",
      "version" : "1.1.1",
      "description" : "The JavaBeans(TM) Activation Framework is used by the JavaMail(TM) API to manage MIME data",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "46a37512971d8eca81c3fcf245bf07d2"
        },
        {
          "alg" : "SHA-1",
          "content" : "485de3a253e23f645037828c07f1d7f1af40763a"
        },
        {
          "alg" : "SHA-256",
          "content" : "ae475120e9fcd99b4b00b38329bd61cdc5eb754eee03fe66c01f50e137724f99"
        },
        {
          "alg" : "SHA-512",
          "content" : "49119b0cc3af02700685a55c6f15e6d40643f81640e642b9ea39a59e18d542f8837d30b43b5be006ce1a98c8ec9729bb2165c0442978168f64caa2fc6e3cb93d"
        },
        {
          "alg" : "SHA-384",
          "content" : "021f29ab14a1db9b27e31778fd5b6ead2ed46fef534cfab6b34b1b839547c78fc39cfb1568f0b2206bb46a98c4b9e1d4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.activation/activation@1.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://java.sun.com/javase/technologies/desktop/javabeans/jaf/index.jsp"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.activation/activation@1.1.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-recipes",
      "version" : "2.13.0",
      "description" : "All of the recipes listed on the ZooKeeper recipes doc (except two phase commit).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "02685a8f2e44faa1941e953ac426a8d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "1e6d5cf7b18a402f5d52785877010711538d68a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "22be05c1a3e6c5ede22e77372b08dc631a3b93b64acb7f682537ea65a6ddba06"
        },
        {
          "alg" : "SHA-512",
          "content" : "498ce3631ef135b96b467cd3c4fa8ac1797538047589b1454911ec77a5205773346a367492db0771167e8f612c911bac44c8c7c651be00e206eb60e2f0bba2f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "08a4134a208a2c59b0354e5d4e88b29f0f2f4f0bd0b83a6ccd54da70602499a8dedd5711d5481c23ba8782049cdb546c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://curator.apache.org/curator-recipes"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-recipes"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-framework",
      "version" : "2.13.0",
      "description" : "High-level API that greatly simplifies using ZooKeeper.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "91e34b86afb44ef5c728f69ed9790f1d"
        },
        {
          "alg" : "SHA-1",
          "content" : "d45229aee7d3f1f628a34fcac9b66ed5ba52c31f"
        },
        {
          "alg" : "SHA-256",
          "content" : "db084e5e0fed0548a8128f12a3e7a15c875c9595e75316c9578d64e77375c4a9"
        },
        {
          "alg" : "SHA-512",
          "content" : "7a9d520b5668ada07d05435f5632ab24d11bb079338388f43668960a3181d665568a2ef4a73222870362a84e1eeb59ef9ebf171bbcfdd7216735821328287798"
        },
        {
          "alg" : "SHA-384",
          "content" : "bf989371e089766e2bc00589c4ce3419382cfe5da67f1c815604653d59a6429642a6e9008c64a2d09d6398816c527d32"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://curator.apache.org/curator-framework"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-client",
      "version" : "2.13.0",
      "description" : "Low-level API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca2c6ca2277e78d1f6b865ee82e10357"
        },
        {
          "alg" : "SHA-1",
          "content" : "a1974d9b3251c055408059b2f408d19d7db07224"
        },
        {
          "alg" : "SHA-256",
          "content" : "62ab2201b5b9af63b215a4e6829dbe7d553a0805cfb0b1a665f9b49da8270c51"
        },
        {
          "alg" : "SHA-512",
          "content" : "72909bbf56f63fb7afba996336e7270ae08010976b4bb3b8bb90269d53fde78c63f8131a941ebb7cc554981a522f15e2b2a9ec63387d77f7117e5a1ed0b8c028"
        },
        {
          "alg" : "SHA-384",
          "content" : "57d338248aa56fa86aab71303a2746c7e4f061a18029a096f99bdadb7a87152f5067e1955aa2acb928edbcac0631b613"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://curator.apache.org/curator-client"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-client"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper",
      "version" : "3.6.3",
      "description" : "ZooKeeper server",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a87ec9c2634be7babf2328e1a0a03202"
        },
        {
          "alg" : "SHA-1",
          "content" : "a6e74f826db85ff8c51c15ef0fa2ea0b462aef25"
        },
        {
          "alg" : "SHA-256",
          "content" : "ac44de96d37a80d463c1e01aaa2ea86b19490fa17a37438d14491456c0e4a911"
        },
        {
          "alg" : "SHA-512",
          "content" : "086683a17870535c0f66a6ca531e92c325a2a46b37d56fa15d6d7c8b00d01ac299ef2023a3a082879adf693a3dbbe3515009dd33a724f81d1ea71bda0f78ee04"
        },
        {
          "alg" : "SHA-384",
          "content" : "cf7739ec3208302c68c15bc7221ce12158a79dadac990b309cc0405bf5321ad7b7b9183326f9d066774bc6fdba1cb41c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper-jute",
      "version" : "3.6.3",
      "description" : "ZooKeeper jute",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7c44c4104a0da46b666562400a4a2c82"
        },
        {
          "alg" : "SHA-1",
          "content" : "8990d19ec3db01f45f82d4011a11b085db66de05"
        },
        {
          "alg" : "SHA-256",
          "content" : "6f463ade2b777f81e6c3e145b3fc03d4b39131b73dcf8c7f4b89ac4b1bacc9c5"
        },
        {
          "alg" : "SHA-512",
          "content" : "775ac90d270d3ddfb902a83abc5192fafb0b6837914112124f768419a2a92249c9f49d5a08cdcc530da10442ee0419051353b04dc22c2c26d55ddb7df528b215"
        },
        {
          "alg" : "SHA-384",
          "content" : "85cf71ac9cb3479ab819c9ddb42b904377a67a177e5e92664898138021bf5f0622332ba2e247ac0f87c8b7812e3c9b1a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper-jute"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper-jute"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.6.3?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-plus",
      "version" : "9.4.52.v20230823",
      "description" : "Jetty JavaEE style services",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ea707b6973d2e573175ec6598d95b638"
        },
        {
          "alg" : "SHA-1",
          "content" : "6779bd470c5f1119c936e553ede6df448e314e8a"
        },
        {
          "alg" : "SHA-256",
          "content" : "286bf6cab4a0510ce5129c7a9f6a21d7231c1450b8ebafc092f68a415f07452f"
        },
        {
          "alg" : "SHA-512",
          "content" : "d75a5e01a0b90099c2d1f9433451fe5f9f1570febf4faf9d47d311c4d611aaf86c656afaff880e20c49e42ce709e9cc35e908d88c6d644bf7412e62ea18485c8"
        },
        {
          "alg" : "SHA-384",
          "content" : "c7879412a6e717ff50958cd6d68081896cc86fff0a626e4fdcb99a5be7d3fcb0e4972304b8d25d8e586f25e8afb7d3ae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-plus@9.4.52.v20230823?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.org/jetty/jetty-plus"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project/jetty-plus"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-plus@9.4.52.v20230823?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-webapp",
      "version" : "9.4.52.v20230823",
      "description" : "Jetty web application support",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c6c542a1a781b7c636bd2038f8add27"
        },
        {
          "alg" : "SHA-1",
          "content" : "f1b4d937851456a178126d89fed86517a636691a"
        },
        {
          "alg" : "SHA-256",
          "content" : "f3a29a7cb486ecee5110be3205a220ab2ccdf40167320b4829c642c1ad3c8fff"
        },
        {
          "alg" : "SHA-512",
          "content" : "e3d4054665bacdfceb1b8a54bdd53ff4fcfd3cd43b5adbbb934b4b02f0e659de67ab660cc190f7dcd425cbbafcaf7613933be59f8a371b0a36593bde86f38a77"
        },
        {
          "alg" : "SHA-384",
          "content" : "36d47bccb067238d87e4f00848be082d1c01e677d23623521f3107284118688fe91c451b619540cd2358562b8c457d1c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.52.v20230823?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.org/jetty/jetty-webapp"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project/jetty-webapp"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.52.v20230823?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-xml",
      "version" : "9.4.52.v20230823",
      "description" : "The jetty xml utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "77b7b055b8e611987275284a2fca2223"
        },
        {
          "alg" : "SHA-1",
          "content" : "7309a09ec3c113a0d8d64e9672a6d1383caf3d5a"
        },
        {
          "alg" : "SHA-256",
          "content" : "a11b27c1689ebbc4603f178b57059939d142ba4e1317a7baa784d1fd4792265b"
        },
        {
          "alg" : "SHA-512",
          "content" : "2536ca435d6b16a7264669d41ce415c472c848d7afbfc3f4b08cb309b3b606cc9f799ca248f97b11abe6bb05031705ef5e2ac01246c93172140fc9bcefa6e044"
        },
        {
          "alg" : "SHA-384",
          "content" : "fb45209077eae66b4afce44a24a63af1ecd36b82c4f18df802c3df5bbed425e38720e1293ebe6aefc020d461215493c5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-xml@9.4.52.v20230823?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.org/jetty/jetty-xml"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project/jetty-xml"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-xml@9.4.52.v20230823?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-jndi",
      "version" : "9.4.52.v20230823",
      "description" : "JNDI spi impl for java namespace.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d2cba85f4b437d56dc514e5be77898a3"
        },
        {
          "alg" : "SHA-1",
          "content" : "9dac3d648634f62d29175af1ef9f90c83054592d"
        },
        {
          "alg" : "SHA-256",
          "content" : "4b4fbfae40c7674fc8fc6498a3670fd998af6c149da70125c1e44192ad1b3d26"
        },
        {
          "alg" : "SHA-512",
          "content" : "0228d955c9dfde9e60f4e604246966ad325b6b22ec5e500291ca1e69ef0458b7053ff9c42d861300a7ee9f60f313cc2834db3f0c141b075e8895bf89c85fbd7d"
        },
        {
          "alg" : "SHA-384",
          "content" : "47d7e2ef5fddfb7b63b2619de8d00572b368430301535aca9e60a184a054940afeb78a740fa4df8a54fbeb5064b06bd3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-jndi@9.4.52.v20230823?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.org/jetty/jetty-jndi"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project/jetty-jndi"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-jndi@9.4.52.v20230823?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-security",
      "version" : "9.4.52.v20230823",
      "description" : "Jetty security infrastructure",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b9db571967cf52f182f9b4047d97731a"
        },
        {
          "alg" : "SHA-1",
          "content" : "36923429834f04168ab619a8c44cff035e2e7970"
        },
        {
          "alg" : "SHA-256",
          "content" : "ab7c4a342b0bd9f0522ca0d4134b3127f7f2d7f2339e612779a574e3a118671a"
        },
        {
          "alg" : "SHA-512",
          "content" : "3de3dad8e1b1f7a67c05e2ec0037603fcf309f667af207583506db29e2d34ad38c43ade3ec90bf8c59dad4625423c06b452cf0cbe875399eb228eb77080cd82e"
        },
        {
          "alg" : "SHA-384",
          "content" : "a5b411176063ad46d9c981097c96925ff16814a5be3021124ca826c7270c98a5cf8175395e92f38d48d7af81969e2e02"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-security@9.4.52.v20230823?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.org/jetty/jetty-security"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project/jetty-security"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-security@9.4.52.v20230823?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-util",
      "version" : "9.4.52.v20230823",
      "description" : "Utility classes for Jetty",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d612a6736c104913377cb4a30d3939ad"
        },
        {
          "alg" : "SHA-1",
          "content" : "86419a224c0a8ffaf04f3e4e4fd0fe889a40c29c"
        },
        {
          "alg" : "SHA-256",
          "content" : "06e18c3406d8138ac1417d32f5bea051ffd4e1f8ffcc83049989171efb7df3fa"
        },
        {
          "alg" : "SHA-512",
          "content" : "3cd7f520e278c3cf80009a433f22a02ed079e63e550f06e3973968d43bd16a99c6d38e98131247b78205f43b15981adbebb86dd97e01c78ebe3de7a65b157c4b"
        },
        {
          "alg" : "SHA-384",
          "content" : "68fb009beff8ace55b2567829a8f87af60e721387e5ba3d53093ac7b3647f9ba272d1768706d1a9b879b0829b39e1bc7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-util@9.4.52.v20230823?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.org/jetty/jetty-util"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project/jetty-util"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-util@9.4.52.v20230823?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-server",
      "version" : "9.4.52.v20230823",
      "description" : "The core jetty server artifact.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "52afac6eac35d2cf4d9e6f095a3aff7c"
        },
        {
          "alg" : "SHA-1",
          "content" : "0eb611698eb120a56d378229be37f64f9ef43628"
        },
        {
          "alg" : "SHA-256",
          "content" : "95d24ba09c1121c7df6c3da30a15864c52b964f3b13c58d9218fcb9004465d45"
        },
        {
          "alg" : "SHA-512",
          "content" : "95ec9eff8d539070e22b14abec31cc7b21bb364cbf4b42e2b59be68987352ccab14505e430e178e605a0017059b566a2c69b30dc8f803530a0e1d9099e7df79a"
        },
        {
          "alg" : "SHA-384",
          "content" : "670e641d426304e2ab881696b1a2b2c995916a5a2e3c25eab3dc806e417a01b75ae444aebbd387398d3aae2e4308b510"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-server@9.4.52.v20230823?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.org/jetty/jetty-server"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project/jetty-server"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-server@9.4.52.v20230823?type=jar"
    },
    {
      "publisher" : "GlassFish Community",
      "group" : "javax.servlet",
      "name" : "javax.servlet-api",
      "version" : "3.1.0",
      "description" : "Java.net - The Source for Java Technology Collaboration",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "79de69e9f5ed8c7fcb8342585732bbf7"
        },
        {
          "alg" : "SHA-1",
          "content" : "3cd63d075497751784b2fa84be59432f4905bf7c"
        },
        {
          "alg" : "SHA-256",
          "content" : "af456b2dd41c4e82cf54f3e743bc678973d9fe35bd4d3071fa05c7e5333b8482"
        },
        {
          "alg" : "SHA-512",
          "content" : "32f7e3565c6cdf3d9a562f8fd597fe5059af0cf6b05b772a144a74bbc95927ac275eb38374538ec1c72adcce4c8e1e2c9f774a7b545db56b8085af0065e4a1e5"
        },
        {
          "alg" : "SHA-384",
          "content" : "8bf960fd053ef6ad1c3535824311f676b9ad537678b85f855dd5d6d726e391f8a7be9c9c76a8ae3ce8bfe671c1e2c942"
        }
      ],
      "licenses" : [
        {
          "expression" : "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl" : "pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://servlet-spec.java.net"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/SERVLET_SPEC"
        },
        {
          "type" : "mailing-list",
          "url" : "users@servlet-spec.java.net"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/glassfish/sources/svn/show/tags/javax.servlet-api-3.1.0"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-io",
      "version" : "9.4.52.v20230823",
      "description" : "The Eclipse Jetty Project",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "840493208a45b1c4aa5b197a93f8ac1b"
        },
        {
          "alg" : "SHA-1",
          "content" : "65733aeb8b6139561d9ba19cd8a8a5a5c3611233"
        },
        {
          "alg" : "SHA-256",
          "content" : "08f9c1f6c7c9ed870d86335a603af48f206c1e2bcea5a5367ba77a67bcff2f5c"
        },
        {
          "alg" : "SHA-512",
          "content" : "c57b3862b252df193ea9d458b119d4c249e9ce1e09c3a2826286f5c79946abc6d026739d8ade0017274d263104f7699cd8d671d9193e7478f12f59c13feb2551"
        },
        {
          "alg" : "SHA-384",
          "content" : "8704e57a1306f3df49c5725beaed8d5b8917949b4b8bc92a5f8a768b93a997184da4b99fa8543dc89f4285ea7d6ee6d2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-io@9.4.52.v20230823?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.org/jetty/jetty-io"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project/jetty-io"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-io@9.4.52.v20230823?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-http",
      "version" : "9.4.52.v20230823",
      "description" : "The Eclipse Jetty Project",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0e7896fa0783bf0d542757f82915cf4a"
        },
        {
          "alg" : "SHA-1",
          "content" : "c8ac92875a0c9c1fd8799bee9c628837628c9e04"
        },
        {
          "alg" : "SHA-256",
          "content" : "3c15fd05e950e192e33c01f18b417a425ff7a7208dceb7a577433b5d84650b84"
        },
        {
          "alg" : "SHA-512",
          "content" : "ffda81c96d699d43cf3835a923535cbf412441f8df781509d6a4d1714fcffb2654122923da2af0c213826d66d088cf84c7a86f02a085d0e3dd5ba3563f4914c3"
        },
        {
          "alg" : "SHA-384",
          "content" : "1b739c041b2cd2ca6333576807fa6a7f3ea7cbfe4e3d4956fe45651d1487c1241951ecf0f19acad7b5b77230c3cce029"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-http@9.4.52.v20230823?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.org/jetty/jetty-http"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project/jetty-http"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-http@9.4.52.v20230823?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-continuation",
      "version" : "9.4.52.v20230823",
      "description" : "Asynchronous API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b845e8d1b4cb1eaf703a68e208b8579a"
        },
        {
          "alg" : "SHA-1",
          "content" : "818682b2062c2b1a6bfe751e351f01b48e509337"
        },
        {
          "alg" : "SHA-256",
          "content" : "aaf6f3536b2e3100cee3095d4e4e50b842cc5714fb1ab8bdc0a7f48284a420dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "c04252c3c357ae8edbe725b82820a59e7fea3621a68e80ca573fe4e62a43fc05fc88de3ebe47be01249119a69aa6a327bf552488723d691807240fff45364017"
        },
        {
          "alg" : "SHA-384",
          "content" : "2a90192c8657a0b0b413bb70a786a813ecb458393280a81940355c9fc2feca780256c1e1d444b5aacd8c0c81b71b1275"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.52.v20230823?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.org/jetty/jetty-continuation"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project/jetty-continuation"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.52.v20230823?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-proxy",
      "version" : "9.4.52.v20230823",
      "description" : "Jetty Proxy",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6e84a506e8785d7ac859e5f12704add6"
        },
        {
          "alg" : "SHA-1",
          "content" : "b2cd48cdc65349aaa585dd82329f55f6643c3f7f"
        },
        {
          "alg" : "SHA-256",
          "content" : "c0d140398def3823b6badb3d755e2f5df2a62384ec0d13c2bf52fd22ab14637b"
        },
        {
          "alg" : "SHA-512",
          "content" : "9c8ca613e1a3dd144662ff4d1811ca4e602d9c342691cd8791711ab3191f70afd2586e075e3be81313bbdd0a3da13e43422846268391b5f35b3284929a748de3"
        },
        {
          "alg" : "SHA-384",
          "content" : "6ded390508aaf287b5d42f9e50ed67366d0d71d47931d6d4ea802d935975a83a486438e7c8f115fc0cf4b7bbf04eb1b8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.52.v20230823?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.org/jetty/jetty-proxy"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project/jetty-proxy"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.52.v20230823?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-client",
      "version" : "9.4.52.v20230823",
      "description" : "The Eclipse Jetty Project",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ef0848520b701fb1258b29682913fc97"
        },
        {
          "alg" : "SHA-1",
          "content" : "fed09ee11f7dd70dff7b4dc73f73a3f07888a01e"
        },
        {
          "alg" : "SHA-256",
          "content" : "654ad6a625120afc3662d6262ba0f04afff54c86015ddffe179f72ed6e5b82d7"
        },
        {
          "alg" : "SHA-512",
          "content" : "7a4bdcebdda71eab26ffad2e1d399c70f921161190b507dbde2c9d4d5a8cb13211182facbde36174f7ffacc78133a80edd59d35f051f474ac5df1a0e03ba42da"
        },
        {
          "alg" : "SHA-384",
          "content" : "6cd6f35f48a1114886694af7ef045715588707c18e723e2f31c026e281d68891022cb914e250a24de4b11729b86b71b4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-client@9.4.52.v20230823?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.org/jetty/jetty-client"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project/jetty-client"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-client@9.4.52.v20230823?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-servlets",
      "version" : "9.4.52.v20230823",
      "description" : "Utility Servlets from Jetty",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "38c2874dbb9854240836b8cf4c83c9b0"
        },
        {
          "alg" : "SHA-1",
          "content" : "e31f23ef2a01522d6765ce8edb17785b8b747955"
        },
        {
          "alg" : "SHA-256",
          "content" : "abafd8cb99da34f72ef5125239a3c5543bc0f9da0234e140ac02fb9a8fe1eb90"
        },
        {
          "alg" : "SHA-512",
          "content" : "ffdb94d9c2442ad570ff1147c11d863d38b35d98f550342586632c1ccd28577972c483d4d4bb0355c395d772611fd48480d81d16e67e77ed456b62f781dbc534"
        },
        {
          "alg" : "SHA-384",
          "content" : "d9dcf7328b64c1e584459525efdbc99da4cd0b9637308a95f6bfd68f5735be8fea09a828852e04e5b2a2b3a33e1ca2f4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.52.v20230823?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.org/jetty/jetty-servlets"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project/jetty-servlets"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.52.v20230823?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.servlet",
      "name" : "jakarta.servlet-api",
      "version" : "4.0.3",
      "description" : "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "193258b1056435dba7919a978052cd81"
        },
        {
          "alg" : "SHA-1",
          "content" : "7c810f7bca93d109bac3323286b8e5ec6c394e12"
        },
        {
          "alg" : "SHA-256",
          "content" : "6d93010ca93301383c5ca960d55611a5c91798da1efb0f1fe9356f27831bf499"
        },
        {
          "alg" : "SHA-512",
          "content" : "7d8165cac1ef46736d49a69875c0239d41ffeeac5d2818eb531572eaa95910814de8278a3be633ec00f205685644deb646e773323b42562a82af71bd64d06fdb"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca4b813b8e6bb9e4712edb5141b75199fd68c3d6e9cac01a62566bcd73ab5c39e118840b10d19a062e422c844c8bbf17"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.servlet"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/servlet-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/servlet-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/servlet-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.16.0",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6e26920fa7228891980890cce06b718c"
        },
        {
          "alg" : "SHA-1",
          "content" : "4e3eb3d79888d76b54e28b350915b5dc3919c9de"
        },
        {
          "alg" : "SHA-256",
          "content" : "56595fb20b0b85bc91d0d503dad50bb7f1b9afc0eed5dffa6cbb25929000484d"
        },
        {
          "alg" : "SHA-512",
          "content" : "eee671e66d808b56b81e15574675cf132d7628c010736d580915bbf8c04849f04df1d95ddeea13c4e119f8f0a564c7003beeb8ab437564e080ee27063c1e52b9"
        },
        {
          "alg" : "SHA-384",
          "content" : "65eb89c19815ea11585ff6c91e2ea4acd6a41ee35502891ba29fb5ec390d567190cf2f4120bfbf50ec470274df22a25f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.23.0",
      "description" : "Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "96b88349958aeaa15cdf6e5e877bdced"
        },
        {
          "alg" : "SHA-1",
          "content" : "4af2060ea9b0c8b74f1854c6cafe4d43cfc161fc"
        },
        {
          "alg" : "SHA-256",
          "content" : "c267f17160e9ef662b4d78b7f29dca7c82b15c5cff2cb6a9865ef4ab3dd5b787"
        },
        {
          "alg" : "SHA-512",
          "content" : "e1ee5b7526ca1b6b67b3a6671d13899048f078bf0e73c1e9c601d947dcc9fd5c78cec9592b2a7a586faf4a7fba1c6885f679375cc2f06680a13ecfdad1ed41dd"
        },
        {
          "alg" : "SHA-384",
          "content" : "10e49e696c18750c37eee7807aca1ef28fadf2c9da6eabb3b5443bb0e1fa8ebd6638addb2042f27e9a9874495eb10d1c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.12.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19fe50567358922bdad277959ea69545"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81"
        },
        {
          "alg" : "SHA-384",
          "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-math3",
      "version" : "3.6.1",
      "description" : "The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b730d97e4e6368069de1983937c508e"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308"
        },
        {
          "alg" : "SHA-512",
          "content" : "8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226"
        },
        {
          "alg" : "SHA-384",
          "content" : "95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-math/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/MATH"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-math.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.10.0",
      "description" : "Apache Commons Text is a library focused on algorithms working on strings.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4afc9bfa2d31dbf7330c98fcc954b892"
        },
        {
          "alg" : "SHA-1",
          "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01"
        },
        {
          "alg" : "SHA-256",
          "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018"
        },
        {
          "alg" : "SHA-512",
          "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831"
        },
        {
          "alg" : "SHA-384",
          "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.13.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8d000fa8939b71b8894637f0ef6ea28c"
        },
        {
          "alg" : "SHA-1",
          "content" : "8bb2bc9b4df17e2411533a0708a69f983bf5e83b"
        },
        {
          "alg" : "SHA-256",
          "content" : "671eaa39688dac2ffaa4645b3c9980ae2d0ea2471e4ae6a5da199cd15ae23666"
        },
        {
          "alg" : "SHA-512",
          "content" : "3a5698d0c995c395cf44180073615f087af42fd78e71f224eb38908d823da41f0d04f18e6a14df67b3b02830fbf542f35b9f43aafe39437f17fe18655fbcac07"
        },
        {
          "alg" : "SHA-384",
          "content" : "51ce4e22195684565d9a93aebcf93bf9aed13e76e429601bdaf5e348430effb5d1276d848a98690040a4182706c731f4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.13.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-collections4",
      "version" : "4.4",
      "description" : "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4a37023740719b391f10030362c86be6"
        },
        {
          "alg" : "SHA-1",
          "content" : "62ebe7544cb7164d87e0637a2a6a2bdc981395e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f"
        },
        {
          "alg" : "SHA-384",
          "content" : "74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-collections.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.0",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "195d5db8981fbec5fa18d5df9fad95ed"
        },
        {
          "alg" : "SHA-1",
          "content" : "5871fb60dc68d67da54a663c3fd636a10a532948"
        },
        {
          "alg" : "SHA-256",
          "content" : "bec0b24dcb23f9670172724826584802b80ae6cbdaba03bdebdef9327b962f6a"
        },
        {
          "alg" : "SHA-512",
          "content" : "399510f759fb48255c6298f3545c9b644372fbc9d7245e80e6b51f49da0ac9275d104092c537ac047d5a1312c7d191dee8d655ca8d760b59ce1452bf4370a6e0"
        },
        {
          "alg" : "SHA-384",
          "content" : "a7fa7a0b69f41518fdb70e847148e17d0909fb657cee127308fb6cd14f913c63c82608aeae3955f10b48d358a8addfee"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/findbugs/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.ning",
      "name" : "compress-lzf",
      "version" : "1.1.2",
      "description" : "Compression codec for LZF encoding for particularly encoding/decoding, with reasonable compression. Compressor is basic Lempel-Ziv codec, without Huffman (deflate/gzip) or statistical post-encoding. See \"http://oldhome.schmorp.de/marc/liblzf.html\" for more on original LZF package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f620dc5d92f58cfdb1c51895daf05f58"
        },
        {
          "alg" : "SHA-1",
          "content" : "d09d33ffa7bc1d987db92e5ebec926ff92b7cbdf"
        },
        {
          "alg" : "SHA-256",
          "content" : "a9a76c85a3cef3a22d4c0e8647a1449b638885f2ceb4d8c9f66df3c677cc228e"
        },
        {
          "alg" : "SHA-512",
          "content" : "ec119a239e5dc1a213ae06380cdaa1ab07049430485fd2e5651281ae53705feb4d5dd767ac87aca8e329adcd1e1325585d50b273738e6cb2b94b31c7156828b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "f00e771ca4878a82ac6698fef4b8b17474fef2b3602ac850ec352a66d43cd798270a215313b17d98096e2f017eb7095a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.ning/compress-lzf@1.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/ning/compress"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ning/compress/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ning/compress"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.ning/compress-lzf@1.1.2?type=jar"
    },
    {
      "publisher" : "xerial.org",
      "group" : "org.xerial.snappy",
      "name" : "snappy-java",
      "version" : "1.1.10.3",
      "description" : "snappy-java: A fast compression/decompression library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e6b289a0295546316993b5646052568f"
        },
        {
          "alg" : "SHA-1",
          "content" : "04548ee2aac847998146e8d4a3176f7bcc766a00"
        },
        {
          "alg" : "SHA-256",
          "content" : "fa7b5d6f99d97a428e5314d9823b586c66c8fb46956017fdd91fc59c02af7b05"
        },
        {
          "alg" : "SHA-512",
          "content" : "6bc3a985fd0f99ee5f4670604fdabc136edb4839e026304d4a5aabda756a94f45ad972e54927b72ec67d801df18061396b485c78308fa5e2084ea085f833e89d"
        },
        {
          "alg" : "SHA-384",
          "content" : "769228a0cbd77c8f372022d73e8b89f16c503683d43da24f3afabb6795fc9a4a6de53e7163553f6798ce4da2dc45fb93"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xerial/snappy-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/xerial/snappy-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.3?type=jar"
    },
    {
      "group" : "org.lz4",
      "name" : "lz4-java",
      "version" : "1.8.0",
      "description" : "Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "936a927700aa8fc3b75d21d7571171f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780"
        },
        {
          "alg" : "SHA-256",
          "content" : "d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/lz4/lz4-java"
        },
        {
          "type" : "vcs",
          "url" : "git://github.com/lz4/lz4-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"
    },
    {
      "publisher" : "com.github.luben",
      "group" : "com.github.luben",
      "name" : "zstd-jni",
      "version" : "1.5.5-4",
      "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fddac848b1d75ccd361f1183f19ee1e0"
        },
        {
          "alg" : "SHA-1",
          "content" : "d724d95eb8423d185e2efb8ba15f7f3fdf200cfb"
        },
        {
          "alg" : "SHA-256",
          "content" : "e234c9ccbe9e36e19cc36c633d15f4a461f1bdc985d66662a2abbaa89859e522"
        },
        {
          "alg" : "SHA-512",
          "content" : "d99732d7649e3b91b31c617a6811a0a9f1bf1cb6c89fcb275e5f27de9a50d34e939b50b2987c90147bdc52ffc82b794ccc62cca5523e9439a33e259e824b3f2a"
        },
        {
          "alg" : "SHA-384",
          "content" : "33ab16fe8848f0ad7a708c5cf3572d3f05d6c9fbf996a0121f86d0516978ea52a0941331caefdbbe164990f31978a449"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.5-4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/luben/zstd-jni"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.5-4?type=jar"
    },
    {
      "group" : "org.roaringbitmap",
      "name" : "RoaringBitmap",
      "version" : "0.9.45",
      "description" : "Roaring bitmaps are compressed bitmaps (also called bitsets) which tend to outperform conventional compressed bitmaps such as WAH or Concise.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c3b52f9b0f42b3b73588005e5cd905a1"
        },
        {
          "alg" : "SHA-1",
          "content" : "856885b6afb1cad048dd188eb126e16dc47dd713"
        },
        {
          "alg" : "SHA-256",
          "content" : "f3a88f1684b6a1622c1f4f4dbaac4f9fdb7d640e2abf37469a0a2d01a9ea1932"
        },
        {
          "alg" : "SHA-512",
          "content" : "65b6820d09e9666507f2293ac8cc2fe359fd4414952e97b2a295273d6cd6efbb0a6bf5768d3eabd60c16e7d1e5b91f8e5c54be5e018f54dad08e7daa66b99993"
        },
        {
          "alg" : "SHA-384",
          "content" : "3a5ccd0648edd7dba5ff3e45d8b71d47ec500420c8da039b2c08c04404ed195a1929b8193e725619fb1ba7a984111f34"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.45?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.45?type=jar"
    },
    {
      "group" : "org.roaringbitmap",
      "name" : "shims",
      "version" : "0.9.45",
      "description" : "Roaring bitmaps are compressed bitmaps (also called bitsets) which tend to outperform conventional compressed bitmaps such as WAH or Concise.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2fdcac0fa9b0c8d81ec5bb6cf569d4f3"
        },
        {
          "alg" : "SHA-1",
          "content" : "480ae48bcdde25c911aad8d212ba2641fe9b4be9"
        },
        {
          "alg" : "SHA-256",
          "content" : "4af32f9523c6249ad00d76b69129f59ad22976ef8cff86b6dd5479f6a64cec8d"
        },
        {
          "alg" : "SHA-512",
          "content" : "44baa9a38c6d89f152322417e5f04ade56ec25a7b599d7c52f0eb3730499441bf54cac060cfcd5a31729621aa6f87dfd44fee99ab32051048aff824350cda94e"
        },
        {
          "alg" : "SHA-384",
          "content" : "bfb85995d9fd063cefceb7c44d7eeae5c75d1644246e71761c0e8858f6502fe81222a452ed079fef69188f102c16c662"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.roaringbitmap/shims@0.9.45?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.roaringbitmap/shims@0.9.45?type=jar"
    },
    {
      "publisher" : "org.scala-lang.modules",
      "group" : "org.scala-lang.modules",
      "name" : "scala-xml_2.12",
      "version" : "2.1.0",
      "description" : "scala-xml",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eb4a36f663f35e5d97ba7f51b0e8bbca"
        },
        {
          "alg" : "SHA-1",
          "content" : "16b228fa6f9d5afece0f2d2d6d5b03d5372dbea4"
        },
        {
          "alg" : "SHA-256",
          "content" : "d9a6df43cfac692f05e7166d39aae4476a246dac7740c7794a3072f1a67280ce"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4a60375d6f78c311b61e48f2be56ce048baf920615763ac37b72e43d9409892add045aec3630f58db9e0dd1746cd75358015089f5ee7816347e0adbef264677"
        },
        {
          "alg" : "SHA-384",
          "content" : "e0831c12d568272b475d95b32b6fcaae8920d781b8f9be28003e5f2ef7d768bf48d8d5fa175d30906f04d35e9ddf83ce"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang.modules/scala-xml_2.12@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/scala-xml/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala-xml"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang.modules/scala-xml_2.12@2.1.0?type=jar"
    },
    {
      "publisher" : "LAMP/EPFL",
      "group" : "org.scala-lang",
      "name" : "scala-library",
      "version" : "2.12.18",
      "description" : "Standard library for the Scala Programming Language",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a7dc0cf9f73ab2dffb2f34b69e93c349"
        },
        {
          "alg" : "SHA-1",
          "content" : "fa825f984172f6801e3d8c476071b1823c0a925b"
        },
        {
          "alg" : "SHA-256",
          "content" : "e51e6636c003359e106bea4ad99def70e613c290190c8c84f10f9560dd5b00ae"
        },
        {
          "alg" : "SHA-512",
          "content" : "d50e05a806168687b1526bc197ba626973121eb692e68f567a15a944eb44e3fec37d5147e000d3bd05d69dc9874695389041c6c16bdcc1e665c1ef04e01be67d"
        },
        {
          "alg" : "SHA-384",
          "content" : "7bec1053a4befc082a7ecbf13d8c17082e113fb5d4a1f389f2de8d23e11372b42941367a09878b236b830190ab32d80b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/bug/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"
    },
    {
      "publisher" : "LAMP/EPFL",
      "group" : "org.scala-lang",
      "name" : "scala-reflect",
      "version" : "2.12.18",
      "description" : "Reflection Library for the Scala Programming Language",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b642844f7dde3e3cc143275a85075242"
        },
        {
          "alg" : "SHA-1",
          "content" : "7e1a6985bfbe78bdc94f33613301ef385d4629b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "d6a24e175246541ffcbc965a231aa1d3bb01d61def196f91495690fabf9783bc"
        },
        {
          "alg" : "SHA-512",
          "content" : "ef5661d7832123757eb3b30745860b56ca343b9268eab97519d7a0793a1035b8d452a46767ce65f2b5370c7be6f9dcf0ffdab4ac04e41fc0a85374987d4551ca"
        },
        {
          "alg" : "SHA-384",
          "content" : "0d372d4d3579397253939207b433de9092d460291beda2f39c6df4518e2b73cec69ae622be31115e4fec2efdd7f1cd6d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang/scala-reflect@2.12.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/bug/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang/scala-reflect@2.12.18?type=jar"
    },
    {
      "publisher" : "org.json4s",
      "group" : "org.json4s",
      "name" : "json4s-jackson_2.12",
      "version" : "3.7.0-M11",
      "description" : "json4s-jackson",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53dc7ac002aa4de2843799cd239aae2d"
        },
        {
          "alg" : "SHA-1",
          "content" : "54089dd27d932de33c329199474ad429ee076510"
        },
        {
          "alg" : "SHA-256",
          "content" : "d03ed279c83870b9bd624b1817fe6290822d7e74207d1e250860fbdd935643dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "ad9084168bf882e70a4827d3bc1a6905a9f931e25d376aa75a3bc421410c870b3d6e33f5271cdc42504f254f54ddb33f0f1df8b3df93b9056e422b149d6dd367"
        },
        {
          "alg" : "SHA-384",
          "content" : "904c7e915b15ae824616ce1a8aaf7d13d67bcf0fdac05381cb852dafbc27429829d518b2abafce6c9392b2e5f8c6a7d7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/json4s/json4s"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/json4s/json4s"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar"
    },
    {
      "publisher" : "org.json4s",
      "group" : "org.json4s",
      "name" : "json4s-core_2.12",
      "version" : "3.7.0-M11",
      "description" : "json4s-core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1db3cb3db15c895307cfd20b81e2d8a6"
        },
        {
          "alg" : "SHA-1",
          "content" : "4126de102c272d727ea0e1875ee3db9f6ac7060f"
        },
        {
          "alg" : "SHA-256",
          "content" : "2fd8e66a3715565294c4edb5d2514e7ff59a14960c7f8dd84cf0991661a48a10"
        },
        {
          "alg" : "SHA-512",
          "content" : "7347a1bf54151a42dcf2aade3ca125da563c025644f935497a5c5e060198652c3ee7c52ee6de484a8f45aef1ab585dc831fbf5ae14395712236e752aec476861"
        },
        {
          "alg" : "SHA-384",
          "content" : "f6501957f7a579ee24997061ca3ea416d487906f386382c9d39e9cd8816efb180fd6489a8ff0551dc1e00e083810105e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.json4s/json4s-core_2.12@3.7.0-M11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/json4s/json4s"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/json4s/json4s"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.json4s/json4s-core_2.12@3.7.0-M11?type=jar"
    },
    {
      "publisher" : "org.json4s",
      "group" : "org.json4s",
      "name" : "json4s-ast_2.12",
      "version" : "3.7.0-M11",
      "description" : "json4s-ast",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f106ddf363ca77383877ccb0bdeaa425"
        },
        {
          "alg" : "SHA-1",
          "content" : "f8c92b6b7cb37f3e2fdf649ad1ba3d65248bb45d"
        },
        {
          "alg" : "SHA-256",
          "content" : "f9388c0ad4a969bf1a1867e85ce24ed87ca5a1095342b96b35c356fd971b544d"
        },
        {
          "alg" : "SHA-512",
          "content" : "806f72c85625f66a0de4c1629e354ba687b55e303899de0a6b8fbe256ed674da1aedf04471b7cbe969ee5a21ff48a2d97dab2145229f8e04f7d886087336de61"
        },
        {
          "alg" : "SHA-384",
          "content" : "99795db385defb8e98d94b6d52041ec35b9c914f0b1d0267aa737641bcd677cf07468885f09e8ef383e0052b45fca30f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.json4s/json4s-ast_2.12@3.7.0-M11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/json4s/json4s"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/json4s/json4s"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.json4s/json4s-ast_2.12@3.7.0-M11?type=jar"
    },
    {
      "publisher" : "org.json4s",
      "group" : "org.json4s",
      "name" : "json4s-scalap_2.12",
      "version" : "3.7.0-M11",
      "description" : "json4s-scalap",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a5d1806ab0330c4e355c34a13afaf9e"
        },
        {
          "alg" : "SHA-1",
          "content" : "5a5aafd028f7ac4a8565e1cebe1307c146c87f70"
        },
        {
          "alg" : "SHA-256",
          "content" : "d2a1f84b618e1cba12c4e8ce2babc23d78a12de5f568abf8fbaeca39c52e0eb8"
        },
        {
          "alg" : "SHA-512",
          "content" : "ff1771820f477f755982690dc5d32c8f24a075263d0e8ab83a4f3cac4824a8cd522860661f7689b28c65550a80775e269461f3bd7c827a80bd70967444a13368"
        },
        {
          "alg" : "SHA-384",
          "content" : "924e5e9aaa2f7823b1d275c866c3713a33be2458bf7aa60a73f4b6989babf07f2d4ee723a7175469eb4c77f7fb4478ed"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.json4s/json4s-scalap_2.12@3.7.0-M11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/json4s/json4s"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/json4s/json4s"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.json4s/json4s-scalap_2.12@3.7.0-M11?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.core",
      "name" : "jersey-client",
      "version" : "2.40",
      "description" : "Jersey core client implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c885d8f7fe001573e1f9921c44fae1c4"
        },
        {
          "alg" : "SHA-1",
          "content" : "231decdfc01b6c73411af2577a502c19632a1ed0"
        },
        {
          "alg" : "SHA-256",
          "content" : "fdeaa03c46a8a0c7618a751617c6beccdebc8082d0e992c0c7965bc50fd7daa0"
        },
        {
          "alg" : "SHA-512",
          "content" : "453f0f3e717c4c47ea96b96f1e79d1e98a6adbbe6b35d56d6d25676a52a1271bfc3d6bcf1b47c7bfb07c807bc1e6d94def62681f8f02e183ad70f5935bf63b1c"
        },
        {
          "alg" : "SHA-384",
          "content" : "948dfcc169a88aef9c64d84737b093afc50aa03d5a8e499bda33c0858f2d2dee521f0d666a597eba3fce0313e5612c1e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        },
        {
          "license" : {
            "name" : "jQuery license",
            "url" : "jquery.org/license"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license" : {
            "name" : "W3C license",
            "url" : "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.core/jersey-client@2.40?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.jersey/jersey-client"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey/jersey-client"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.core/jersey-client@2.40?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.ws.rs",
      "name" : "jakarta.ws.rs-api",
      "version" : "2.1.6",
      "description" : "Jakarta RESTful Web Services API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c3892382aeb5c54085b22b1890511d29"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcb770bce80a490dff49729b99c7a60e9ecb122"
        },
        {
          "alg" : "SHA-256",
          "content" : "4cea299c846c8a6e6470cbfc2f7c391bc29b9caa2f9264ac1064ba91691f4adf"
        },
        {
          "alg" : "SHA-512",
          "content" : "c1e2655269b9a32f9c0aec9edf12bf6d8b397d8cbcf60e28dd21ab13ecc2738800ebe5c2d49ed3c50d4dac6617671f0fae873daf8ec116a16ef7f7f0a3bef7fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "3fd05e2b167d927216d3b2fc9d1c5a70aa3911d075c2159f958ce755c6a41d93bd76f0ce79ccd22e5a60182aa91fdb07"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jaxrs-api"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jax-rs-api-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxrs-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "jaxrs-dev@eclipse.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxrs-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2.external",
      "name" : "jakarta.inject",
      "version" : "2.6.1",
      "description" : "Injection API (JSR 330) version ${javax.inject.version} repackaged as OSGi bundle",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d7c80a1e3cd54531af03bef4537f7af"
        },
        {
          "alg" : "SHA-1",
          "content" : "8096ebf722902e75fbd4f532a751e514f02e1eb7"
        },
        {
          "alg" : "SHA-256",
          "content" : "5e88c123b3e41bca788b2683118867d9b6dec714247ea91c588aed46a36ee24f"
        },
        {
          "alg" : "SHA-512",
          "content" : "7fc8196ad9ee03a831dfff85c945e416c3906071a7aa8ebf6ab8b7008dfec0adccc1f1dca53ed6768ac5676cd4b3c43471674f97ff73e1f61f5a427aaed68e05"
        },
        {
          "alg" : "SHA-384",
          "content" : "6b3ea9eeec5cbbc1fb3e6c89160af67b82ffbd68948dd4790e3fe3ce2fc495c063698a7d6a1998d5db51abafe3915e19"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/external/jakarta.inject"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/external/jakarta.inject"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.core",
      "name" : "jersey-common",
      "version" : "2.40",
      "description" : "Jersey core common packages",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1ad4fbdae8cdaa6dc973f4b3291c7ff0"
        },
        {
          "alg" : "SHA-1",
          "content" : "b826a4ebfcf316b7f168a41dc07657f0b889e6a3"
        },
        {
          "alg" : "SHA-256",
          "content" : "dac402e730e12816ba72b1fe3107301efb0a589ca65617255d86bc5b705080fe"
        },
        {
          "alg" : "SHA-512",
          "content" : "fe3e2bdb11e23751ad02a84b2af46e857c944824226dd1368e49ff257748a0d58c52f0c7c321d64235c948848ccedb202bea79227bc7a9d2de7498834f9fedcf"
        },
        {
          "alg" : "SHA-384",
          "content" : "6012543a933c4f6bbacff7ba98bcc4bc234492c1dd3beffeb572f0a6a9cea9b74a061bce24673abd5fb835afaef2bcbb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "name" : "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url" : "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.core/jersey-common@2.40?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.jersey/jersey-common"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey/jersey-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.core/jersey-common@2.40?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.annotation",
      "name" : "jakarta.annotation-api",
      "version" : "1.3.5",
      "description" : "Jakarta Annotations API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8b165cf58df5f8c2a222f637c0a07c97"
        },
        {
          "alg" : "SHA-1",
          "content" : "59eb84ee0d616332ff44aba065f3888cf002cd2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a"
        },
        {
          "alg" : "SHA-512",
          "content" : "d1acff146c0f9ea923a9325ad4c22ba2052ec474341ab8392abab7e8abd3ca010db2400ff9b5849fc4f1fa5c0a18830eb104da07a13bd26b4f0a43d167935878"
        },
        {
          "alg" : "SHA-384",
          "content" : "004a4bde333c0575f72df1cb9cf95ee0c6c7f738a6f0f723a5ec545aaa1664abeb82f01627708a1377e3136754fb7859"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.ca"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/common-annotations-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/ca-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/common-annotations-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.hk2",
      "name" : "osgi-resource-locator",
      "version" : "1.0.3",
      "description" : "Used by various API providers that rely on META-INF/services mechanism to locate providers.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e7e82b82118c5387ae45f7bf3892909b"
        },
        {
          "alg" : "SHA-1",
          "content" : "de3b21279df7e755e38275137539be5e2c80dd58"
        },
        {
          "alg" : "SHA-256",
          "content" : "aab5d7849f7cfcda2cc7c541ba1bd365151d42276f151c825387245dfde3dd74"
        },
        {
          "alg" : "SHA-512",
          "content" : "4d84983a9b1c72f58661b576c78ca456a2106602c2ad211cd7e72d94464c8774173b34a35629c507c7c84c982f1de0c9bf48352458e8480be5f874d20d6e69a3"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f92002296c66cc8996d459b95a9c531ec71b98a8b819121abbc7d636a6c4ace04c88878ba6917f71650280a880d1ce2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j/osgi-resource-locator"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/ee4j/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2-extra"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.core",
      "name" : "jersey-server",
      "version" : "2.40",
      "description" : "Jersey core server implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "abc122c513ee2586c1aef3e365066a3f"
        },
        {
          "alg" : "SHA-1",
          "content" : "4550ae3be0d3e0434144c2e9ae9ef46041571b1b"
        },
        {
          "alg" : "SHA-256",
          "content" : "ffa6c93f15f9543158841e0d7e102c3ba9bd6f845db2dde0aad3518bc417d178"
        },
        {
          "alg" : "SHA-512",
          "content" : "1a270e2418a0049a5f57a9b7638a8d6d8bc06e66383aefaf0129f9cf8f0637311680f6f5e69bbd53ba1dcb6e2c37d337b4368cbb2dde0c33ea761086b74a2310"
        },
        {
          "alg" : "SHA-384",
          "content" : "5c09292f2641725e64af1c27884d82e3da088d77f8923b48e7c7197b7157f7eb77aa1a2fdcd7cafa647b306865b88e37"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "name" : "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url" : "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.core/jersey-server@2.40?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.jersey/jersey-server"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey/jersey-server"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.core/jersey-server@2.40?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.validation",
      "name" : "jakarta.validation-api",
      "version" : "2.0.2",
      "description" : "Jakarta Bean Validation API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "77501d529c1928c9bac2500cc9f93fb0"
        },
        {
          "alg" : "SHA-1",
          "content" : "5eacc6522521f7eacb081f95cee1e231648461e7"
        },
        {
          "alg" : "SHA-256",
          "content" : "b42d42428f3d922c892a909fa043287d577c0c5b165ad9b7d568cebf87fc9ea4"
        },
        {
          "alg" : "SHA-512",
          "content" : "3ca8556b80ca809b3a43fac31469702bbad62a00e63b11a304dad1e372d9f6c128357463a4c70c423055941c7e2e417f87a9474a204d189c8e4b62f42047c8eb"
        },
        {
          "alg" : "SHA-384",
          "content" : "6ae3963fd6a5e83b068a8344b88f6bfbd26d29cee64193025bc5e98195678e49826463da27a7a1c15cd83b2149d57a94"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://beanvalidation.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://hibernate.atlassian.net/projects/BVAL/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/beanvalidation-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.containers",
      "name" : "jersey-container-servlet",
      "version" : "2.40",
      "description" : "Jersey core Servlet 3.x implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3e303adf09b3881f932f6d400b94c400"
        },
        {
          "alg" : "SHA-1",
          "content" : "a06f7096c476fd127a22f18fe767c5175f4b4dbf"
        },
        {
          "alg" : "SHA-256",
          "content" : "f16fc54ca51c0964a9a187e277dce0fa36b296c3d02b02bd685589b5f2766ed2"
        },
        {
          "alg" : "SHA-512",
          "content" : "094b06b40727a2d5b3eb039ab789ad17d59a3debf20f98165bd52de82013b3b8bd79df770f87a15c4fecd57037dd205b787998549e3f94d7838437cddf87e8e9"
        },
        {
          "alg" : "SHA-384",
          "content" : "0e7a3201808a31452081ca32fbd785d6df340698d8a73223bab78dd55035fd5803f0c508b334825aae2625f43cc39d0e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        },
        {
          "license" : {
            "name" : "jQuery license",
            "url" : "jquery.org/license"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license" : {
            "name" : "W3C license",
            "url" : "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.40?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-container-servlet"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey/project/jersey-container-servlet"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.40?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.containers",
      "name" : "jersey-container-servlet-core",
      "version" : "2.40",
      "description" : "Jersey core Servlet 2.x implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e24021b08e3725b8923b4ecc8df43631"
        },
        {
          "alg" : "SHA-1",
          "content" : "b1c171b170fc0b062f04842991de043765c84ec2"
        },
        {
          "alg" : "SHA-256",
          "content" : "689909c8dbcebdbd91e80f79e057115904c02f7ee04dff9aabadc66243760fc0"
        },
        {
          "alg" : "SHA-512",
          "content" : "c413193139cfa25b6c9ce81d2da3bcc0089168f7df9c15eef46a6d517d655914566f56a3dcefa9855edd743a7240032ea758db907509c9a82adf357cc617752b"
        },
        {
          "alg" : "SHA-384",
          "content" : "3b7aca1d9f5f69f3cd53145a398711991c6965df4409a790ca1401555948a38e4646e54d8deb532e84e2d07690b2fc22"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        },
        {
          "license" : {
            "name" : "jQuery license",
            "url" : "jquery.org/license"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license" : {
            "name" : "W3C license",
            "url" : "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.40?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-container-servlet-core"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey/project/jersey-container-servlet-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.40?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.inject",
      "name" : "jersey-hk2",
      "version" : "2.40",
      "description" : "HK2 InjectionManager implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "25d9df975277390b7c2820eea9339c20"
        },
        {
          "alg" : "SHA-1",
          "content" : "4c94775bdcce0c2e32b231f6c638e82bfe3b6eee"
        },
        {
          "alg" : "SHA-256",
          "content" : "e5f69ac32a5c82e0603fb90b689bf9ef0ba237b3ba4f2bba3159f7d8c756b397"
        },
        {
          "alg" : "SHA-512",
          "content" : "7039589d078ac6371cab996f97cd47a34d029da63557ec59125df9bec860af45fa07f3cac9e5d5423d55fd4b8d81cbeda46725d645b1134fa58ab88253850bcd"
        },
        {
          "alg" : "SHA-384",
          "content" : "9e1a52da5def5d87baebe8bcde4e6bb25e3f29203d7bca0142d71472a246232b1e4d652369f32911c3bb4a546b4bf219"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        },
        {
          "license" : {
            "name" : "jQuery license",
            "url" : "jquery.org/license"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license" : {
            "name" : "W3C license",
            "url" : "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.40?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-hk2"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey/project/jersey-hk2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.40?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2",
      "name" : "hk2-locator",
      "version" : "2.6.1",
      "description" : "ServiceLocator Default Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dfd358720393d83b01747928db6e3912"
        },
        {
          "alg" : "SHA-1",
          "content" : "9dedf9d2022e38ec0743ed44c1ac94ad6149acdd"
        },
        {
          "alg" : "SHA-256",
          "content" : "febc668deb9f2000c76bd4918d8086c0a4c74d07bd0c60486b72c6bd38b62874"
        },
        {
          "alg" : "SHA-512",
          "content" : "e2c87a265f114042f4c04397db4adca7291fd68e08e97129576ceb603287b57ccf5b03d0c285727ebb8cd7f88009280bdeab4254475d59da1ac41ba57b7cdecb"
        },
        {
          "alg" : "SHA-384",
          "content" : "05afff9ebfdbdaed71770a58fe334751b9ac7476eb4114e08fc376bf4e16226b5016784c99c3dd8cb04c79d954068402"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2.external",
      "name" : "aopalliance-repackaged",
      "version" : "2.6.1",
      "description" : "Dependency Injection Kernel",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0237846ebdaa7db36b356044a373ffba"
        },
        {
          "alg" : "SHA-1",
          "content" : "b2eb0a83bcbb44cc5d25f8b18f23be116313a638"
        },
        {
          "alg" : "SHA-256",
          "content" : "bad77f9278d753406360af9e4747bd9b3161554ea9cd3d62411a0ae1f2c141fd"
        },
        {
          "alg" : "SHA-512",
          "content" : "2d9e5395ba887fa5bb6a8209b731292d440f5c1db2fccaf56c41b1f1d9f774733da28aa8b9b769e765fe62f3640d7bcb2cf6140f0044a8b576e9e45144038c46"
        },
        {
          "alg" : "SHA-384",
          "content" : "f481e2a4e18308a1a0bd85e79f95711434436fa69a504fe98a3d7ea899eaed505a5cb2bfe08f41d1b2af56e150ec0741"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2",
      "name" : "hk2-api",
      "version" : "2.6.1",
      "description" : "HK2 API module",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23e8c18dae0c7b776bed756763d5153f"
        },
        {
          "alg" : "SHA-1",
          "content" : "114bd7afb4a1bd9993527f52a08a252b5d2acac5"
        },
        {
          "alg" : "SHA-256",
          "content" : "c2cb80a01e58440ae57d5ee59af4d4d94e5180e04aff112b0cb611c07d61e773"
        },
        {
          "alg" : "SHA-512",
          "content" : "9abe9f78d7f6c805b6c7b515579230e5fa573abbcd818bed56068080d6458608e2e99d5937eb959cf1e4f4cfdc4f790059dfc1231313cd8f30aaefbf518eb1c7"
        },
        {
          "alg" : "SHA-384",
          "content" : "2236ca10af39c4f4f6f1ac63c3652eaa4124bce8f557f8ebaa78576e00c25b986ee9d7e417db6edb9a06aa46b36f4d24"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2",
      "name" : "hk2-utils",
      "version" : "2.6.1",
      "description" : "HK2 Implementation Utilities",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "75ccb55538a77bf878996497ffeb86f3"
        },
        {
          "alg" : "SHA-1",
          "content" : "396513aa96c1d5a10aa4f75c4dcbf259a698d62d"
        },
        {
          "alg" : "SHA-256",
          "content" : "30727f79086452fdefdab08451d982c2082aa239d9f75cdeb1ba271e3c887036"
        },
        {
          "alg" : "SHA-512",
          "content" : "8da7cd88de45270b1fcfd2c471ae092b3972af78a6e0ecc76ed4ac10b6bd6712d2a538bd163a457f21cea4e7e5c52f547108f44aaa791ed0fd069f697f1282c1"
        },
        {
          "alg" : "SHA-384",
          "content" : "94fb55c1f57b96fd84e717fbf3c254f16e2308bc33976addb71d26bf367b7c2ec63e657a953f30f55d7046dd07510e50"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar"
    },
    {
      "publisher" : "Shigeru Chiba, www.javassist.org",
      "group" : "org.javassist",
      "name" : "javassist",
      "version" : "3.29.2-GA",
      "description" : "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9783c90ffa4d36eddda9526fde06f3ea"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c32028609e5dd4a1b78e10fbcd122b09b3928b1"
        },
        {
          "alg" : "SHA-256",
          "content" : "a90ddb25135df9e57ea9bd4e224e219554929758f9bae9965f29f81d60a3293f"
        },
        {
          "alg" : "SHA-512",
          "content" : "5f9e939a0c094e2c4d4b8509c126fcb9033ea47c2577e172b2326c8aceb86b5bc3168d056b3d986c7bb3d3f46ed6fed3155c77734afcbb8cb75162df0375a657"
        },
        {
          "alg" : "SHA-384",
          "content" : "8b1f8b7235a7aeab500bcff13b5f88fe95df983502975021ac7d5edd0c73d708f65da48796f5680f2ef710fed9d0e0aa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-1.1"
          }
        },
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.javassist.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://jira.jboss.org/jira/browse/JASSIST/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:jboss-javassist/javassist.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar"
    },
    {
      "group" : "io.netty",
      "name" : "netty-all",
      "version" : "4.1.96.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "46f83444d7c3ca4de0604192c05a8bca"
        },
        {
          "alg" : "SHA-1",
          "content" : "2145ec747511965e4a57099767654cf9083ce8a7"
        },
        {
          "alg" : "SHA-256",
          "content" : "88909513ab90dd1456488b99a8544b071a9137f0eb15e1c62848b6aef96fc917"
        },
        {
          "alg" : "SHA-512",
          "content" : "273d0efeac083438c1925896fbfc56aa0e1e78d269e261a353af51c35e14f179616f3770aa290cc2347e2b573df45e1b62faf76e352b17f6b88e499d43eb14f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "e7709f9829fbdb44bac680fdcd319622a2b954eaa5631a6adecba0dd6e196142aaf519cf182c61f0263ed6a4f90ac174"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-all@4.1.96.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-all/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-all"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-all@4.1.96.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-buffer",
      "version" : "4.1.96.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c3f08e639d22f2748a5660498761e92b"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b80fffbe77485b457bf844289bf1801f61b9e91"
        },
        {
          "alg" : "SHA-256",
          "content" : "1dee6f5b4aa485339d49525ec3689463f724785fc35e7db02f9e46cbdecbe335"
        },
        {
          "alg" : "SHA-512",
          "content" : "2f6e0d7f1a9237c596b595487ac98c92e50426a18bc78d52e6463cf9f5d6c7872a4c6e32f5e0b55499419e8bdf6f5037be1b5f0e4909b1482abc536fc6fd946f"
        },
        {
          "alg" : "SHA-384",
          "content" : "ad976a4ceb755a6d7f4eae0d2f7337048b52d4e90b53d452ac9037f55a45ddd7c25bb7e0422ec34379f715dd29008fb9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-buffer@4.1.96.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-buffer/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-buffer"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-buffer@4.1.96.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec",
      "version" : "4.1.96.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "175181bab4a6445676792450f124f277"
        },
        {
          "alg" : "SHA-1",
          "content" : "9cfe430f8b14e7ba86969d8e1126aa0aae4d18f0"
        },
        {
          "alg" : "SHA-256",
          "content" : "07305d3e565fc01da310f1c8ea7935c08e42ff1977590f2d44fc1305cb470d60"
        },
        {
          "alg" : "SHA-512",
          "content" : "5ea90573bccd510a45d2af90f6db49a00bfb35674225a0e508f6d0c3111d460fd6e8bc1903fb8fb7d48089ad970a6578e3017b1230ed7231885cf437be6875c7"
        },
        {
          "alg" : "SHA-384",
          "content" : "f4b7c93725813ff72e64b1c870fa696b6cddf2df2e7a13c2278949dd7766ec0246f82a9762e8c5bc07dd74cfafee9012"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec@4.1.96.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec@4.1.96.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-http",
      "version" : "4.1.96.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d4fb641a425611aa91e6b7a3e7c83c69"
        },
        {
          "alg" : "SHA-1",
          "content" : "a4d0d95df5026965c454902ef3d6d84b81f89626"
        },
        {
          "alg" : "SHA-256",
          "content" : "b64808027d7d18c59126ff3a33012c43ac58a0798c1cd1e765f6f71a3fd4ff76"
        },
        {
          "alg" : "SHA-512",
          "content" : "12d7c15d379d6d23a6ef61edf0c19ffa404f300c226cff37caaf053e754da2364fbf5f3cc60cdbfee91f828706390e83a45fb4bbaa357d9bb2e5ec95433b831a"
        },
        {
          "alg" : "SHA-384",
          "content" : "2a7323c7f5a073985189b38c22d9393ea50ba0984d53c66304721484cabe27181fa6d0e90f35a3462f5681dd76421bb1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-http@4.1.96.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-http/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-http"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-http@4.1.96.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-http2",
      "version" : "4.1.96.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "deedd2c77e4e20084b9aa9ceb5119372"
        },
        {
          "alg" : "SHA-1",
          "content" : "cc8baf4ff67c1bcc0cde60bc5c2bb9447d92d9e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "6eb87af9a396ba21a6cbbbd047c4b3139f40ded2feefba4632802e94c0ef24dd"
        },
        {
          "alg" : "SHA-512",
          "content" : "e1f240be7820920461675eb93b89bfea021f3f5dda895cb69a4007d4e174c5ab194fd9a785b7dd08cd783ec725ff71a43206597ffde2779804f1f8d906c1dbc3"
        },
        {
          "alg" : "SHA-384",
          "content" : "e58879e673b03410ec48e5fcd94eb51c8a3ca1597f946792cd0421f242ff4262e098d454521688f8f565968c37aa7c48"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-http2@4.1.96.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-http2/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-http2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-http2@4.1.96.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-socks",
      "version" : "4.1.96.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "00af26bad44ea20b55ca3246381d987f"
        },
        {
          "alg" : "SHA-1",
          "content" : "f53c52dbddaa4a02a51430405792d3f30a89b147"
        },
        {
          "alg" : "SHA-256",
          "content" : "29de9bb7fe9633fcc3d2f8246293f8692aa5e5bd7ee2a425a0f211d5e6b493b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "a636a907af8e6a670ba9e0d2ef7d02e98bb9d6173e22b93e05a27bbfcbd10af58b1d93878fa4b355eab49e2cf2cbfba9937ff4fac34d444a5d7c8ed9ed9878af"
        },
        {
          "alg" : "SHA-384",
          "content" : "20191f8d110c93b20c5d606e8bbc8872d2c9698e4478611ed93c624e8223b09e7717c96364d6a03f464cf208eabda2b6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-socks@4.1.96.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-socks/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-socks"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-socks@4.1.96.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-common",
      "version" : "4.1.96.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f4160d8db7ea478573d81d9ed0d7b131"
        },
        {
          "alg" : "SHA-1",
          "content" : "d10c167623cbc471753f950846df241d1021655c"
        },
        {
          "alg" : "SHA-256",
          "content" : "da104e80db830922eaf860eb1c5e957cd1d124068253d02e9c7a7843bc66427a"
        },
        {
          "alg" : "SHA-512",
          "content" : "88cd84d3bb7e285d572b63dfefd6f41ac99e226317b13e28d15e99f62532ee03f3782e282513dd66fb4fa85a1f1007c4e3a08dbdf6af3701d39c9ee8b6d47854"
        },
        {
          "alg" : "SHA-384",
          "content" : "149eadec0b9d14d5ba0f6c07a44ff3a4dcf099357ca14f45d5570b4bf2d5f0ef77ac500b49b5a9fad38229a4ba54563a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-common@4.1.96.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-common/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-common@4.1.96.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-handler",
      "version" : "4.1.96.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "44fe86cec3f6f4c8c933a5913ba7db87"
        },
        {
          "alg" : "SHA-1",
          "content" : "7840d7523d709e02961b647546f9d9dde1699306"
        },
        {
          "alg" : "SHA-256",
          "content" : "574ebef95a16053246ab692773d75d8bd7907b709e1083a096fa6ab2a6d6c2b3"
        },
        {
          "alg" : "SHA-512",
          "content" : "ab414f671972e7fe6e08778012f8c73d5c1bec1f6ba7eb658dd6220790c5e4d80d1ef7dcff35a3445fa0fb0418cad3ce0829f1074c20567e2eb8f8312023d153"
        },
        {
          "alg" : "SHA-384",
          "content" : "352881b672b26fab8c06406f33c610ff421f3711efd16a50fa404ccb06b2e69871f2d76702e69da9f93a61133444d620"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-handler@4.1.96.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-handler/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-handler"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-handler@4.1.96.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-unix-common",
      "version" : "4.1.96.Final",
      "description" : "Static library which contains common unix utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b4bdb115c9a29c4e00994df5bdb53294"
        },
        {
          "alg" : "SHA-1",
          "content" : "daf8578cade63a01525ee9d70371fa78e6e91094"
        },
        {
          "alg" : "SHA-256",
          "content" : "4f96297a06a544a4cdb6fe6af8b868640f100fa96969e2196be216bd41adef13"
        },
        {
          "alg" : "SHA-512",
          "content" : "f135b399578d9a324d97c5a2f6292e8262a5dc4dbe0ccb308281bd56a450ae2e3cdace46bf2669f36239b4e960dccb5a30b1892fae18ceeb43e536315188b53a"
        },
        {
          "alg" : "SHA-384",
          "content" : "fa76a8962313cabf6218b70d4d47c69a18d5c0c308f4b742f1489b03da1bf775a05a24ce3e95bf4b84a0962638452269"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.96.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-unix-common/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-unix-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.96.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-handler-proxy",
      "version" : "4.1.96.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e545e64387fca02cd771e4cf58263f6d"
        },
        {
          "alg" : "SHA-1",
          "content" : "dcabd63f4aaec2b4cad7588bfdd4cd2c82287e38"
        },
        {
          "alg" : "SHA-256",
          "content" : "4832bbbab1daac36ecd04d2ed2dc586c4a57b4604d89145a2de487ff5b00e4cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "1b3803744a88e9368a490af4196b60b23623aa7d9e45f67d63c42ff8ecb8b308d60d9b59065253f71ca0f12714ad2e3aeca7404290c16d4cec2678381e83e644"
        },
        {
          "alg" : "SHA-384",
          "content" : "bb75c13c0bed0d683d3c0619dfd5233b0946d2b972bcda11c0e20d7f2dcbc7b199d43b06a7a27e52aa4fa88af00910ab"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-handler-proxy@4.1.96.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-handler-proxy/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-handler-proxy"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-handler-proxy@4.1.96.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-resolver",
      "version" : "4.1.96.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "405c47ca1ad8320313567febdfe14f6c"
        },
        {
          "alg" : "SHA-1",
          "content" : "0e51db5568a881e0f9b013b35617c597dc32f130"
        },
        {
          "alg" : "SHA-256",
          "content" : "54951fae449fa343038fc57855abf5822918d52ca5a302a421f327cad9c75cf1"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a112bdfba66e0a409319dc80ebf689584f771b4188d2c8a5f5e436f52fcfe73ae5e2c538211147015c6b51459e0994a96c30bcba8b0947a60f64907c3e59ad4"
        },
        {
          "alg" : "SHA-384",
          "content" : "456ac8df2d85a674c4c70aa125c27e1786c32b426e5d6000b3681f4a3c9af56b09f6558c15d4157b5629fa2e851715b3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-resolver@4.1.96.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-resolver/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-resolver"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-resolver@4.1.96.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport",
      "version" : "4.1.96.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "399c3790cee935549188e9278bd776f0"
        },
        {
          "alg" : "SHA-1",
          "content" : "dbd15ca244be28e1a98ed29b9d755edbfa737e02"
        },
        {
          "alg" : "SHA-256",
          "content" : "8fe3afbe8b094a7b9f1eb27becf1cf017e5572343c1744d2b6040d5f331e84e3"
        },
        {
          "alg" : "SHA-512",
          "content" : "03b8d37fa8ac0735e63367bad881cc8615a4539aedffae8a43234431353d4a68419e43721bb403a6c43c76277c88d4aced9a2df5bdd132d997e9e3897f194887"
        },
        {
          "alg" : "SHA-384",
          "content" : "81dffe7ffd6c4ece4e5abf70f684ae5e814cda658a93cae19d1cd31237d90f8adb27a07cb969daccf1e285d3d5891126"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport@4.1.96.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport@4.1.96.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-classes-epoll",
      "version" : "4.1.96.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "da2406ec974699953aac1f77b18b8fde"
        },
        {
          "alg" : "SHA-1",
          "content" : "b0369501645f6e71f89ff7f77b5c5f52510a2e31"
        },
        {
          "alg" : "SHA-256",
          "content" : "1591b3ea061932677dc2bab6cb7d82e8f1837a52b3c781f4daa99984ec87a9cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "c531b40a3f95c2bbc3cd67e44fa49a1ca29111512efaab26a8d5bf0febee389a272df28127f929525c2d571cccfb8b7958c040a2bafff46a1a3f7898a9a4c6f5"
        },
        {
          "alg" : "SHA-384",
          "content" : "c61fc598cb34d219fd218ae3e205d35a3fb276a0cdf92aad08283daa77dad6494d51a32cf0f1f313ffaa636c9bd9e969"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.96.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-classes-epoll/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-classes-epoll"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.96.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-classes-kqueue",
      "version" : "4.1.96.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ad1b1afb29994560ee3eeddb98308a01"
        },
        {
          "alg" : "SHA-1",
          "content" : "782f6bbb8dd5401599d272ea0fb81d1356bdffb2"
        },
        {
          "alg" : "SHA-256",
          "content" : "f2f1fab3b297aee20a3922c79b548c8b4b72bb10b635375434c108ee05f29430"
        },
        {
          "alg" : "SHA-512",
          "content" : "50eade39792c628792679d771b38256fcbdd22eec9dc0f68e2b5a4c9c71ba5b7d41364656df01cde1a4be2041a9f7a4d9628cbcf45b7e657b0bf13265576a615"
        },
        {
          "alg" : "SHA-384",
          "content" : "a72fba06c47cfc5d06f491395c27131a335995f5b7577b4ccaf7d80ae0a888e068356c47380359ab1393b58ff980188b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.96.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-classes-kqueue/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-classes-kqueue"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.96.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-epoll",
      "version" : "4.1.96.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bc9808cf42cc59ff19497f6f2dce9ac4"
        },
        {
          "alg" : "SHA-1",
          "content" : "3f8904e072cfc9a8d67c6fe567c39bcbce5c9c55"
        },
        {
          "alg" : "SHA-256",
          "content" : "9363c8131744931d54db62d03922563aa5ddc96db53910beb9c2953bfa8bca34"
        },
        {
          "alg" : "SHA-512",
          "content" : "9fd5830fa697bf41851b14a00597b9f03b18055883a38897b5bcb23140a7f522e0a524dd339feeb9a6fd25633287f4ea37a5e5c93fcaa2e76258508802cbd55b"
        },
        {
          "alg" : "SHA-384",
          "content" : "b2e0a4eea045384f779b55054a2cebade06e0c27f61950314ddbc0b3034f3dbf680863e213dde69c4aed3cb77b7e4cdc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-x86_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-epoll/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-epoll"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-x86_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-epoll",
      "version" : "4.1.96.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "80aafea66fc444b4d8cbfad53e69c7f7"
        },
        {
          "alg" : "SHA-1",
          "content" : "cae778ab150745432a90d4f26f6174fe564f56fc"
        },
        {
          "alg" : "SHA-256",
          "content" : "1f02bf3599366231064ee99fc8c621eb97eaac1e40ba472ffe4de968eb186b7e"
        },
        {
          "alg" : "SHA-512",
          "content" : "bc6b7f767c8b25b6c3be20e12224c337e349d81b2a741c2b38db776c422f472787023b15eb52a12ec0f49e2d3c152ca428ca3a30a0cbf45c7e7909662b46a977"
        },
        {
          "alg" : "SHA-384",
          "content" : "3c6126cbe05b8a14d905518c5cb515ede5a7c634989650df2b658310eb45209557004941bd3de3cb5705a63dc488ace7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-aarch_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-epoll/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-epoll"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-aarch_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-kqueue",
      "version" : "4.1.96.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5153b107e349cad3e4301f1968de8cc3"
        },
        {
          "alg" : "SHA-1",
          "content" : "070b3e957eec0cd78637c3bd15a8a4b24e653f87"
        },
        {
          "alg" : "SHA-256",
          "content" : "c5e228db77b235fc3e2df0afe0128904022893f1db5395fb8bd44257ada268c5"
        },
        {
          "alg" : "SHA-512",
          "content" : "6246162950baf29fb7a952c6289a5830a8bb65d057cc1262bfe7b5365527c73223324eb6a682f5ce4e55eeff4fd04f35ae326ac6ae98be3185c5b6da89adf89d"
        },
        {
          "alg" : "SHA-384",
          "content" : "3f2878cd18a27edde2ef5d200eacc6e9d705c43f0cf5d64e4ade60be6f28f38129862290f4931a7dca35ec122df07578"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-aarch_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-kqueue/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-kqueue"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-aarch_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-kqueue",
      "version" : "4.1.96.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3358edcfbbf22751db678a3be1386396"
        },
        {
          "alg" : "SHA-1",
          "content" : "c127ed313fc80cf2cb366dccfded1daddc89a8ef"
        },
        {
          "alg" : "SHA-256",
          "content" : "89f1a331da4fd49d39ac83e03f4cdb04417bd7ce32f522ef2eb670e09225add6"
        },
        {
          "alg" : "SHA-512",
          "content" : "ae4aac703b720b6fcd0a109c85719baec7a1a38f362c9eda7c81ddd4faa38511fd059c725015b5ed469ea280bccf6bbbd5cabaa48c076cefc59b25d8c0cd8a29"
        },
        {
          "alg" : "SHA-384",
          "content" : "477bcdaf50fd851be646a9016b9d07c2d0e36f0287016b1f3d70da8da646494e7b9f08e728028063fa15b5a9992993d2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-x86_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-kqueue/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-kqueue"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-x86_64&type=jar"
    },
    {
      "publisher" : "AddThis",
      "group" : "com.clearspring.analytics",
      "name" : "stream",
      "version" : "2.9.6",
      "description" : "A library for summarizing data in streams for which it is infeasible to store all events",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "298278ea2ea29ce1da1a956dd6fad4d4"
        },
        {
          "alg" : "SHA-1",
          "content" : "f9c235bdf6681756b8d4b5429f6e7217597c37ef"
        },
        {
          "alg" : "SHA-256",
          "content" : "d61aebbea8a08148c3aca6b03464495a4bbf9d362205d54ea5f6b443af73afdf"
        },
        {
          "alg" : "SHA-512",
          "content" : "cc9bb80ee82576c035827a3b41f4cee0852b37c80374619c4ddba349be1d4387ad657130caabafab28d50c4869e44c1d3eb852c6370c583ca42a03ee88799406"
        },
        {
          "alg" : "SHA-384",
          "content" : "b40935d7d5d780b7fd5306759c7aeaf2f1477beefa3626e7a0324305f5ab2efcb7656788767baf4f631f00f198c17873"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.clearspring.analytics/stream@2.9.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/addthis/stream-lib"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/addthis/stream-lib"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.clearspring.analytics/stream@2.9.6?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-core",
      "version" : "4.2.19",
      "description" : "Metrics is a Java library which gives you unparalleled insight into what your code does in production. Metrics provides a powerful toolkit of ways to measure the behavior of critical components in your production environment.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd9caf026f4330b51c6308e6d0749084"
        },
        {
          "alg" : "SHA-1",
          "content" : "d32b4c3f3e733bf4cb239ca4204fbed8464973a5"
        },
        {
          "alg" : "SHA-256",
          "content" : "fa967bc2b37c8bff5bc377e60e439504fd9df5d335c7a42b37212403250023df"
        },
        {
          "alg" : "SHA-512",
          "content" : "dd1af2a8104e344ebdba21a7366c6aedfeaba7e03861af9c1ed53c82ce2c51e7a6034c46a6ad9a5e55e20670b5c490e178105c944c4f91b07d4be5455bb13dcc"
        },
        {
          "alg" : "SHA-384",
          "content" : "c6a6077f528be485082e2418b0f7d87e28a91d07d66bd861bd23fac60fd99e4828c5cfa8722ead6e69d5cde030ff465f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://metrics.dropwizard.io/metrics-core"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/metrics-core/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-jvm",
      "version" : "4.2.19",
      "description" : "A set of classes which allow you to monitor critical aspects of your Java Virtual Machine using Metrics.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6de530c7794c0d324169aede9831a410"
        },
        {
          "alg" : "SHA-1",
          "content" : "13bb7b51914d43a7709f7b477b98f3732aaa03e4"
        },
        {
          "alg" : "SHA-256",
          "content" : "996a602152db07aa5cbc669265b564099c20acef2508ec5e717f20b98b5acbc5"
        },
        {
          "alg" : "SHA-512",
          "content" : "c076180eca8337b69dc5d6d3f08d3bfa83798f4d9501b745fba45539ce1656aa05b970340cee04ba143e6eaa263ac8de9f8f3d4ce856b05f34bf745a69539453"
        },
        {
          "alg" : "SHA-384",
          "content" : "5334104589e803d7a0ac2a147d5aedc4ca9cee7c70874e465a728cd80ec9ad135dd5731747575ed07159bb8f59b9eb7d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.19?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://metrics.dropwizard.io/metrics-jvm"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/metrics-jvm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.19?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-json",
      "version" : "4.2.19",
      "description" : "A set of Jackson modules which provide serializers for most Metrics classes.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1340203cea37905d3f72ff20bf04f48b"
        },
        {
          "alg" : "SHA-1",
          "content" : "32afaab5bca42c8cbd4002f906b169d6c0fd4e4f"
        },
        {
          "alg" : "SHA-256",
          "content" : "cfbccdfd8fc073dbbd47ae734785c0a2a12a00c0c3903549719fc416e8b646c6"
        },
        {
          "alg" : "SHA-512",
          "content" : "472d110768089b1dfba53f6e5d35b86e312115eeaf0b7cbb010a9fcb1a0c2e2ffc41646d2f8d63635d5cc396dff75dfe1cec06168d0a6dc9262d7094cafbd044"
        },
        {
          "alg" : "SHA-384",
          "content" : "03cba41a9d9a16442973607601c1d8d5c2b76b345429fb9442f122f98777c6ce9ffbc161d9a42969fe7242932b5ddbe8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-json@4.2.19?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://metrics.dropwizard.io/metrics-json"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/metrics-json/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-json@4.2.19?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-graphite",
      "version" : "4.2.19",
      "description" : "A reporter for Metrics which announces measurements to a Graphite server.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7608e89045df64926970bd2b3e46ff97"
        },
        {
          "alg" : "SHA-1",
          "content" : "c8ed09f56bca464c136066bedbac86f451aa7f20"
        },
        {
          "alg" : "SHA-256",
          "content" : "53d5417288b0e2a390d379a6f784210b43ebfbaa0a1f3349e2638a35bc2c0877"
        },
        {
          "alg" : "SHA-512",
          "content" : "7a851b1b46c2bb8c234cb43c400f4873d973e8d7c488e091ff28cde73697cd87674e7987b5f3aec82e185a997951b6e5b17053bc019bc0276658433b23be375a"
        },
        {
          "alg" : "SHA-384",
          "content" : "2dec5313ae6df3ad3122f474c69f573dec9d2f5ac92a6c727eda4a96988fc3175d26702d012f60f4a13700cf61c5bb05"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.19?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://metrics.dropwizard.io/metrics-graphite"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/metrics-graphite/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.19?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-jmx",
      "version" : "4.2.19",
      "description" : "A set of classes which allow you to report metrics via JMX.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2ada942cc52a9e0341439b7cfaeaa5ed"
        },
        {
          "alg" : "SHA-1",
          "content" : "474c1c764df01a0d93fc268da1f779ab97fe99ae"
        },
        {
          "alg" : "SHA-256",
          "content" : "d51c124b6e1ec77b7711dffd4b46b47db529074ff522b49f2343c7c2e82798af"
        },
        {
          "alg" : "SHA-512",
          "content" : "d642f2c7d788b0e887fe5ef828a6117f9b5e11f88c1d35667e90862d9d69aa837322d488b1a9d1223c6d89c7d4fe2662603509377fc67f3fa05a48a069e9418a"
        },
        {
          "alg" : "SHA-384",
          "content" : "e6911e014be641705418e81c90532e634256eae34e04027cbd39c5f0d1ff94f76afad974534bc5aeaa1cb7fb5a7d65c8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.19?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://metrics.dropwizard.io/metrics-jmx"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/metrics-jmx/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.19?type=jar"
    },
    {
      "publisher" : "com.fasterxml.jackson.module",
      "group" : "com.fasterxml.jackson.module",
      "name" : "jackson-module-scala_2.12",
      "version" : "2.15.2",
      "description" : "jackson-module-scala",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ecc6a1f298669beee1a395538e412aab"
        },
        {
          "alg" : "SHA-1",
          "content" : "e3d122234da3e5e22c73bd42291616f5331b547d"
        },
        {
          "alg" : "SHA-256",
          "content" : "81259ec6730f6d4b85d5586c9eaa6e75a6885b34bfca572be03126a9179719fe"
        },
        {
          "alg" : "SHA-512",
          "content" : "39fb1e425a124a7e50faaa11a0e858603c7b789fd66f78d006f1fffe08a83c4811011de797c8943e42c9a46bf39219684080108f3b346014793f8860b63d96a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "76d844db959b3f16f848386cb16c76f84065fcde92b706f1b5c6e2ec16c931a4e53cd4cc80f90fb0ae595aa71531f95e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-module-scala"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-module-scala"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.15.2?type=jar"
    },
    {
      "group" : "com.thoughtworks.paranamer",
      "name" : "paranamer",
      "version" : "2.8",
      "description" : "Paranamer allows runtime access to constructor and method parameter names for Java classes",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f213c72b67d4850f17a4a3e9064904de"
        },
        {
          "alg" : "SHA-1",
          "content" : "619eba74c19ccf1da8ebec97a2d7f8ba05773dd6"
        },
        {
          "alg" : "SHA-256",
          "content" : "688cb118a6021d819138e855208c956031688be4b47a24bb615becc63acedf07"
        },
        {
          "alg" : "SHA-512",
          "content" : "d774b05135d34bc42d8a7bee6466715bc44837b95bbe618faa8680978c4348652292ea6dd8eeb88dc7fa859bfe685f4d8329032cbf4fce2ea7e555ba3243cc14"
        },
        {
          "alg" : "SHA-384",
          "content" : "699148a3f69ae205aa47c82e2cb78d3949afc71b090935579a0363fee8675eec3ba05e0d3127295213b39aad3485690b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/paul-hammant/paranamer/paranamer"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/paul-hammant/paranamer/paranamer"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.ivy",
      "name" : "ivy",
      "version" : "2.5.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e2b8480e296278e41b68020a444c6ae1"
        },
        {
          "alg" : "SHA-1",
          "content" : "7fac35f24f89776e7b78ec98658d8bc8f22f7e89"
        },
        {
          "alg" : "SHA-256",
          "content" : "793120f8c9058aede475b093651aa5307603c1518180772c104562a0ed2e9feb"
        },
        {
          "alg" : "SHA-512",
          "content" : "9d63b3d5ef750e08f802a1d2f5a8d855ca30bad39fd58bc48db3d7bcfb7ecfd91a61965135755da81c8267d050d1a9addf4dd46eb28a3bfda467d691274e016a"
        },
        {
          "alg" : "SHA-384",
          "content" : "049d433f5ba75371f0376bf9f465e1bfb111458df469d8f0313113b175a1f13d3650f064cbe8ee3c3bef4ac84831caa0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.ivy/ivy@2.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://ant.apache.org/ivy/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IVY"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ant-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/repos/asf/ant/ivy/core/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.ivy/ivy@2.5.1?type=jar"
    },
    {
      "group" : "oro",
      "name" : "oro",
      "version" : "2.0.8",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "42e940d5d2d822f4dc04c65053e630ab"
        },
        {
          "alg" : "SHA-1",
          "content" : "5592374f834645c4ae250f4c9fbb314c9369d698"
        },
        {
          "alg" : "SHA-256",
          "content" : "e00ccdad5df7eb43fdee44232ef64602bf63807c2d133a7be83ba09fd49af26e"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a98e493c4d771322b1331ec05ab0e363a83d8ac2af8018d96a44df2bf5bfc97d33ebe6f6f93e46ab10bf1536f0c29e9d9569318ed49bc18b4e96b1a8b476d37"
        },
        {
          "alg" : "SHA-384",
          "content" : "f542e92b7a86bcb20cc21f0c4b29778428944391344ca11df432f9ce36a96ce8e8f65da67e450e52c0e8ba441d2a7332"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/oro/oro@2.0.8?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/oro/oro@2.0.8?type=jar"
    },
    {
      "group" : "net.razorvine",
      "name" : "pickle",
      "version" : "1.3",
      "description" : "A feature complete pickle protocol implementation (Python's builtin serialization mechanism)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b043c671d86e43a0a11cc02e815616e9"
        },
        {
          "alg" : "SHA-1",
          "content" : "43eab5f4a8d0a06a38a6c349dec32bd08454c176"
        },
        {
          "alg" : "SHA-256",
          "content" : "259aca378cbcee48797d047169e573666640312a188e2428a03cb19b0fbc7664"
        },
        {
          "alg" : "SHA-512",
          "content" : "8199f376fcd39e0437a6a4fd7a853bd2edf1805bdd43b185dab8f5b97eda3a657a757bf61bad8474379c60b1074f38c4ed03ed2541e77408d08531036f725485"
        },
        {
          "alg" : "SHA-384",
          "content" : "a6ac01883fb7c170210d9b9b241a9544e168ede941618517ca468a499747ed044b3e792904c5b45ef77e48a69b19b017"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/net.razorvine/pickle@1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/irmen/pickle"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/irmen/pickle/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/irmen/pickle"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.razorvine/pickle@1.3?type=jar"
    },
    {
      "group" : "net.sf.py4j",
      "name" : "py4j",
      "version" : "0.10.9.7",
      "description" : "Py4J enables Python programs running in a Python interpreter to dynamically access Java objects in a Java Virtual Machine. Methods are called as if the Java objects resided in the Python interpreter and Java collections can be accessed through standard Python collection methods. Py4J also enables Java programs to call back Python objects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7afcbc30fa3c00d5febfbc522235f2a5"
        },
        {
          "alg" : "SHA-1",
          "content" : "e444374109f6f3ffdfdbd4e7dc5a89122b0c9134"
        },
        {
          "alg" : "SHA-256",
          "content" : "4d67d584e7b0f456deedffbd3f43047efd6748ff3d13b443abb61ec54cf7af13"
        },
        {
          "alg" : "SHA-512",
          "content" : "8e3bb548cea719e4ab0d3d559f1cdb8401c74606036c93f93b6519942994432786a800ce57b6d04fd090dfdea0359cf78e4d899021c5559f4f2f558fb09dc1be"
        },
        {
          "alg" : "SHA-384",
          "content" : "b7d117caa8c2269807f1ad4335fab2f9f6d99b93ee68ec548f3ff3d520f8d11ce8ecb2c2798f8fd86fb19606be60187f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://nexus.sonatype.org/oss-repository-hosting.html/py4j"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-crypto",
      "version" : "1.1.0",
      "description" : "Apache Commons Crypto is a cryptographic library optimized with AES-NI (Advanced Encryption Standard New Instructions). It provides Java API for both cipher level and Java stream level. Developers can use it to implement high performance AES encryption/decryption with the minimum code and effort. Please note that Crypto doesn't implement the cryptographic algorithm such as AES directly. It wraps to Openssl or JCE which implement the algorithms. Features -------- 1. Cipher API for low level cryptographic operations. 2. Java stream API (CryptoInputStream/CryptoOutputStream) for high level stream encryption/decryption. 3. Both optimized with high performance AES encryption/decryption. (1400 MB/s - 1700 MB/s throughput in modern Xeon processors). 4. JNI-based implementation to achieve comparable performance to the native C/C++ version based on OpenSsl. 5. Portable across various operating systems (currently only Linux/MacOSX/Windows); Apache Commons Crypto loads the library according to your machine environment (it checks system properties, `os.name` and `os.arch`). 6. Simple usage. Add the commons-crypto-(version).jar file to your classpath. Export restrictions ------------------- This distribution includes cryptographic software. The country in which you currently reside may have restrictions on the import, possession, use, and/or re-export to another country, of encryption software. BEFORE using any encryption software, please check your country's laws, regulations and policies concerning the import, possession, or use, and re-export of encryption software, to see if this is permitted. See <http://www.wassenaar.org/> for more information. The U.S. Government Department of Commerce, Bureau of Industry and Security (BIS), has classified this software as Export Commodity Control Number (ECCN) 5D002.C.1, which includes information security software using or performing cryptographic functions with asymmetric algorithms. The form and manner of this Apache Software Foundation distribution makes it eligible for export under the License Exception ENC Technology Software Unrestricted (TSU) exception (see the BIS Export Administration Regulations, Section 740.13) for both object code and source code. The following provides more details on the included cryptographic software: * Commons Crypto use [Java Cryptography Extension](http://docs.oracle.com/javase/8/docs/technotes/guides/security/crypto/CryptoSpec.html) provided by Java * Commons Crypto link to and use [OpenSSL](https://www.openssl.org/) ciphers",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c71451f3c4737ba6d84f9bd9e8f2400d"
        },
        {
          "alg" : "SHA-1",
          "content" : "4a8b4caa84032a0f1f1dad16875820a4f37524b7"
        },
        {
          "alg" : "SHA-256",
          "content" : "44dc28551cdba731658090d9b10d2eead9839c269d70cdcd7d56c0423df5227f"
        },
        {
          "alg" : "SHA-512",
          "content" : "62acf1d90ad667c8f3f9b267c6f4fefa57eb914ef57a24e10a7dc6ea7bf1f2a6933db831f836dc2ca0fe86aff84a6d1a0fb3c8bb34c7c24e3e1190778efb241d"
        },
        {
          "alg" : "SHA-384",
          "content" : "0d7c20964ab9cbde60d3d03ca92b481e30f969b30adc336b77ec8b8dcb660e327bfff8c98cb9c30163e7bdf5ffbae486"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-crypto/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/search/?q=Commons-CRYPTO"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CRYPTO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-crypto.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-catalyst_2.12",
      "version" : "3.5.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2677b2eb0e8f809e0081abe07b735a49"
        },
        {
          "alg" : "SHA-1",
          "content" : "ce6eb2902a49a01e1b84544d9b2cd94d4442886f"
        },
        {
          "alg" : "SHA-256",
          "content" : "33c136634d10acbc45b0bcef91e13399755c707bafd9792c0c78dc5710c1e9da"
        },
        {
          "alg" : "SHA-512",
          "content" : "1e479a110b17ae5177f92567ce73d425ffc57239edfe8e3ce372150bd86c59bf8bfd46376232149362a2c9627d6a21e0ca7384e4d25ff92e8204ebd0f554b0ba"
        },
        {
          "alg" : "SHA-384",
          "content" : "3bdcf527aaa25093a3341adf8b471352bcbc4cb2691c511d95c13b134c3e4c231ec618ea883ab51863029a339a2785a3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-catalyst_2.12@3.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spark.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@spark.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/spark.git/sql/spark-catalyst_2.12"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-catalyst_2.12@3.5.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-sql-api_2.12",
      "version" : "3.5.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "31394fb813faf02b185072741ff90ed3"
        },
        {
          "alg" : "SHA-1",
          "content" : "b251da0fa826f7cd59a0cb040fe16d5b9c6a0171"
        },
        {
          "alg" : "SHA-256",
          "content" : "7486417e8f8e5bf8daba8bd4487661f9307d3f14f18aee96c4d82132c0fdd612"
        },
        {
          "alg" : "SHA-512",
          "content" : "21a7dc9de0f0368017eed298db6b29738d9e21a5524ca0a39339c4923818ff6b0a6c2996cef8b3aebd71ec1d7adcc694e5fce3ce6ed1c8558d95922e884a172a"
        },
        {
          "alg" : "SHA-384",
          "content" : "76573ea53249d2daeac1049eb8d424071d002a93e0eec808d3d66bf0df0501a69d5b1d98e2480e2a47c1ede788a43f56"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-sql-api_2.12@3.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spark.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@spark.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/spark.git/sql/spark-sql-api_2.12"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-sql-api_2.12@3.5.0?type=jar"
    },
    {
      "publisher" : "org.scala-lang.modules",
      "group" : "org.scala-lang.modules",
      "name" : "scala-parser-combinators_2.12",
      "version" : "2.3.0",
      "description" : "scala-parser-combinators",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c455c1ff68f81060de08df6acc60d5c4"
        },
        {
          "alg" : "SHA-1",
          "content" : "0d629e5386cd9fa205434fc644ccce0217fd3477"
        },
        {
          "alg" : "SHA-256",
          "content" : "15bf13f5ce0e9ff4224603c44281265d0509ac31ea823c46aa29a5a52e09a574"
        },
        {
          "alg" : "SHA-512",
          "content" : "f59a980004d298f7e1a199a2bbdffa71f01c4b278691c4c864f0b74419bc1d44ba41793e45d733b67ded4928021232a3705a172c0161c7b5bb62982c401ffa0f"
        },
        {
          "alg" : "SHA-384",
          "content" : "21b02c08c542596d0e0433652b94bbb1a61eee309d8caf5ec5fc4d1135e23fce082d0238bc011c6c6558a9ec73c46c80"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.12@2.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/scala-parser-combinators/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala-parser-combinators"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.12@2.3.0?type=jar"
    },
    {
      "publisher" : "ANTLR",
      "group" : "org.antlr",
      "name" : "antlr4-runtime",
      "version" : "4.9.3",
      "description" : "The ANTLR 4 Runtime",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "718f199bafa6574ffa1111fa3e10276a"
        },
        {
          "alg" : "SHA-1",
          "content" : "81befc16ebedb8b8aea3e4c0835dd5ca7e8523a8"
        },
        {
          "alg" : "SHA-256",
          "content" : "131a6594969bc4f321d652ea2a33bc0e378ca312685ef87791b2c60b29d01ea5"
        },
        {
          "alg" : "SHA-512",
          "content" : "2c3763a8fbc7af110df5d6bb57692759b23e8bf961a53694c69bde4cd9d8c3a8eaa55cf376ce34c6c4e2035a99d7abf08c6ffa3b75d18a6d93a9c1ca95927ea8"
        },
        {
          "alg" : "SHA-384",
          "content" : "62a62dab4a27733a810b97fe5544eb1b5b25d2df83ea8d93802cb0e6fd1b4b3ca5a130c51aa9198deefc30cd0f062841"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.antlr.org/antlr4-runtime"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/antlr/antlr4/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/antlr/antlr4/tree/master/antlr4-runtime"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-vector",
      "version" : "12.0.1",
      "description" : "An off-heap reference implementation for Arrow columnar data format.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "73bd1ca4d69182476d391e14260135c3"
        },
        {
          "alg" : "SHA-1",
          "content" : "809a112926070f912f12c151d5ab1fa810612ca5"
        },
        {
          "alg" : "SHA-256",
          "content" : "0ca927fb749772077d488a901ec977ff9428a6836a053b12b470adf822b1fd72"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c4c13e1f642b6e07e6a0b93bf6fd953efd37dc235b9ce371fbd94c374cb3a42671e0fd1858c1cb3a7e8af4cb7acf22cac8ad1e051037fc3aa707ed7239bc1d"
        },
        {
          "alg" : "SHA-384",
          "content" : "d3478c448f20c6b2fc8985981a636dfc08bd92ca52b763875a71840b80ecb0c4088072f537b3b91dc14a8783a05c6744"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-vector@12.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://arrow.apache.org/arrow-vector/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow/arrow-vector"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-vector@12.0.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-format",
      "version" : "12.0.1",
      "description" : "Generated Java files from the IPC Flatbuffer definitions.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d5f60e3a86c42f002c7b87baa8f26068"
        },
        {
          "alg" : "SHA-1",
          "content" : "b2dbacdcafb42e4fd7432468010d5d4d82380778"
        },
        {
          "alg" : "SHA-256",
          "content" : "ff08f69204e0a26b409a1c501197ba956f2fe044e53f1f4889025ec7622d7787"
        },
        {
          "alg" : "SHA-512",
          "content" : "e6b5d1318672142a2969c9921009ddb18ceec47c409bd206a0d3bff2dbb8ae06d763ce6244422b1b5dc0b658f5cdcd440d72197de1b9f1071da1485a59e560b9"
        },
        {
          "alg" : "SHA-384",
          "content" : "5a7ea6a9cb966e359d5d9319eff5be2c3b52b4871ae6466319f8eecb70e80697ba5396ebc0d3b15a96d2aa3ec3701d6e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-format@12.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://arrow.apache.org/arrow-format/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow/arrow-format"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-format@12.0.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-memory-core",
      "version" : "12.0.1",
      "description" : "Core off-heap memory management libraries for Arrow ValueVectors.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "59bdf36bbacafe58ce7a139d1f4daae4"
        },
        {
          "alg" : "SHA-1",
          "content" : "cd7f41f4ebbb7cdab55b7a3b935ab5bcb2108b8d"
        },
        {
          "alg" : "SHA-256",
          "content" : "25e23b9762ddce71fb9876a1794056a7dfc64f453c608763160fcc1852c62c3f"
        },
        {
          "alg" : "SHA-512",
          "content" : "14e3b7abcd24fa21fb478f290ffb5460c042d5d23392ac0e0fcad917c15b5fa92b686cc68e6a8f3faf308058b8dd9e873aeaef3530e4fc6d36756f31a84435de"
        },
        {
          "alg" : "SHA-384",
          "content" : "173d748c8d147e002412f843f0868e2992fb9d17a4d6c91dc3e4c515352e4b9f661c696d1f159dbbc6d35df259e3b9b6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://arrow.apache.org/arrow-memory/arrow-memory-core/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow/arrow-memory/arrow-memory-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.datatype",
      "name" : "jackson-datatype-jsr310",
      "version" : "2.15.2",
      "description" : "Add-on module to support JSR-310 (Java 8 Date & Time API) data types.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "94d6cec0fe6ad8b81752beb500bd4bbc"
        },
        {
          "alg" : "SHA-1",
          "content" : "30d16ec2aef6d8094c5e2dce1d95034ca8b6cb42"
        },
        {
          "alg" : "SHA-256",
          "content" : "7574c81ad570476ef6aad26f419288fd466733f3315bee3012f2f29c9dc008c8"
        },
        {
          "alg" : "SHA-512",
          "content" : "3036ff042d09342d36e90960103ec57c77549b85e2c370dfdd57673195141fea6edbac29fa598cc1d1edf56e4d457b7b838dcdc3f50acae1cc70b5905e075301"
        },
        {
          "alg" : "SHA-384",
          "content" : "38a75ac595705f1f518c461009280318fbe85b3aab04a68b15e736b3365e20ea17c5db28e46da0d89673b223307b800f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-modules-java8/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.2?type=jar"
    },
    {
      "group" : "com.google.flatbuffers",
      "name" : "flatbuffers-java",
      "version" : "1.12.0",
      "description" : "Memory Efficient Serialization Library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "26ecc1a330e441f909226a338d4bef65"
        },
        {
          "alg" : "SHA-1",
          "content" : "8201cc7b511177a37071249e891f2f2fea4b32e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "3f8c088b4dd04a9858721f2e162508c94db0dd86f961e306ee63ef2eda871bf7"
        },
        {
          "alg" : "SHA-512",
          "content" : "20750e91441c074ca28f72b0b6494e8f0bfbc94caff04eb49727efc6b28e453c84732f24acc52cf36b36ba66b57a145d003e87f749c5c4518ddc6f9247b8ab47"
        },
        {
          "alg" : "SHA-384",
          "content" : "7af7d2e03ae71bea1ebac6cc9c2926b9f952c48a124db160ee2327f2f7e6b2e3ba153e5924971788392fc278b0e04ee9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/flatbuffers"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/flatbuffers"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-memory-netty",
      "version" : "12.0.1",
      "description" : "Netty allocator and utils for allocating memory in Arrow",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bbeaa3dfe98fbed40b47f005e21a75fc"
        },
        {
          "alg" : "SHA-1",
          "content" : "f0e6801aa116b75775272dcac6ad49584382bf8c"
        },
        {
          "alg" : "SHA-256",
          "content" : "f3d45c3ca7ef7f9b3bbf6d8b68126d630fe3f538614fda00f95ec66f7d3aa051"
        },
        {
          "alg" : "SHA-512",
          "content" : "e023c562eab62a885c940530ccdd7495dce5a7f015b6cab963220981eca30d0daceccc297c0085b88007ad3bdcd0e81a2de9ab3c78b7c6aa6dce13bcfb1c3909"
        },
        {
          "alg" : "SHA-384",
          "content" : "f22815f86b1c4be39ab95db5059caf95ba62326f4ed5710520ccad6a90d827491178655d5f5a45211a712d0cbe32d573"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-memory-netty@12.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://arrow.apache.org/arrow-memory/arrow-memory-netty/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow/arrow-memory/arrow-memory-netty"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-memory-netty@12.0.1?type=jar"
    },
    {
      "group" : "org.codehaus.janino",
      "name" : "janino",
      "version" : "3.1.9",
      "description" : "The \"JANINO\" implementation of the \"commons-compiler\" API: Super-small, super-fast, independent from the JDK's \"tools.jar\".",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "597cbcd4d0b8273552758c50bf423926"
        },
        {
          "alg" : "SHA-1",
          "content" : "536fb0c44627faae32ca7a8a24734f4aab38c878"
        },
        {
          "alg" : "SHA-256",
          "content" : "7df88d90aa165ab48bdebea425fa009eeef04918c82e98cdbea5e747e114508d"
        },
        {
          "alg" : "SHA-512",
          "content" : "840dba1621f06322d6ede76c941665e4e119f26ca1b7cb1a510a2bd9d692d3a5d75ac79477055824c2af37958e1c330daf6e1fbb9fd5bbba82db3a3f6077ff11"
        },
        {
          "alg" : "SHA-384",
          "content" : "85599d163bfe4c2d66e526d549c5bd26bc4137c4bb80099130782e42cfb9d5a55d34b11d98877cf11436536d3f1f9aa3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://janino-compiler.github.io/janino/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/janino-compiler/janino"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar"
    },
    {
      "group" : "org.codehaus.janino",
      "name" : "commons-compiler",
      "version" : "3.1.9",
      "description" : "The \"commons-compiler\" API, including the \"IExpressionEvaluator\", \"IScriptEvaluator\", \"IClassBodyEvaluator\" and \"ISimpleCompiler\" interfaces.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e14b760178e0c2105e2951c2f452a1d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "f0d70bb319e9339aea90a8665693e69848acc598"
        },
        {
          "alg" : "SHA-256",
          "content" : "d988a3ebc17188e9a1a3efadd8e958b90eb995c4fcc077292a5dfe5fe1109d25"
        },
        {
          "alg" : "SHA-512",
          "content" : "0d290612b69ddece1c58ae0a60c6a544893800f588a424afb7bc12215a9e3bfe775ff6bac749f16c7b4e32e186ad29bceb80112df4082f16ce1f749685135e80"
        },
        {
          "alg" : "SHA-384",
          "content" : "ab1394175f2509bcdc5aa1c76294ba146ba09bae259401932f08bb9b5debd11049d2c751e503e4255d4efd4a4f199107"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://janino-compiler.github.io/commons-compiler/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/janino-compiler/commons-compiler"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.datasketches",
      "name" : "datasketches-java",
      "version" : "3.3.0",
      "description" : "Core sketch algorithms used alone and by other Java repositories in the DataSketches library.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5e2668c18f0e978c65bc260304fe5bc5"
        },
        {
          "alg" : "SHA-1",
          "content" : "fcf28150084f55866315283d9f25e500a05f6a20"
        },
        {
          "alg" : "SHA-256",
          "content" : "d1bf7b4ed14058f244fe7a85f7ae69f42de452b7e7c0cc26b735be40770e5901"
        },
        {
          "alg" : "SHA-512",
          "content" : "72e1d07034e54abac1bc4028cd1923370702beb601b9f3971b1c90b34050cc2d0cca7c954adab6a9335c7a2b5818f9aea04802e6bfb5cd2aab9cfecb54052e29"
        },
        {
          "alg" : "SHA-384",
          "content" : "fcfdf33727ed916dfae61755fe193369d913eaa50ebe35f388facf33876b582c9f3d980b2af869f2d91295ab22c4aa76"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.datasketches/datasketches-java@3.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://datasketches.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/datasketches-java/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/datasketches-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/datasketches-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.datasketches/datasketches-java@3.3.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.datasketches",
      "name" : "datasketches-memory",
      "version" : "2.1.0",
      "description" : "High-performance native memory access.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "52193044ed84264813b4130b65e93f09"
        },
        {
          "alg" : "SHA-1",
          "content" : "f9ef215c32b85e331d62a9dbf4bafb405a5f543a"
        },
        {
          "alg" : "SHA-256",
          "content" : "9d6cc5e06449c6bd61bba5eb7db30bb93583591300332a09ce615198bf86fb23"
        },
        {
          "alg" : "SHA-512",
          "content" : "5eb68c4b4579612300dbf74304f16be222fce5564a2abf4281b689693bb3f7efa18460df6e82853aeda56ded3fd15f9a7b0e614b216430602bb4cef18f3d7cff"
        },
        {
          "alg" : "SHA-384",
          "content" : "7aa8b45456fb9812f0fcc56167883668a3fc18f31ae7687e12912238eee319e9fdc8c738969d7c3a6835d9f0bfb1197b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.datasketches/datasketches-memory@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://datasketches.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/datasketches-memory/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/datasketches-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/datasketches-memory"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.datasketches/datasketches-memory@2.1.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-tags_2.12",
      "version" : "3.5.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "84ab9c637599e18dd649a4cff2d9fdf6"
        },
        {
          "alg" : "SHA-1",
          "content" : "32da298699f083438054f23486dc3a3f21d76610"
        },
        {
          "alg" : "SHA-256",
          "content" : "74af2159c9b3456fc9bb607c75a5308e2fbcf1a469ca71223bcaccc3aa4d59d0"
        },
        {
          "alg" : "SHA-512",
          "content" : "b0281562deb3e4f5a5b50964c596f9877ad8a50dc3d1aa0cf8394a6eeb78466968abec717c696d543cfcf1819a3e7745c49986d0979c4bc4687496b8a24304f8"
        },
        {
          "alg" : "SHA-384",
          "content" : "c1ff54038efffa50258c18fd3fcaa4d0d5bff62c179571d0c9afcb21502ad7a2cdb30c632bad46a57e4bea283b00516d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-tags_2.12@3.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spark.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@spark.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/spark.git/common/spark-tags_2.12"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-tags_2.12@3.5.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-core",
      "version" : "1.9.1",
      "description" : "The core reader and writer for ORC files. Uses the vectorized column batch for the in memory representation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3b73042e743a46acb253bc9fe6bf1eb4"
        },
        {
          "alg" : "SHA-1",
          "content" : "67ba092497265fb74a2884831253f434547da1bf"
        },
        {
          "alg" : "SHA-256",
          "content" : "bb122a8bd16ac520b85fdcc637ad30c460b864602e5eaa0a29b257eb9f056300"
        },
        {
          "alg" : "SHA-512",
          "content" : "744c14221b737009ac6ad7831cbf9d4371d3665c79f3b0014b588f1f06c0dd004976fb1d3ff91f1fd3c90c8bdb8805da9a3c01ae149f1ce356f454adc0841911"
        },
        {
          "alg" : "SHA-384",
          "content" : "fede69e09be8e6c4b913b7d875facff781efdd45a5f5c67539e976d10955e8ae3cf91208cba0671e081ed357dcc17114"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-core@1.9.1?classifier=shaded-protobuf&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://orc.apache.org/orc-core"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-27/orc/orc-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-core@1.9.1?classifier=shaded-protobuf&type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-shims",
      "version" : "1.9.1",
      "description" : "A shim layer for supporting various versions of Hadoop dynamically. This module uses a higher version of Hadoop so that we can create shims that let us use new features of Hadoop without having a hard dependency on the latest version.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d700a2fec92e14a44ad8371f30dc60b"
        },
        {
          "alg" : "SHA-1",
          "content" : "b0345540c6db1f7b34db5edb25bac5c66068aa73"
        },
        {
          "alg" : "SHA-256",
          "content" : "efed249e19efed8c67c270e3ab1bc821e7ffc7c18d777bd31264b262673cc6b0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f3fc459e05d7f41eeec8b2d5055f3fdcdeda8249dd44fc0137386f7c8228ac2d104a178e3b9c859f0d5fc1fb2fd7d7b0ca827e616190731237ff8cf8eb818c93"
        },
        {
          "alg" : "SHA-384",
          "content" : "5b53c6f56e07af2191d62b8ff6ab8fa7d992e8067c8c1f108a89076c7e099b77131a73bbc4f110206a42bef2e1f130dd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-shims@1.9.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://orc.apache.org/orc-shims"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-27/orc/orc-shims"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-shims@1.9.1?type=jar"
    },
    {
      "group" : "io.airlift",
      "name" : "aircompressor",
      "version" : "0.25",
      "description" : "Compression algorithms",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6a953d6f1861aebbab2261cfb5d068fa"
        },
        {
          "alg" : "SHA-1",
          "content" : "f9335fb25f31289ffbe512aa0732c872abdfd64d"
        },
        {
          "alg" : "SHA-256",
          "content" : "610938768aee8e4279af55f35bba5276d34cac447d4614897e26deb907e3115d"
        },
        {
          "alg" : "SHA-512",
          "content" : "78c04ed1b5efd0fd9125a28268de55e518b197b466623a3d8cab1582ffc098b2e71d7b12d5f3179184fcaa52d389e8d62372e2881ef7700f31eeba69dc48f8ce"
        },
        {
          "alg" : "SHA-384",
          "content" : "c73d4fb907b864db515f75f9754a04a5b78bd12ddd03951417167381dc5bc4f46234e3d5bfb2f6199bbec701a9b974e5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.airlift/aircompressor@0.25?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/airlift/aircompressor"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/airlift/aircompressor/tree/master"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.airlift/aircompressor@0.25?type=jar"
    },
    {
      "group" : "org.jetbrains",
      "name" : "annotations",
      "version" : "17.0.0",
      "description" : "A set of annotations used for code inspection support and code documentation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b06437ed47fa7b4a8ec8909f4fb9022"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ceead41f4e71821919dbdb7a9847608f1a938cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "195fb0da046d55bb042e91543484cf1da68b02bb7afbfe031f229e45ac84b3f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "839ec18d4a6f930ecd39827ebd4013c13a7176003543b8f60056770179032648faf1651e9e73109e811881b68a39757ca7e39731a61ff4a3461637b196fe4f7b"
        },
        {
          "alg" : "SHA-384",
          "content" : "c9d045a68ef2b0d5b12aa00b636e43af22de4c02f4dfcc6b5b7b04fdd57c98c7246decd2e5dc3eb9f1b10d929ac33a11"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/JetBrains/java-annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/JetBrains/java-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.7",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "403dffa46cdd2e3c82da19df4f394a4c"
        },
        {
          "alg" : "SHA-1",
          "content" : "41eb7184ea9d556f23e18b5cb99cad1f8581fc00"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4"
        },
        {
          "alg" : "SHA-512",
          "content" : "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8"
        },
        {
          "alg" : "SHA-384",
          "content" : "c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
    },
    {
      "publisher" : "ThreeTen.org",
      "group" : "org.threeten",
      "name" : "threeten-extra",
      "version" : "1.7.1",
      "description" : "Additional functionality that enhances JSR-310 dates and times in Java SE 8 and later",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5994a4f9bc61fe4bfae13fab1253ac47"
        },
        {
          "alg" : "SHA-1",
          "content" : "caddbd1f234f87b0d65e421b5d5032b6a473f67b"
        },
        {
          "alg" : "SHA-256",
          "content" : "9bbcbe09a631320bdc3325bbb04c93068473bc0e04b85e2ef3e42314d5a7dacf"
        },
        {
          "alg" : "SHA-512",
          "content" : "1ae1558df2e6e33a0a463e0204dc084bc2bcff6b27ebc983743533bee65f3e42915737a7e2f2096047b2ae5cb8363413964aab0f4eaed0b5f0d5865de56e9336"
        },
        {
          "alg" : "SHA-384",
          "content" : "df9dd8ee46fdd640c3abe5d5168570d29028bc94e931b505f3d36fac01da60ac90f2ed706f37b7eaa3aa8a23538488ff"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.threeten.org/threeten-extra"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/content/repositories/threeten-releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ThreeTen/threeten-extra/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ThreeTen/threeten-extra"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-mapreduce",
      "version" : "1.9.1",
      "description" : "An implementation of Hadoop's mapred and mapreduce input and output formats for ORC files. They use the core reader and writer, but present the data to the user in Writable objects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "edd6b7050298403b11aaaae8669e10cc"
        },
        {
          "alg" : "SHA-1",
          "content" : "1d5732ef544f2c1101475052501ffe391ccbac06"
        },
        {
          "alg" : "SHA-256",
          "content" : "c16ba691ec164f6349830fa3e806163b7749e542611c080990da900d43a91527"
        },
        {
          "alg" : "SHA-512",
          "content" : "92c72ff0919f91086defcf1984509a5e528cd697227cd0835afe158d008b48e7446f0fcc6cd2b201736056086be74b386028b32ef9bf136c94397ebaaa7aec08"
        },
        {
          "alg" : "SHA-384",
          "content" : "2e00cb6c331883e42309e31612ac1bd07dbb4a7482b4e791e01094ce510221b7fa20c1d175422f571ceac358a7180508"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-mapreduce@1.9.1?classifier=shaded-protobuf&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://orc.apache.org/orc-mapreduce"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-27/orc/orc-mapreduce"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-mapreduce@1.9.1?classifier=shaded-protobuf&type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive",
      "name" : "hive-storage-api",
      "version" : "2.8.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bea1adb65022d4616d23be770207600d"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b151bcdfe290542f27a442ed09be99f815f88e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "2bb77d246a9724a371301049239c6e53039efe4136b0ed34ee5a9c7b3cd861d8"
        },
        {
          "alg" : "SHA-512",
          "content" : "e76d1f1dcae0fcf26c56bf2006776a39b46572e9a67fcfab26774506a30de0a92447dcc545894c1796bbe092df53a51216c56721bfbc05c8a9b5fe9636ff07e7"
        },
        {
          "alg" : "SHA-384",
          "content" : "93eb2ba57fc637800ba539994682cf764436617f1b1584aa71f288797dad73e6b5dd95bc1dfb19be802a60e31b139866"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/hive-storage-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-23/hive-storage-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-column",
      "version" : "1.13.1",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d75526e32d2630e5bad8d9fce847d838"
        },
        {
          "alg" : "SHA-1",
          "content" : "9ed76ae5d9fdfc6c2eb51aef87ad34c5cdc56384"
        },
        {
          "alg" : "SHA-256",
          "content" : "3ff4222b5da77cc85e3fee623ff9779f991a1a0987125e68bc642ff913ec5612"
        },
        {
          "alg" : "SHA-512",
          "content" : "4de18d73bdbf77f9327b7f61fd9e333d7d2700a552432401a1253ccb34c77f82d82ff514c9f1fefd8c21b407fdf21e68e8b2e9142c5fdffe0ef035485c716976"
        },
        {
          "alg" : "SHA-384",
          "content" : "76167345e924a70f01910bd3647388bd2e8c2d04e4ece65c1abf5968476a6870769c238e10e2cbfddb3962e30d4eff0d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-column@1.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://parquet.apache.org"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@parquet.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/parquet-mr.git/parquet-column"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-column@1.13.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-common",
      "version" : "1.13.1",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6a52cc2d093a61027d8df49b6ae39a6a"
        },
        {
          "alg" : "SHA-1",
          "content" : "77e65a1a4522f476994aa90c06fcca842c4ab73f"
        },
        {
          "alg" : "SHA-256",
          "content" : "4a2d7a8eb395bbc8d202fa74b272e45374a1034b351028824ad46925366297ea"
        },
        {
          "alg" : "SHA-512",
          "content" : "236b9a8876c51f39aec3c7299642c4813b24f9a709b2b6306a058893ec1e97026dbd4009d9ea64a1984eaff0a6977648ff4e72363d1e9a25b635796aa5a472b4"
        },
        {
          "alg" : "SHA-384",
          "content" : "5afd34d71bbe49d7c875e02e2dfe234b4ca18e035f5e4348cc39d103a43fc303c72f3c7ac7b22ed8340c30f19cab33a9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://parquet.apache.org"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@parquet.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/parquet-mr.git/parquet-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-encoding",
      "version" : "1.13.1",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2ca33d628896a57c83fd338ba4b3712c"
        },
        {
          "alg" : "SHA-1",
          "content" : "2554cef74a90736ad42ed994116123038c0ffee9"
        },
        {
          "alg" : "SHA-256",
          "content" : "0c921d275bbcc31552ee94d383ea38b2615110790d59f11ad07ffe5f3f0c23b3"
        },
        {
          "alg" : "SHA-512",
          "content" : "7d08f31b531bdb58d1593e15807f82387a99540c09e90d1cb4fee5b5d3d7b1ad04a599533717c27b83dccf0635983448ea2ae88385424976a46c2dca2dbe5ee9"
        },
        {
          "alg" : "SHA-384",
          "content" : "7ac660630e30e2cda430223450010d2be60dfdfb094712c241db1a73780c62ee66a6e53890ec3065ab762e5f8c13619b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-encoding@1.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://parquet.apache.org"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@parquet.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/parquet-mr.git/parquet-encoding"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-encoding@1.13.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.yetus",
      "name" : "audience-annotations",
      "version" : "0.13.0",
      "description" : "Annotations for defining API boundaries and tools for managing javadocs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e7b6aa8d8967f6f34a711d763d1b4816"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad1147dcd02196e3924013679c6bf4c25d8c351"
        },
        {
          "alg" : "SHA-256",
          "content" : "3bfbb397b06f63a2a0a361f62ed32cf199bd92ddd48ea99281f4987edec9777b"
        },
        {
          "alg" : "SHA-512",
          "content" : "9fdd60a366629a7ef7f934eea7d27d38e1614472e9090fd23c66032589fbfb9d90516c9cb13a44e4a3598e50d62daf851bb87e4dc8375b1da2cfe6392c448bd8"
        },
        {
          "alg" : "SHA-384",
          "content" : "bdd7d0a05faa80c56ab33e8f0c9b70a366f3bcc9cb36fcf88d4f6761feee36b46787baf42b1f62606935eb595279de7e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://yetus.apache.org/audience-annotations"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/YETUS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/yetus-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/yetus.git/audience-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-format-structures",
      "version" : "1.13.1",
      "description" : "Parquet-mr related java classes to use the parquet-format thrift structures.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b41fcfc59d68450b5153472d5a92345c"
        },
        {
          "alg" : "SHA-1",
          "content" : "550ac211af104eabeedfaabe68f6769010a80366"
        },
        {
          "alg" : "SHA-256",
          "content" : "57b3e31e9502a1121dc481a3017fc2f20d1d6116da82dd58155a69b10b28e1e6"
        },
        {
          "alg" : "SHA-512",
          "content" : "ce1fd360edf3cb86d0d0c3d8b00d7c840b5a997cd5d44213dd7c6cbaa15c9eea1f5ef61474a1879d1b245c8feafea0b1f22c554f63e742feb1c5e9e9d1c237d3"
        },
        {
          "alg" : "SHA-384",
          "content" : "1c73a54de30153c0813b402e5f4bed5caab94c2c1bc2f473e3b78f441636607fb11ed115ae7a8adf6ada6f9ce4bfe37e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://parquet.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@parquet.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/parquet-mr.git/parquet-format-structures"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-hadoop",
      "version" : "1.13.1",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "77cea2800fb038443a062ed25c0742cd"
        },
        {
          "alg" : "SHA-1",
          "content" : "6b9a84875b7576d64cf4890c69c2ed1c7557b950"
        },
        {
          "alg" : "SHA-256",
          "content" : "5b86f191d0bbfe866d194bd1a336fa79d049d342fb7a05aefcf31ea266792a40"
        },
        {
          "alg" : "SHA-512",
          "content" : "cacff5ff1e0b99c140a21181d26b3233c6118fc10a660f559919cb405631681d37073ad32dcd3b7399667a7d3364ad9fa7ce0f760feda5a6ffcc817c933f8ec6"
        },
        {
          "alg" : "SHA-384",
          "content" : "ebbd7008507e7f56a552a71df31b60c84c9be6bb7d99e86dd4070ea94708fbce10ee14348d79c0c518223c832faab450"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-hadoop@1.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://parquet.apache.org"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@parquet.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/parquet-mr.git/parquet-hadoop"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-hadoop@1.13.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-jackson",
      "version" : "1.13.1",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "83b70b16ef2ebd3e35d32af63a9d99c9"
        },
        {
          "alg" : "SHA-1",
          "content" : "c096efa2bb68d24d29139e93f9b5a5357f10f253"
        },
        {
          "alg" : "SHA-256",
          "content" : "d1e66f2a392d1777425688d3439b7f57d08c4404a81ae95bb247a16cfc773da1"
        },
        {
          "alg" : "SHA-512",
          "content" : "8c2b515d781e3cd2fc1d33671e2cae45d69e7d76e7e82b89a2c90022eb8852a135d920b198101328728f860008c8040d2628fda007d0ccfab0b761bfe8092afc"
        },
        {
          "alg" : "SHA-384",
          "content" : "2271d1678c68e85d847aee63392d15f165658f031c8c276cc44cae5bb19c8b0b2b2cfa36d2405575d4c0d5e4968009b6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-jackson@1.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://parquet.apache.org"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "mailing-list",
          "url" : "dev-subscribe@parquet.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:apache/parquet-mr.git/parquet-jackson"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-jackson@1.13.1?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-servlet",
      "version" : "9.4.52.v20230823",
      "description" : "Jetty Servlet Container",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ceb9190308fc833f96afe6efa17039f3"
        },
        {
          "alg" : "SHA-1",
          "content" : "0dd2f8e15e5272824eca0be176b35f68aa0f540e"
        },
        {
          "alg" : "SHA-256",
          "content" : "6b2619a3d067e76592e17c59b4e47bc1543fd5b9494554650e37a379ff6172ee"
        },
        {
          "alg" : "SHA-512",
          "content" : "22010053f5d970b236466f49584f954d56ff0ffc3659e22417421b9c3198dfd1a2ebed806659efcdeffd9ef3183b46b7d367838a03d8609e72b5ff4a8a3c90eb"
        },
        {
          "alg" : "SHA-384",
          "content" : "d3eaf7b73b7bd741669330c944b37b4d484e4d692b3a911105c98a64d9d6184a87b3dadfb1e89a5c0fb52ffbc0becd07"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.52.v20230823?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.org/jetty/jetty-servlet"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project/jetty-servlet"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.52.v20230823?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-util-ajax",
      "version" : "9.4.52.v20230823",
      "description" : "JSON/Ajax Utility classes for Jetty",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "32aa94b98e1bca0de8e94db1e2b46a03"
        },
        {
          "alg" : "SHA-1",
          "content" : "03b5b2977bb885a64cc307c89e09f7f12844b933"
        },
        {
          "alg" : "SHA-256",
          "content" : "82e70c872b708461d5083d3ad172877ab83e6b3f7b911189d6df49a60d6271b5"
        },
        {
          "alg" : "SHA-512",
          "content" : "27614f86ecc285e764079238c5bdb4aa5f67b4cf3da3b11ef1769731d0baae329cd74b1e9c253ac65b3b4f5ea7b21c7b731420eedbcc6053ae8cd5438baa366e"
        },
        {
          "alg" : "SHA-384",
          "content" : "107850c43753cab39f67e4d2b37a89dbcbd01da3a79dfc1b663d43820368e4d4aa411d590c60c9d276c782efe59ecff4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.52.v20230823?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.org/jetty/jetty-util-ajax"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project/jetty-util-ajax"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.52.v20230823?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.15.2",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "20ac0d0526a456274409fa852eb74087"
        },
        {
          "alg" : "SHA-1",
          "content" : "9353b021f10c307c00328f52090de2bdb4b6ff9c"
        },
        {
          "alg" : "SHA-256",
          "content" : "0eb2fdad6e40ab8832a78c9b22f58196dd970594e8d3d5a26ead87847c4f3a96"
        },
        {
          "alg" : "SHA-512",
          "content" : "edf622f3d2bb2cdf308875e467f28eafdd581c6ad47992a2b49a2c803b597c7fe4330c8f887687599c8a6a529d8b11054f8b354b7ddddd2bf904ef347d4f1cd2"
        },
        {
          "alg" : "SHA-384",
          "content" : "cced300ea06748cc30cdabf1a0a8e45749d3d2a52740975acd858bd13b83458d535a52fc4cc0eb8991ebd3638b9688ec"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.15.2",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "71dabcaac955a8bd17b5bba6580aac5b"
        },
        {
          "alg" : "SHA-1",
          "content" : "4724a65ac8e8d156a24898d50fd5dbd3642870b8"
        },
        {
          "alg" : "SHA-256",
          "content" : "04e21f94dcfee4b078fa5a5f53047b785aaba69d19de392f616e7a7fe5d3882f"
        },
        {
          "alg" : "SHA-512",
          "content" : "c9ffb4cf3e409921bca1fa6126ca8746c611042ac3fcf0e4f991d23d12b20ef0946ef1421d991ae8ed86012059df4e08fb776d96db6d13147c2ec85e22254537"
        },
        {
          "alg" : "SHA-384",
          "content" : "78885119a700d5dd717fc83e58bf063e1fd07bc823846b6797af6a04a99e92e8fbcf28c3a1316079e6695c138c110deb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.15.2",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e51fdee85b48e6637ad9e85ee76b58df"
        },
        {
          "alg" : "SHA-1",
          "content" : "a6fe1836469a69b3ff66037c324d75fc66ef137c"
        },
        {
          "alg" : "SHA-256",
          "content" : "303c99e82b1faa91a0bae5d8fbeb56f7e2adf9b526a900dd723bf140d62bd4b4"
        },
        {
          "alg" : "SHA-512",
          "content" : "a8a3ddf5c8a732fc3810f9c113d88fd59bf613d15dbf9d3e24dd196b2b8c2195f4088375e3d03906f2629e62983fef3267b5478abd5ab1df733ec58cd00efae6"
        },
        {
          "alg" : "SHA-384",
          "content" : "22f4b71de5860b9c54dd85091d5b1312f7f5097a376f68f5a35b32a342858bf2e24ed394d76be0648545a6137d78b82e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.xbean",
      "name" : "xbean-asm9-shaded",
      "version" : "4.23",
      "description" : "Repackaged and shaded asm jars",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "64f4c38a040bd32ccb65c58782ad52dd"
        },
        {
          "alg" : "SHA-1",
          "content" : "14e59bc47394bef27a6437074dc9178740832313"
        },
        {
          "alg" : "SHA-256",
          "content" : "0a9f790cd4759b7fb83fb6872504c73d669f72e731d9681f3e2da7ed3232c467"
        },
        {
          "alg" : "SHA-512",
          "content" : "d7cd996a56440872a335ca8dd24cdcb579a5bbb69d756dcb2c765f307223d813d498c964ed8cab28b57ab134472e99d88c2c8e646ec2d2e170b211ca2efd0c65"
        },
        {
          "alg" : "SHA-384",
          "content" : "f2f51a8562eaa9cdb5af87a91256cbf10931d9354c20c97b67da8b6769c8713465c4530e47be483feba83c6837622ae6"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.23?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://geronimo.apache.org/maven/xbean/4.23/xbean-asm9-shaded"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/XBEAN"
        },
        {
          "type" : "mailing-list",
          "url" : "mailto:xbean-dev-subscribe@geronimo.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/geronimo-xbean.git/xbean-asm9-shaded"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.23?type=jar"
    },
    {
      "group" : "com.google.protobuf",
      "name" : "protobuf-java",
      "version" : "3.23.4",
      "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2ba07863c839f3584938a1ef7e594e33"
        },
        {
          "alg" : "SHA-1",
          "content" : "5cc1be17aed4e1e396c6b5359518f369a42ebc37"
        },
        {
          "alg" : "SHA-256",
          "content" : "2fc98a20224d88c8c3dd9a403a8c3930ce0e275aa847ad3734fcbb2db012498b"
        },
        {
          "alg" : "SHA-512",
          "content" : "a921afbe1f1f734ba579c0ad347e8c4cd1644a94af7740f2f36e541a4255e265d16bca93dd4edecb13a9ba9fe2dadbc413dd305ada99d6963f60d1afe47ec94d"
        },
        {
          "alg" : "SHA-384",
          "content" : "e94308ecc73db6b6b11519ea368d5246651b3aeda0053295f326b7a23b163354f41ab4d3b549b949a493132d27b8be48"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java@3.23.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://developers.google.com/protocol-buffers/protobuf-java/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.23.4?type=jar"
    },
    {
      "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita",
      "group" : "org.objenesis",
      "name" : "objenesis",
      "version" : "3.3",
      "description" : "A library for instantiating Java objects",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ab0e0b2ab81affdd7f38bcc60fd85571"
        },
        {
          "alg" : "SHA-1",
          "content" : "1049c09f1de4331e8193e579448d0916d75b7631"
        },
        {
          "alg" : "SHA-256",
          "content" : "02dfd0b0439a5591e35b708ed2f5474eb0948f53abf74637e959b8e4ef69bfeb"
        },
        {
          "alg" : "SHA-512",
          "content" : "1fa990d15bd179f07ffbc460d580a6fd0562e45dee8bd4a9405917536b78f45c0d6f644b67f85d781c758aa56eff90aef23eedcc9bd7f5ff887a67b716083e61"
        },
        {
          "alg" : "SHA-384",
          "content" : "2f6878f91a12db32c244afcee619d57c3ad6ff0297f4e41c2247e737c1ccc5fcc1ce03256b479b0f9b87900410bc4502"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.objenesis/objenesis@3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://objenesis.org/objenesis"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/easymock/objenesis/objenesis"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.objenesis/objenesis@3.3?type=jar"
    },
    {
      "group" : "org.spark-project.spark",
      "name" : "unused",
      "version" : "1.0.0",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "763373ce9fe48581d4f2b8ffca35bb82"
        },
        {
          "alg" : "SHA-1",
          "content" : "205fe37a2fade6ce6dfcf8eff57ed21a4a1c22af"
        },
        {
          "alg" : "SHA-256",
          "content" : "00fd27fc9bde701581e7dcf5b95981d9e749a1c176bb8bfcd49f675768ff6bf0"
        },
        {
          "alg" : "SHA-512",
          "content" : "08a6ac8d2dc9d89ff557c7e96096c76e687efe3ce166aa6dbb76865bbef64dc8b6ecb5561ef03c2451a688ccdb3876b8f16b9137d02c290a698e917a5656b6fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8c51d0d851835107db273d7ce522f026587d922c9d1d34739c3dedf9b7737c1c491e961dc7931f46c476d28acbc91f6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://nexus.sonatype.org/oss-repository-hosting.html/unused"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.spark/spark-sql_2.12@3.5.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.rocksdb/rocksdbjni@8.3.2?type=jar",
        "pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar",
        "pkg:maven/org.apache.spark/spark-sketch_2.12@3.5.0?type=jar",
        "pkg:maven/org.apache.spark/spark-core_2.12@3.5.0?type=jar",
        "pkg:maven/org.apache.spark/spark-catalyst_2.12@3.5.0?type=jar",
        "pkg:maven/org.apache.spark/spark-tags_2.12@3.5.0?type=jar",
        "pkg:maven/org.apache.orc/orc-core@1.9.1?classifier=shaded-protobuf&type=jar",
        "pkg:maven/org.apache.orc/orc-mapreduce@1.9.1?classifier=shaded-protobuf&type=jar",
        "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
        "pkg:maven/org.apache.parquet/parquet-column@1.13.1?type=jar",
        "pkg:maven/org.apache.parquet/parquet-hadoop@1.13.1?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.52.v20230823?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.23?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@3.23.4?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.rocksdb/rocksdbjni@8.3.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-sketch_2.12@3.5.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.spark/spark-tags_2.12@3.5.0?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-tags_2.12@3.5.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-core_2.12@3.5.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.avro/avro@1.11.2?type=jar",
        "pkg:maven/org.apache.avro/avro-mapred@1.11.2?type=jar",
        "pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar",
        "pkg:maven/com.twitter/chill-java@0.10.0?type=jar",
        "pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.23?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar",
        "pkg:maven/org.apache.spark/spark-launcher_2.12@3.5.0?type=jar",
        "pkg:maven/org.apache.spark/spark-kvstore_2.12@3.5.0?type=jar",
        "pkg:maven/org.apache.spark/spark-network-common_2.12@3.5.0?type=jar",
        "pkg:maven/org.apache.spark/spark-network-shuffle_2.12@3.5.0?type=jar",
        "pkg:maven/org.apache.spark/spark-unsafe_2.12@3.5.0?type=jar",
        "pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.0?type=jar",
        "pkg:maven/javax.activation/activation@1.1.1?type=jar",
        "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-plus@9.4.52.v20230823?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-security@9.4.52.v20230823?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@9.4.52.v20230823?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@9.4.52.v20230823?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-http@9.4.52.v20230823?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.52.v20230823?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.52.v20230823?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.52.v20230823?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-client@9.4.52.v20230823?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.52.v20230823?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.3?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.13.0?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
        "pkg:maven/com.ning/compress-lzf@1.1.2?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.3?type=jar",
        "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
        "pkg:maven/com.github.luben/zstd-jni@1.5.5-4?type=jar",
        "pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.45?type=jar",
        "pkg:maven/org.scala-lang.modules/scala-xml_2.12@2.1.0?type=jar",
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar",
        "pkg:maven/org.scala-lang/scala-reflect@2.12.18?type=jar",
        "pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@2.40?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.40?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@2.40?type=jar",
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.40?type=jar",
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.40?type=jar",
        "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.40?type=jar",
        "pkg:maven/io.netty/netty-all@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-x86_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-aarch_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-aarch_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-x86_64&type=jar",
        "pkg:maven/com.clearspring.analytics/stream@2.9.6?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.19?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-json@4.2.19?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.19?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.19?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.15.2?type=jar",
        "pkg:maven/org.apache.ivy/ivy@2.5.1?type=jar",
        "pkg:maven/oro/oro@2.0.8?type=jar",
        "pkg:maven/net.razorvine/pickle@1.3?type=jar",
        "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar",
        "pkg:maven/org.apache.spark/spark-tags_2.12@3.5.0?type=jar",
        "pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@3.23.4?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.avro/avro@1.11.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.avro/avro-mapred@1.11.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.avro/avro-ipc@1.11.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.avro/avro-ipc@1.11.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.avro/avro@1.11.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.3?type=jar",
        "pkg:maven/org.tukaani/xz@1.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar",
        "pkg:maven/com.twitter/chill-java@0.10.0?type=jar",
        "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.twitter/chill-java@0.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar",
        "pkg:maven/org.objenesis/objenesis@3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.objenesis/objenesis@3.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.23?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-launcher_2.12@3.5.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.spark/spark-tags_2.12@3.5.0?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-kvstore_2.12@3.5.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.spark/spark-tags_2.12@3.5.0?type=jar",
        "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
        "pkg:maven/org.rocksdb/rocksdbjni@8.3.2?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-network-common_2.12@3.5.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar",
        "pkg:maven/io.netty/netty-all@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-x86_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-aarch_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-aarch_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-x86_64&type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar",
        "pkg:maven/org.rocksdb/rocksdbjni@8.3.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
        "pkg:maven/com.google.guava/guava@14.0.1?type=jar",
        "pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar",
        "pkg:maven/com.google.crypto.tink/tink@1.9.0?type=jar",
        "pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.45?type=jar",
        "pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.0?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-all@4.1.96.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-buffer@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-codec@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-http@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-http2@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-socks@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-common@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-handler@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-handler-proxy@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-resolver@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-x86_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-aarch_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-x86_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-aarch_64&type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-buffer@4.1.96.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec@4.1.96.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-http@4.1.96.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-http2@4.1.96.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-socks@4.1.96.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-common@4.1.96.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-handler@4.1.96.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.96.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-handler-proxy@4.1.96.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-resolver@4.1.96.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport@4.1.96.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.96.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.96.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-x86_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.96.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-aarch_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.96.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-x86_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.96.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-aarch_64&type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.96.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.96.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@14.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.crypto.tink/tink@1.9.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@3.23.4?type=jar",
        "pkg:maven/joda-time/joda-time@2.12.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.23.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/joda-time/joda-time@2.12.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.45?type=jar",
      "dependsOn" : [
        "pkg:maven/org.roaringbitmap/shims@0.9.45?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.roaringbitmap/shims@0.9.45?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.spark/spark-tags_2.12@3.5.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.15.2?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@2.0.7?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.20.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.20.0?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.15.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.20.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.20.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-network-shuffle_2.12@3.5.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.spark/spark-network-common_2.12@3.5.0?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar",
        "pkg:maven/org.apache.spark/spark-tags_2.12@3.5.0?type=jar",
        "pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.45?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-unsafe_2.12@3.5.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.spark/spark-tags_2.12@3.5.0?type=jar",
        "pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.0?type=jar",
        "pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.activation/activation@1.1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar",
        "pkg:maven/com.google.guava/guava@14.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.6.3?type=jar",
        "pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-plus@9.4.52.v20230823?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.52.v20230823?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-jndi@9.4.52.v20230823?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.52.v20230823?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-xml@9.4.52.v20230823?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.52.v20230823?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-xml@9.4.52.v20230823?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-util@9.4.52.v20230823?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-util@9.4.52.v20230823?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.52.v20230823?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-security@9.4.52.v20230823?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.52.v20230823?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-security@9.4.52.v20230823?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-server@9.4.52.v20230823?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-server@9.4.52.v20230823?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-http@9.4.52.v20230823?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@9.4.52.v20230823?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-http@9.4.52.v20230823?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-util@9.4.52.v20230823?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@9.4.52.v20230823?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-io@9.4.52.v20230823?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-util@9.4.52.v20230823?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.52.v20230823?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-util@9.4.52.v20230823?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-jndi@9.4.52.v20230823?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-util@9.4.52.v20230823?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.52.v20230823?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.52.v20230823?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-util@9.4.52.v20230823?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-client@9.4.52.v20230823?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-client@9.4.52.v20230823?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-http@9.4.52.v20230823?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@9.4.52.v20230823?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.52.v20230823?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.52.v20230823?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-http@9.4.52.v20230823?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@9.4.52.v20230823?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@9.4.52.v20230823?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.13.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.ning/compress-lzf@1.1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.5-4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang.modules/scala-xml_2.12@2.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang/scala-reflect@2.12.18?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar",
        "pkg:maven/org.json4s/json4s-core_2.12@3.7.0-M11?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.json4s/json4s-core_2.12@3.7.0-M11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar",
        "pkg:maven/org.json4s/json4s-ast_2.12@3.7.0-M11?type=jar",
        "pkg:maven/org.json4s/json4s-scalap_2.12@3.7.0-M11?type=jar",
        "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.json4s/json4s-ast_2.12@3.7.0-M11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.json4s/json4s-scalap_2.12@3.7.0-M11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.core/jersey-client@2.40?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.40?type=jar",
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.core/jersey-common@2.40?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.core/jersey-server@2.40?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.40?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@2.40?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.40?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.40?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.40?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@2.40?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.40?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.40?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@2.40?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.40?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.40?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar",
        "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.clearspring.analytics/stream@2.9.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.19?type=jar",
      "dependsOn" : [
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-json@4.2.19?type=jar",
      "dependsOn" : [
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.19?type=jar",
      "dependsOn" : [
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.19?type=jar",
      "dependsOn" : [
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.ivy/ivy@2.5.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/oro/oro@2.0.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.razorvine/pickle@1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-catalyst_2.12@3.5.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.spark/spark-core_2.12@3.5.0?type=jar",
        "pkg:maven/org.apache.spark/spark-sql-api_2.12@3.5.0?type=jar",
        "pkg:maven/org.apache.spark/spark-tags_2.12@3.5.0?type=jar",
        "pkg:maven/org.apache.spark/spark-unsafe_2.12@3.5.0?type=jar",
        "pkg:maven/org.apache.spark/spark-sketch_2.12@3.5.0?type=jar",
        "pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar",
        "pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar",
        "pkg:maven/org.apache.datasketches/datasketches-java@3.3.0?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-sql-api_2.12@3.5.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-reflect@2.12.18?type=jar",
        "pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.12@2.3.0?type=jar",
        "pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.0?type=jar",
        "pkg:maven/org.apache.spark/spark-unsafe_2.12@3.5.0?type=jar",
        "pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
        "pkg:maven/org.apache.arrow/arrow-vector@12.0.1?type=jar",
        "pkg:maven/org.apache.arrow/arrow-memory-netty@12.0.1?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.12@2.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-vector@12.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.arrow/arrow-format@12.0.1?type=jar",
        "pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-format@12.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-memory-netty@12.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.datasketches/datasketches-java@3.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.datasketches/datasketches-memory@2.1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.datasketches/datasketches-memory@2.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.orc/orc-core@1.9.1?classifier=shaded-protobuf&type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.orc/orc-shims@1.9.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/io.airlift/aircompressor@0.25?type=jar",
        "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
        "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.orc/orc-shims@1.9.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.airlift/aircompressor@0.25?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.orc/orc-mapreduce@1.9.1?classifier=shaded-protobuf&type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-column@1.13.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar",
        "pkg:maven/org.apache.parquet/parquet-encoding@1.13.1?type=jar",
        "pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-encoding@1.13.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-hadoop@1.13.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.parquet/parquet-column@1.13.1?type=jar",
        "pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar",
        "pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar",
        "pkg:maven/org.apache.parquet/parquet-jackson@1.13.1?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.3?type=jar",
        "pkg:maven/io.airlift/aircompressor@0.25?type=jar",
        "pkg:maven/com.github.luben/zstd-jni@1.5.5-4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
        "pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-jackson@1.13.1?type=jar",
      "dependsOn" : [ ]
    }
  ]
}