<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:283117a8-9d54-485c-9812-c84cf6b4e202" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2025-05-23T08:40:59Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.9</version>
        <hashes>
          <hash alg="MD5">8e595cdb67f17e4b41e046456970591d</hash>
          <hash alg="SHA-1">69e8ca804520d09ce4657e7235bae84d01cbffa6</hash>
          <hash alg="SHA-256">aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8</hash>
          <hash alg="SHA-512">1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b</hash>
          <hash alg="SHA-384">b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-sql_2.12@3.5.6?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-sql_2.12</name>
      <version>3.5.6</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-sql_2.12@3.5.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/sql/spark-sql_2.12</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.rocksdb/rocksdbjni@8.3.2?type=jar">
      <publisher>Facebook</publisher>
      <group>org.rocksdb</group>
      <name>rocksdbjni</name>
      <version>8.3.2</version>
      <description>RocksDB fat jar that contains .so files for linux32 and linux64 (glibc and musl-libc), jnilib files
        for Mac OSX, and a .dll for Windows x64.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b436b922b1721bbfdc83ccd4ad004622</hash>
        <hash alg="SHA-1">58691480ac749ec2b12b1f3ea9941ac9f7d5a361</hash>
        <hash alg="SHA-256">289cafede18172b2a477833485360f938fb82f5fc2c4aaaf2801a8b62f8e153b</hash>
        <hash alg="SHA-512">37abeb585d3e091b006ff322383d8f1defbf1eeecb4013f709aa18b8f43e27f87bdaf6545f005f6dd6638b02a2e5472be520fc7d046697691f96797a899c5faa</hash>
        <hash alg="SHA-384">d6cac15a6675e9d6c1dcc67bed23454e3529fa42ed052ba37cfa6bc35c04ad512a587a5b93b6ef1f795b989b6955fc54</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
        <license>
          <name>GNU General Public License, version 2</name>
          <url>http://www.gnu.org/licenses/gpl-2.0.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.rocksdb/rocksdbjni@8.3.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://rocksdb.org</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/rocksdb</url></reference><reference type="vcs"><url>scm:git:https://github.com/facebook/rocksdb.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar">
      <publisher>Univocity Software Pty Ltd</publisher>
      <group>com.univocity</group>
      <name>univocity-parsers</name>
      <version>2.9.1</version>
      <description>univocity's open source parsers for processing different text formats using a consistent API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7032ba85007afd0bfc702a72bf486fd0</hash>
        <hash alg="SHA-1">081827d186e42129f23c3f1e002b757ad4b4e769</hash>
        <hash alg="SHA-256">31685122d5e392e98672ed6009a95a4c1623ca1185567bd44ee94527d454e5c3</hash>
        <hash alg="SHA-512">95656c856840b203507e42c33ef15bbf1995ad364ff229dba4f6358713259cbcad96a4aeb11db57d3f5ace2500bcfd702dd9457bea45186aa5ae7ed1bfd60559</hash>
        <hash alg="SHA-384">c29f921251bafd86bcc18b5cedf28fa53a3cbbc0fb8631c72c61038b02ce53c2141900faa54586edbbaa519cc5a815ab</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/univocity/univocity-parsers</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/univocity/univocity-parsers/issues</url></reference><reference type="vcs"><url>https://github.com/univocity/univocity-parsers</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-sketch_2.12@3.5.6?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-sketch_2.12</name>
      <version>3.5.6</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e7941a179b4ebb577e1d28f53c4b4fc0</hash>
        <hash alg="SHA-1">836de9ec7e53ef2eb73a0696c66f31f28e09d9b7</hash>
        <hash alg="SHA-256">593d8cafe8550b1d6448978ed8d8b86cf7211c95952e3e2fb07556eea21fc174</hash>
        <hash alg="SHA-512">30b2f2dbd6efb51afc41f3032f9734a621110293482e418982b4e8cc846123f22e42b95b158249dab9dbd172dd7420b85b872ba4860810614d690a657dc47981</hash>
        <hash alg="SHA-384">3ed6ad1f1bec050aaa8c0055f31642020cb9e7f6b6a9009ce6f0573e17a08a36307657682b4bfe69fd4988dc6aef6127</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-sketch_2.12@3.5.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/common/spark-sketch_2.12</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-core_2.12@3.5.6?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-core_2.12</name>
      <version>3.5.6</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5701402fbb39977a680dcfb0f833383a</hash>
        <hash alg="SHA-1">bc664f243b35e26c7665a7a1b7959142e6125883</hash>
        <hash alg="SHA-256">a483fca64a46cfc71df12b8b405e6e10eceadcc84369741a367e7261ef2f3b24</hash>
        <hash alg="SHA-512">b108fcfde9d0fbf13e5235c0d4249075ef617c929cd5865a3423b9addd48d002441ec740a6a7970a3d44a97e1c3b7391c947e67b6ed8486ee665434e1d12d2dd</hash>
        <hash alg="SHA-384">b18e3058043d55472b2008d724744d8c393a0fb8c3809bc85db57e7417446596e248c007c479a34b04e1d9235d819cd8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-core_2.12@3.5.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/sql/spark-core_2.12</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.avro/avro@1.11.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.avro</group>
      <name>avro</name>
      <version>1.11.4</version>
      <description>Avro core components</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">915002011d651686f94b4e20d25234a6</hash>
        <hash alg="SHA-1">25d54640c4a17aa342490c4c63c172759361bf56</hash>
        <hash alg="SHA-256">eeba11b77070b9aa6337d886fdf778f6695f6c4c3dcfd2a02389925c885079fa</hash>
        <hash alg="SHA-512">2133473bcafb3997f70dd0dc44e76872beed30910dc88522d898e639df0c58f8fefec4c734e46bf0244cf2ca1b49e90b0fdf5c9d7ccd06b41f8f9ad98da1cca5</hash>
        <hash alg="SHA-384">701113d1e68c4582aad203692567bff7538d6ac2707195b413e9f831215e0c8622e83383adcc822a353524c28aba5dda</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.avro/avro@1.11.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://avro.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/AVRO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/avro-dev/</url></reference><reference type="vcs"><url>scm:git:https://github.com/apache/avro/avro-parent/avro</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.avro/avro-mapred@1.11.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.avro</group>
      <name>avro-mapred</name>
      <version>1.11.4</version>
      <description>An org.apache.hadoop.mapred compatible API for using Avro Serialization in Hadoop</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dea6f2ee2c1a507482e3e6b570d17d3c</hash>
        <hash alg="SHA-1">2a14a2ff74f6ec3546b257889949630d3b2a0dbb</hash>
        <hash alg="SHA-256">9da2f2ef253691a5374800615919a57ebcf2d63b5220f6cb9bf020cfd6d3605e</hash>
        <hash alg="SHA-512">842c8d31bc9f7c2ad48b799db9994710730b92afb6af023ea667061e7986ac530755ec80ef276e87512b7bbc932788ec65d3530f0eeec769bcb506cfd084fd21</hash>
        <hash alg="SHA-384">3e032684e1ce41e314c44421e08aff0cc7844db527a951f3d4bc78b60a5baf66466dc253344d0feebc87016446fe5348</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.avro/avro-mapred@1.11.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://avro.apache.org/avro-mapred</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/AVRO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/avro-dev/</url></reference><reference type="vcs"><url>scm:git:https://github.com/apache/avro/avro-parent/avro-mapred</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.avro/avro-ipc@1.11.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.avro</group>
      <name>avro-ipc</name>
      <version>1.11.4</version>
      <description>Avro inter-process communication components</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dcca4909f9cdef30517c00ceb400ba9c</hash>
        <hash alg="SHA-1">802b5b3de0a38e71f07aa3048f532cd1246bc5af</hash>
        <hash alg="SHA-256">95fb8e9254e02b6093642f70187f412a3d75abc41aa80a4e7eda83cd694c9197</hash>
        <hash alg="SHA-512">54d57eed532323e541d95b94be32de5ebf173f1ca373d0ad7cbac5dbfefaa88a840c339908d15c4954a2c978d4e4ed06070b966387771728b1459faa5dac6d81</hash>
        <hash alg="SHA-384">67816e74f306e18ec81233ade3d4f74b213693fca4485d2589904589706f9331499afc981863b72b00c76961ac4a06ad</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.avro/avro-ipc@1.11.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://avro.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/AVRO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/avro-dev/</url></reference><reference type="vcs"><url>scm:git:https://github.com/apache/avro/avro-parent/avro-ipc</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.tukaani/xz@1.9?type=jar">
      <group>org.tukaani</group>
      <name>xz</name>
      <version>1.9</version>
      <description>XZ data compression</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">57c2fbfeb55e307ccae52e5322082e02</hash>
        <hash alg="SHA-1">1ea4bec1a921180164852c65006d928617bd2caf</hash>
        <hash alg="SHA-256">211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5</hash>
        <hash alg="SHA-512">a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac</hash>
        <hash alg="SHA-384">aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
        </license>
      </licenses>
      <purl>pkg:maven/org.tukaani/xz@1.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tukaani.org/xz/java.html</url></reference><reference type="vcs"><url>https://git.tukaani.org/?p=xz-java.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar">
      <publisher>com.twitter</publisher>
      <group>com.twitter</group>
      <name>chill_2.12</name>
      <version>0.10.0</version>
      <description>chill</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a2cedd70ae6d7327696c24ff5464072d</hash>
        <hash alg="SHA-1">b208321208c0b3232a305fccd59df3d6a1f1eecd</hash>
        <hash alg="SHA-256">5cb5db46112699e6de681dedc0c1d0b300f5ccc2c0921b6bb3e4dba2e66c6fe6</hash>
        <hash alg="SHA-512">862d7d4c3de2d7cb94a6fa90dcec683e14c67944c6a542a30b7cf522b46c306fed6399dd300b5c4357fa7a9d6ce166081326c0800865af28dc5b7994d2577d66</hash>
        <hash alg="SHA-384">575c027e5be30fb1a43637ce7a4739b48c5c42418b6000f74477d2921d8d6db48420e510bbfa55d810b0207c1c017faf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/twitter/chill</url></reference><reference type="vcs"><url>https://github.com/twitter/chill</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar">
      <group>com.esotericsoftware</group>
      <name>kryo-shaded</name>
      <version>4.0.2</version>
      <description>Fast, efficient Java serialization. This contains the shaded reflectasm jar to prevent conflicts with other versions of asm.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">27717b481916c44eed34ea7a68782ed5</hash>
        <hash alg="SHA-1">e8c89779f93091aa9cb895093402b5d15065bf88</hash>
        <hash alg="SHA-256">a4899f57fef456b9ec66f730e7b493ecb3dc494cc5758721ed9c18416fd2d3b6</hash>
        <hash alg="SHA-512">21d3500194117f5f34951c7374bdde658be18b842866ea68f16ef47453d4dd31b11d384af2dab3ac4340b015b414402f6b45d4e6a10354fbda5bd8a17e4ce3e3</hash>
        <hash alg="SHA-384">33c8d09ba00c14a077e82f2d7c1a54496a21d20896505d1d97cd30f22d9cb773e060061abc43fc14f15b6619ba4f0c86</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/EsotericSoftware/kryo/kryo-shaded</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/EsotericSoftware/kryo/kryo-shaded</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar">
      <group>com.esotericsoftware</group>
      <name>minlog</name>
      <version>1.3.0</version>
      <description>Minimal overhead Java logging</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5ab0ee168b90e0ad7010b159e603d304</hash>
        <hash alg="SHA-1">ff07b5f1b01d2f92bb00a337f9a94873712f0827</hash>
        <hash alg="SHA-256">f7b399d3a5478a4f3e0d98bd1c9f47766119c66414bc33aa0f6cde0066f24cc2</hash>
        <hash alg="SHA-512">ca319c94b7fd8a275dcc3c5102fc01d73071ac77f5e14b4fc5b6547f96574a4fff0e8cb7b0b0d5006e71faa00575a91defdbfc92a94d9d38dd65520d4ab52000</hash>
        <hash alg="SHA-384">3f9b5b7fd91332ad64d235024d486e24b00760e714713153a61f10e6867bc3e5b617a7bf0bed889a01f0cdb435415d6a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/EsotericSoftware/minlog</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/EsotericSoftware/minlog</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.twitter/chill-java@0.10.0?type=jar">
      <publisher>com.twitter</publisher>
      <group>com.twitter</group>
      <name>chill-java</name>
      <version>0.10.0</version>
      <description>chill-java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3c0e9cbbb2016364333f2cea3922ae97</hash>
        <hash alg="SHA-1">0fd2eb52afd9ab4337c9e51823f41ad8916e6976</hash>
        <hash alg="SHA-256">52afd3c1256d6f89293ba616c0c9ebf11191bb9e8159cd0c1cfdc99e5e0c5ffe</hash>
        <hash alg="SHA-512">48ae455095f0a9ff7ed9b84c9b9bf339c14f6599703b7a34a473ea9c457b0ae700f793d6bf00d1af5e0eb307c9a68d2a10309faea77aaf2245afded08420cb8d</hash>
        <hash alg="SHA-384">7641e1570bd40b064e17c98c656b8b80680b36d2678973c53ea0557fb212d9ce535eda748cb7234813d953ef90e2cb8d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.twitter/chill-java@0.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/twitter/chill</url></reference><reference type="vcs"><url>https://github.com/twitter/chill</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-client-api</name>
      <version>3.3.4</version>
      <description>Apache Hadoop Client</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">775eddc3008e69e63b68440114b0f0f5</hash>
        <hash alg="SHA-1">6339a8f7279310c8b1f7ef314b592d8c71ca72ef</hash>
        <hash alg="SHA-256">e513d71b78086b5caaa439f4402b43e20df01446d56b66084ad419452878701c</hash>
        <hash alg="SHA-512">b8ba99015ffd22dae5e4dd900e25e1f56f535cb3bd56168d867b313f2ab797b5c12aa01c9fe0e2817b178a6c8f9a7b8afb3a291ec01f0c01a8d9b3c6f6b5b6b5</hash>
        <hash alg="SHA-384">6200dbba45d512975da88ff6acce21442f70c92514bb470a5bd704091692d0f69b42342d399fae406add7c4311f7ef75</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-client-runtime</name>
      <version>3.3.4</version>
      <description>Apache Hadoop Client</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">64245768b537a07e4bf1687d1a9c4eaa</hash>
        <hash alg="SHA-1">21f7a9a2da446f1e5b3e5af16ebf956d3ee43ee0</hash>
        <hash alg="SHA-256">9377a68071137ae5f5c8cdc2ed20d6f904a1df4d06df26b47ed8872a1b0d8d47</hash>
        <hash alg="SHA-512">2d0442b3bcb04d18f2de036f5d189745b8866c14de72e5027901718f1100f5090fb14ece684cc8f93a9e2227645db5b13c4abd51c45a9b1156a0a82ebdde97d7</hash>
        <hash alg="SHA-384">bfc9ec036aebbb73f922cb9add74be3fa0dce8617e75d6bd94e7ba1b3173a9cf0e4195ed4a751015d90ed707845d1f70</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.1.3</version>
      <description>Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">92eb5aabc1b47287de53d45c086a435c</hash>
        <hash alg="SHA-1">f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f</hash>
        <hash alg="SHA-256">70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784</hash>
        <hash alg="SHA-512">e5d1fc8ec4544e1fa0f7c4aae8dbcca466c4987bc92fbbc430b054b10d646b745add4a754b1be9d50edd64330c798c53173a97289db57a966312e16f934e9d1f</hash>
        <hash alg="SHA-384">00dc41783f4081585e20adcfe83fd4dbb6b5a27236ee633d7e53dedcbca83ba5e5f0ca68d31f95e9c724b365e4c67499</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-logging/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LOGGING</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/commons/proper/logging/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-launcher_2.12@3.5.6?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-launcher_2.12</name>
      <version>3.5.6</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">96a8817d33965e6ceae899433610cfe9</hash>
        <hash alg="SHA-1">c41bc479766eb9320ad03fe14b9ccecd14c60bc7</hash>
        <hash alg="SHA-256">5fc127614d501af39907eaf4f730532d5df5a04d0d13088f8017948cb28baefa</hash>
        <hash alg="SHA-512">0038bbbd5057be1c6d111f3d69ad9889b82d874a1c4852a7852e43cf1d5598fee231c821dc59a16b65d264d3336108f906dfef59425f77a5b81ac80770f1d5bc</hash>
        <hash alg="SHA-384">16aa08fa704ea9c9173f22aa1f112f96b8d2c09e3723547c64dab01471e96aa98b7e1f03dd7dd4479732048bcd27e509</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-launcher_2.12@3.5.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/spark-launcher_2.12</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-kvstore_2.12@3.5.6?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-kvstore_2.12</name>
      <version>3.5.6</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6de33fe829f74d9e3bd185321d40bf6c</hash>
        <hash alg="SHA-1">cebf37a0979f0fcd3f4a6f9a32eadd63a6fcda6d</hash>
        <hash alg="SHA-256">e4c9b0ab13dc3adfa24a807a99efe2c907e25ff6e50d16fa97419ab4dda192b7</hash>
        <hash alg="SHA-512">073e33ae6a35ee040bbcbf413132e42e7530b73113c48c5131e69d926ff47e2bdc301710f17d99c61bac8b7450f3a5d3ba955026341bb19adb81977eae6b99c8</hash>
        <hash alg="SHA-384">dc049faeba031734a914e3bc0537240d4326796d068de2068ee659423578a47e44f56d859e38406e397e830c28ca16c7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-kvstore_2.12@3.5.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/common/spark-kvstore_2.12</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar">
      <publisher>FuseSource, Corp.</publisher>
      <group>org.fusesource.leveldbjni</group>
      <name>leveldbjni-all</name>
      <version>1.8</version>
      <description>An uber jar which contains all the leveldbjni platform libraries and dependencies</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6944e9bc03c7938868e53c96726ae914</hash>
        <hash alg="SHA-1">707350a2eeb1fa2ed77a32ddb3893ed308e941db</hash>
        <hash alg="SHA-256">c297213b0e6f9392305952753f3099a4c02e70b3656266fe01867e7b6c160ffe</hash>
        <hash alg="SHA-512">2e9f806af5d89c00e345b4516ffd325893a07f30c87274fa5b8ce314aad021633750b665d8c338fbf5adc79a527e19caf96d0b12af57e56fb8d3d8f7fd845a96</hash>
        <hash alg="SHA-384">f10d7ce88da5a9fada67fcbf6fc02939346e67428ee5dd7b000f884d8046131391ee1ece83885d3de60532d1227a66f2</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar</purl>
      <externalReferences><reference type="website"><url>http://leveldbjni.fusesource.org/leveldbjni-all</url></reference><reference type="distribution"><url>http://repo.fusesource.com/nexus/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/fusesource/leveldbjni/issues</url></reference><reference type="mailing-list"><url>leveldbjni-dev-subscribe@fusesource.org</url></reference><reference type="vcs"><url>https://github.com/fusesource/leveldbjni/leveldbjni-all</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-network-common_2.12@3.5.6?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-network-common_2.12</name>
      <version>3.5.6</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4e5c3f9a49d551d22936ebc06170c26b</hash>
        <hash alg="SHA-1">00f79cd3097d6fac84ad64959e1a1a766ced617f</hash>
        <hash alg="SHA-256">8737ebb1fa65d3428cdadef3ad0f28cd8dd273070cc8ea78eea24bfccfbe86a9</hash>
        <hash alg="SHA-512">724a5768de05885ae8ebda22babb89eef6a545da0dbd914b00a1180ecc9834ab2a57cafe82e1dbcf671a23790fdd7ae2b79dd2c1e2ed57694848b92ed706fb14</hash>
        <hash alg="SHA-384">5097bfc43e159bffb3736e82be302eb734df0ff5e011be90e62c0e9264ad1659a17c9dafeaf0753e1fbca95658efefe7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-network-common_2.12@3.5.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/common/spark-network-common_2.12</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@14.0.1?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>14.0.1</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, google's collections, io classes, and much
    much more.

    Guava has two code dependencies - javax.annotation
    per the JSR-305 spec and javax.inject per the JSR-330 spec.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">58553f87d83b9f8ec74bd3529083ee2f</hash>
        <hash alg="SHA-1">69e12f4c6aeac392555f1ea86fab82b5e5e31ad4</hash>
        <hash alg="SHA-256">d69df3331840605ef0e5fe4add60f2d28e870e3820937ea29f713d2035d9ab97</hash>
        <hash alg="SHA-512">e920540dbdee79fba1a5e0966ae92ac37358aa4126c04a08732e4260916807901d8dea41322037ef7908fc0204281d05a1bfa95401fcfc473630c0bc8e81343a</hash>
        <hash alg="SHA-384">1f5c72fdf4fbef5fe6044054d83cda82d409ce2b8e304913cc985341ceb13e75728dfcdba522dc87aa04577a054afeae</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@14.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/guava-libraries/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://code.google.com/p/guava-libraries/issues</url></reference><reference type="vcs"><url>http://code.google.com/p/guava-libraries/source/browse/guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.crypto.tink/tink@1.9.0?type=jar">
      <group>com.google.crypto.tink</group>
      <name>tink</name>
      <version>1.9.0</version>
      <description>Tink is a small cryptographic library that provides a safe, simple, agile and fast way to accomplish some common cryptographic tasks.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4dde51a12b3ba7e77c1a179b659c7250</hash>
        <hash alg="SHA-1">010de1d0ea8401c3e33cad83c0d11df712d40ba5</hash>
        <hash alg="SHA-256">8faf92d116a0ba138ee4e99a7418e985897818c2f6a9d4c01b8fe6b07db60eb7</hash>
        <hash alg="SHA-512">f4c72066953f8e411bcb701b75a6e5509aeee31bc0bc4722212b8e291d5e15c34495b262fec476cfdbe8c91696ae3762a896735371c732627bf4de320befbf05</hash>
        <hash alg="SHA-384">7d726f7568b24f374b8fe50f02fcd3a68c3ac9df962d9c8dc2d17ebb58c5aa415e0ea802e52d37fcd821ad4dfe07f3ae</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.crypto.tink/tink@1.9.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/tink-crypto/tink-java</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/tink-crypto/tink-java/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/group/tink-users</url></reference><reference type="vcs"><url>https://github.com/tink-crypto/tink-java.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.gson/gson@2.10.1?type=jar">
      <group>com.google.code.gson</group>
      <name>gson</name>
      <version>2.10.1</version>
      <description>Gson JSON library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">df6097815738cb31fc56391553210843</hash>
        <hash alg="SHA-1">b3add478d4382b78ea20b1671390a858002feb6c</hash>
        <hash alg="SHA-256">4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593</hash>
        <hash alg="SHA-512">7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727</hash>
        <hash alg="SHA-384">48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.gson/gson@2.10.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/gson/gson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/gson/issues</url></reference><reference type="vcs"><url>https://github.com/google/gson/gson/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/joda-time/joda-time@2.12.5?type=jar">
      <publisher>Joda.org</publisher>
      <group>joda-time</group>
      <name>joda-time</name>
      <version>2.12.5</version>
      <description>Date and time library to replace JDK date handling</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a0f575850531c768542236ea245b7516</hash>
        <hash alg="SHA-1">698ce67b5e58becfb4ef2cf0393422775e59dff4</hash>
        <hash alg="SHA-256">10628411ecb40c4634196c544f34681abdeef826f377096357433d1f9a135bc6</hash>
        <hash alg="SHA-512">300d1acaac8c49e3d6d74077392ecb9aba4115173f8734923413bfb049f01a668f4852099e9682146dd2f41faed244ca2a91c2d70b98930bffb811532f99efdf</hash>
        <hash alg="SHA-384">acd89d4bfe98d1388b8652995d288ef26441072898d25f68abead84e016d858af7b775cf0e830257c77873c4a7b22139</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/joda-time/joda-time@2.12.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.joda.org/joda-time/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/content/repositories/joda-releases</url></reference><reference type="issue-tracker"><url>https://github.com/JodaOrg/joda-time/issues</url></reference><reference type="vcs"><url>https://github.com/JodaOrg/joda-time</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-network-shuffle_2.12@3.5.6?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-network-shuffle_2.12</name>
      <version>3.5.6</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b0dc5f7012724b0de213aa754bb0a223</hash>
        <hash alg="SHA-1">3e70c06ed835497d66208d3591b57e7df9ae53a2</hash>
        <hash alg="SHA-256">2ce37f61d682bb8137ca8d221707a2b023f11f853cd0f8cef9f4649e8f7db983</hash>
        <hash alg="SHA-512">0cbb1b95bb1ad74d1efbfc59e6556a67a1586a2de5cf00695579e5e32742f59eace6e04e5ecbf2d18f875c9a24303509bc047c3aafb902ad116a32959319cd2a</hash>
        <hash alg="SHA-384">cfea073f7846661464fc414d2eac1294a390758406c189de6c520ddfa69ea68925868a7d8a7a1c39237afb5e38d102e5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-network-shuffle_2.12@3.5.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/common/spark-network-shuffle_2.12</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-unsafe_2.12@3.5.6?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-unsafe_2.12</name>
      <version>3.5.6</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">16ec029dba5c3eda565d04cf62635ca1</hash>
        <hash alg="SHA-1">ab3ed60e88ed1c466571ee88d39370cf824c5b50</hash>
        <hash alg="SHA-256">98ceb69062b60a00c615b0ed79b8cc2d5f39fd5f3d60e7fdf446ceef43a24517</hash>
        <hash alg="SHA-512">606188e17f19d3ecfea9cf7da3b6375d2ab6eeb9cf434c1e7324c6f509064542547eb747406c1c3297ac696540c31337afc689babd884b59c1389384d005ed5d</hash>
        <hash alg="SHA-384">a299208e9050036aed7181cd660474dfe27ede72d331fddd12afd5c6f3dd871bc824080ed92bd671585d18930c73292d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-unsafe_2.12@3.5.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/common/spark-unsafe_2.12</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.6?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-common-utils_2.12</name>
      <version>3.5.6</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bbfea657efe2ed6b19a8386544c6223a</hash>
        <hash alg="SHA-1">79ea83e8d2b9ad3487fbef2726ad771cd00bf953</hash>
        <hash alg="SHA-256">a06325bba13c39c5b4835dbdaf73be9b1c1ffdf1e35411ec9a6d40ec66fa8ba9</hash>
        <hash alg="SHA-512">5d7c5f95213e4da784ba761ffb6a72fa528c17ea43f43cb7642b3c91c589cc4f92d6b23453d090afab48835433fdf56a31c6f7effb17e81a3d0285824eff1175</hash>
        <hash alg="SHA-384">6b710ee985275d13cc9ffc9151ffa49f2a2ff9572b56a7adfd4441f4895baba8e8aca9270ff87ded8a2ba2c3e6fdb7f9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/common/spark-common-utils_2.12</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/jul-to-slf4j@2.0.7?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>jul-to-slf4j</name>
      <version>2.0.7</version>
      <description>JUL to SLF4J bridge</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">965fd8c7c67bd57eb63b321d0bedf498</hash>
        <hash alg="SHA-1">a48f44aeaa8a5ddc347007298a28173ac1fbbd8b</hash>
        <hash alg="SHA-256">eaba65483bb38c93e68d557a19e5738962322de1946545dbf40e5e32f6293008</hash>
        <hash alg="SHA-512">7df8d8db9bf6d1eb0f7728ad15fbd820533eca33e55a97ea2f177028f5c3e02ee8142768fff3e9f3204f40cfa9e4cc720a4ef8eb2aac6177e7b78e26702b30cf</hash>
        <hash alg="SHA-384">04f447db7af836df84dcecd74f8f6c57a7b63276e809bc9810a33815432a3626d1d0273481450b031d50e1c97fd88157</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/jul-to-slf4j@2.0.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/jul-to-slf4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>jcl-over-slf4j</name>
      <version>2.0.7</version>
      <description>JCL 1.2 implemented over SLF4J</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4e8d6cd31f7e6277280c95157ac7845a</hash>
        <hash alg="SHA-1">f127fe5ee53404a8b3697cdd032dd1dd6a29dd77</hash>
        <hash alg="SHA-256">41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742</hash>
        <hash alg="SHA-512">221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17</hash>
        <hash alg="SHA-384">fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/jcl-over-slf4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.20.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-slf4j2-impl</name>
      <version>2.20.0</version>
      <description>The Apache Log4j SLF4J 2.0 API binding to Log4j 2 Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">52355bf9fbb12407e08be175c12dfc7c</hash>
        <hash alg="SHA-1">155c8b9bbdac91d8461d9a403a646e6bd0d365d8</hash>
        <hash alg="SHA-256">b8dd3e4ea9cffa18db5f301cd8c539158662e691efd4701aa87b4d09961bd8b0</hash>
        <hash alg="SHA-512">3954329496870ec7acb0494e7c2e4d1d2585ff3695da3dd01cca4bdd4dbd5a8b5d9cbabc2a90cc2b5f257e57a96a458156382bfdb7c93512ca5579d646c98bb2</hash>
        <hash alg="SHA-384">2a456e835fb8f2d7f7d7bac38331e16fb66c888d48eb79b630504e719b2d703a7b131b47f96931425d37f22febc541df</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.20.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-slf4j2-impl/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2/log4j-slf4j2-impl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api</name>
      <version>2.20.0</version>
      <description>The Apache Log4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f9446464667f0139b839b5e9da37f5b9</hash>
        <hash alg="SHA-1">1fe6082e660daf07c689a89c94dc0f49c26b44bb</hash>
        <hash alg="SHA-256">2f43eea679ea66f14ca0f13fec2a8600ac124f5a5231dcb4df8393eddcb97550</hash>
        <hash alg="SHA-512">851016b38421d21864bb3073089c44000f941bfbaa9dc518db7bf7fb3c7f942bfb2c0c7b832e375e82b2f285379bd0935e42aa1833817daacb4fca2a6a9500bc</hash>
        <hash alg="SHA-384">12b05c61f49caab0b845e93967228a3bd3ab096c4ea1516cb7263f49963137a688a178ddebe790ccc3c0c73f2d4440fc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-api/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2/log4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-core</name>
      <version>2.20.0</version>
      <description>The Apache Log4j Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">20bd40d026d35a93fe710acb141e93da</hash>
        <hash alg="SHA-1">eb2a9a47b1396e00b5eee1264296729a70565cc0</hash>
        <hash alg="SHA-256">6137df848cdaed9f4d5076f75513c6c85da80b953f4e7acca38098b770763f55</hash>
        <hash alg="SHA-512">a7fe8fa2304c1b013513c1838013804cf601a7148dfef95642ea763c9550a6d844d9a1e528c9c21efc7ea830d13fbbb55e2db2c2eeb5542c4d9f00c127f211e4</hash>
        <hash alg="SHA-384">1d8b0349286118f102014706f02b7851f10ca0b1554bd7a2e1efdda76ccab6e0abd967490d06fca030f2a26289686275</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-core/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2/log4j-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.20.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-1.2-api</name>
      <version>2.20.0</version>
      <description>The Apache Log4j 1.x Compatibility API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">986cff74b065cdd1d6b860ac1e9a20fa</hash>
        <hash alg="SHA-1">689151374756cb809cb029f2501015bdc7733179</hash>
        <hash alg="SHA-256">89d761af83de7e08e3c1916bc757242cedbbc1f38fb76fd13f89ef36b2671a45</hash>
        <hash alg="SHA-512">64f208ca34f3ca9d7902024d781b629795ffaa41ac4f4dd4487e1e0ff97351d62d83f399d6f8b5a7044af5d9b117a7cdd74a7b0fd2030af5bc4ba05a3e344a24</hash>
        <hash alg="SHA-384">6c33bce8423e1ac38ac9f11fbec247bc2255dc2a9f1d9994e87c6db861de51df606d1a4163b1c1a3e57987f0f64e2694</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.20.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-1.2-api/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2/log4j-1.2-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.activation/activation@1.1.1?type=jar">
      <group>javax.activation</group>
      <name>activation</name>
      <version>1.1.1</version>
      <description>The JavaBeans(TM) Activation Framework is used by the JavaMail(TM) API to manage MIME data</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">46a37512971d8eca81c3fcf245bf07d2</hash>
        <hash alg="SHA-1">485de3a253e23f645037828c07f1d7f1af40763a</hash>
        <hash alg="SHA-256">ae475120e9fcd99b4b00b38329bd61cdc5eb754eee03fe66c01f50e137724f99</hash>
        <hash alg="SHA-512">49119b0cc3af02700685a55c6f15e6d40643f81640e642b9ea39a59e18d542f8837d30b43b5be006ce1a98c8ec9729bb2165c0442978168f64caa2fc6e3cb93d</hash>
        <hash alg="SHA-384">021f29ab14a1db9b27e31778fd5b6ead2ed46fef534cfab6b34b1b839547c78fc39cfb1568f0b2206bb46a98c4b9e1d4</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.activation/activation@1.1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://java.sun.com/javase/technologies/desktop/javabeans/jaf/index.jsp</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.curator</group>
      <name>curator-recipes</name>
      <version>2.13.0</version>
      <description>All of the recipes listed on the ZooKeeper recipes doc (except two phase commit).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">02685a8f2e44faa1941e953ac426a8d7</hash>
        <hash alg="SHA-1">1e6d5cf7b18a402f5d52785877010711538d68a0</hash>
        <hash alg="SHA-256">22be05c1a3e6c5ede22e77372b08dc631a3b93b64acb7f682537ea65a6ddba06</hash>
        <hash alg="SHA-512">498ce3631ef135b96b467cd3c4fa8ac1797538047589b1454911ec77a5205773346a367492db0771167e8f612c911bac44c8c7c651be00e206eb60e2f0bba2f7</hash>
        <hash alg="SHA-384">08a4134a208a2c59b0354e5d4e88b29f0f2f4f0bd0b83a6ccd54da70602499a8dedd5711d5481c23ba8782049cdb546c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://curator.apache.org/curator-recipes</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Curator/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CURATOR</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/curator-user/</url></reference><reference type="vcs"><url>https://github.com/apache/curator.git/curator-recipes</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.curator</group>
      <name>curator-framework</name>
      <version>2.13.0</version>
      <description>High-level API that greatly simplifies using ZooKeeper.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">91e34b86afb44ef5c728f69ed9790f1d</hash>
        <hash alg="SHA-1">d45229aee7d3f1f628a34fcac9b66ed5ba52c31f</hash>
        <hash alg="SHA-256">db084e5e0fed0548a8128f12a3e7a15c875c9595e75316c9578d64e77375c4a9</hash>
        <hash alg="SHA-512">7a9d520b5668ada07d05435f5632ab24d11bb079338388f43668960a3181d665568a2ef4a73222870362a84e1eeb59ef9ebf171bbcfdd7216735821328287798</hash>
        <hash alg="SHA-384">bf989371e089766e2bc00589c4ce3419382cfe5da67f1c815604653d59a6429642a6e9008c64a2d09d6398816c527d32</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://curator.apache.org/curator-framework</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Curator/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CURATOR</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/curator-user/</url></reference><reference type="vcs"><url>https://github.com/apache/curator.git/curator-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.curator</group>
      <name>curator-client</name>
      <version>2.13.0</version>
      <description>Low-level API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ca2c6ca2277e78d1f6b865ee82e10357</hash>
        <hash alg="SHA-1">a1974d9b3251c055408059b2f408d19d7db07224</hash>
        <hash alg="SHA-256">62ab2201b5b9af63b215a4e6829dbe7d553a0805cfb0b1a665f9b49da8270c51</hash>
        <hash alg="SHA-512">72909bbf56f63fb7afba996336e7270ae08010976b4bb3b8bb90269d53fde78c63f8131a941ebb7cc554981a522f15e2b2a9ec63387d77f7117e5a1ed0b8c028</hash>
        <hash alg="SHA-384">57d338248aa56fa86aab71303a2746c7e4f061a18029a096f99bdadb7a87152f5067e1955aa2acb928edbcac0631b613</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://curator.apache.org/curator-client</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Curator/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CURATOR</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/curator-user/</url></reference><reference type="vcs"><url>https://github.com/apache/curator.git/curator-client</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.zookeeper</group>
      <name>zookeeper</name>
      <version>3.6.3</version>
      <description>ZooKeeper server</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a87ec9c2634be7babf2328e1a0a03202</hash>
        <hash alg="SHA-1">a6e74f826db85ff8c51c15ef0fa2ea0b462aef25</hash>
        <hash alg="SHA-256">ac44de96d37a80d463c1e01aaa2ea86b19490fa17a37438d14491456c0e4a911</hash>
        <hash alg="SHA-512">086683a17870535c0f66a6ca531e92c325a2a46b37d56fa15d6d7c8b00d01ac299ef2023a3a082879adf693a3dbbe3515009dd33a724f81d1ea71bda0f78ee04</hash>
        <hash alg="SHA-384">cf7739ec3208302c68c15bc7221ce12158a79dadac990b309cc0405bf5321ad7b7b9183326f9d066774bc6fdba1cb41c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://zookeeper.apache.org/zookeeper</url></reference><reference type="build-system"><url>https://ci-hadoop.apache.org/view/ZooKeeper/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/ZOOKEEPER</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/zookeeper-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.zookeeper/zookeeper-jute@3.6.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.zookeeper</group>
      <name>zookeeper-jute</name>
      <version>3.6.3</version>
      <description>ZooKeeper jute</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7c44c4104a0da46b666562400a4a2c82</hash>
        <hash alg="SHA-1">8990d19ec3db01f45f82d4011a11b085db66de05</hash>
        <hash alg="SHA-256">6f463ade2b777f81e6c3e145b3fc03d4b39131b73dcf8c7f4b89ac4b1bacc9c5</hash>
        <hash alg="SHA-512">775ac90d270d3ddfb902a83abc5192fafb0b6837914112124f768419a2a92249c9f49d5a08cdcc530da10442ee0419051353b04dc22c2c26d55ddb7df528b215</hash>
        <hash alg="SHA-384">85cf71ac9cb3479ab819c9ddb42b904377a67a177e5e92664898138021bf5f0622332ba2e247ac0f87c8b7812e3c9b1a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.zookeeper/zookeeper-jute@3.6.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://zookeeper.apache.org/zookeeper-jute</url></reference><reference type="build-system"><url>https://ci-hadoop.apache.org/view/ZooKeeper/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/ZOOKEEPER</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/zookeeper-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper-jute</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-plus@9.4.56.v20240826?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-plus</name>
      <version>9.4.56.v20240826</version>
      <description>Jetty JavaEE style services</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">818ade1117dfc2425386d095d8d2fd3e</hash>
        <hash alg="SHA-1">7870fb906ce867fa8752d84db67999dadd6d9c7b</hash>
        <hash alg="SHA-256">020541fb512bef0bacb330e569ee393619a970f7dc271175673539f95c373648</hash>
        <hash alg="SHA-512">28e3e00ddb16db92e375c3446f47ad51b201d7f7ba58e3d8c07090c66e5e13c5396c4d940ef93f8b5d253320c164d79d5cea0eaf60ff610b2dab3aebfbc97d44</hash>
        <hash alg="SHA-384">5877bb67196cd5d1edca7295e157151b560641741c5fa35eba68a91f6c9021b853b3f1c021c6915ce5ca5a43777ecff4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-plus@9.4.56.v20240826?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-plus/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-plus</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.56.v20240826?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-webapp</name>
      <version>9.4.56.v20240826</version>
      <description>Jetty web application support</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">025af5ffbb74ce2a869c6a3a8e0339c1</hash>
        <hash alg="SHA-1">d2d4bd6c5b10c2896c300f31651faa5bdc31ee13</hash>
        <hash alg="SHA-256">ea9f7d954e8b4062cf1ae2fbc686989f92b7570058fd5b465f4166786013b453</hash>
        <hash alg="SHA-512">4444919659e456e95972f1f1921fa258e3841dc6804783d40a2f15e517e306c4316c06dbe6e004afdddd3ad8dec1c68ca95007021cf4e27a0618c75748006853</hash>
        <hash alg="SHA-384">b0dc63160ef80c64226ad76e9dc3309eb39c513f04477f1a92342aacdabba4d4423b4949f9ec418f0263055344f831fc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.56.v20240826?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-webapp/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-webapp</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-xml@9.4.56.v20240826?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-xml</name>
      <version>9.4.56.v20240826</version>
      <description>The jetty xml utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4981f4a86ba68cc2f072faafbb71a655</hash>
        <hash alg="SHA-1">34fa65b9ea975fb672e043faaf94b9002d4c6c1e</hash>
        <hash alg="SHA-256">d9e1e8089abf2edbe1d8ccdaa614b8432024dbd0b9af9f8e316b720f7048fed9</hash>
        <hash alg="SHA-512">af0a2318e7f5504c7ab38ab5b4e230641ab7b1925b36158cd1bfe213178d3a925edd27457f0894cf6795b8e11e96f72e4f91efe663db763128f11aa5df4cf0bc</hash>
        <hash alg="SHA-384">fcab06dd95ac49f898469aca6f89a7b6e9d76ec55860461255f38881084905f83adc6f8aea621e6d681bbacc208952bc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-xml@9.4.56.v20240826?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-xml/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-xml</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-jndi@9.4.56.v20240826?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-jndi</name>
      <version>9.4.56.v20240826</version>
      <description>JNDI spi impl for java namespace.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2b6c7f59d91ef7186c0142295ede1994</hash>
        <hash alg="SHA-1">0f229833e1fffb9e42050134fc3c55d4e29800fc</hash>
        <hash alg="SHA-256">6ae3b4afc4851e49dc8b6d2027611e93f0d5e40f5e75770643eef3f32d0b31ff</hash>
        <hash alg="SHA-512">b5b703c9a1b1d011149ef97416cc91ea9809ded409e60d0ed98729525126f6e56e6c2d58eac5c1919b1671f10699bcaa07db94bc8d4a7bff3132ebbff6f9884a</hash>
        <hash alg="SHA-384">5a1fed0060205d70431ddfa38427d6a8acacd1ebbd7fe618e7fb5e9d14800ffc05e98110aff81bb394ecec842a4d16ae</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-jndi@9.4.56.v20240826?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-jndi/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-jndi</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-security@9.4.56.v20240826?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-security</name>
      <version>9.4.56.v20240826</version>
      <description>Jetty security infrastructure</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6a6b9c912575f61d9e80b68b6ed252c3</hash>
        <hash alg="SHA-1">b22ab0397e893d9c092ade34a8e826ef576b285c</hash>
        <hash alg="SHA-256">df7bb3cac6279d20e22add135b7046bfebdf158ced6b5454ccd70096bd22deb4</hash>
        <hash alg="SHA-512">874db362cbfe8e6806776d5e6bbb870ea0ce7d924b02c6ac7bd52a38a8ddbc1403fa44612ef7bc3dcd2c598ad9d89ce92698c955cd17157b9103f59219df17ab</hash>
        <hash alg="SHA-384">aa0465aad08af9f51b8b041f3d7d3872843604eced5ddfa1729f2aec2795da866465531f47803f91818bc9c92e672d5c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-security@9.4.56.v20240826?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-security/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-security</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-util@9.4.56.v20240826?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-util</name>
      <version>9.4.56.v20240826</version>
      <description>Utility classes for Jetty</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">48cb0898c0b71ccc67c990941a162c3b</hash>
        <hash alg="SHA-1">696cf9f9160e3a0ff208db614af118915cbdcf2d</hash>
        <hash alg="SHA-256">08d10469827064960b00807963a0d221f1b706054c4559bca9c74c92f8906aaa</hash>
        <hash alg="SHA-512">025751c45cd8a23f1b436eaa1849af2421f78a2a82bc07c4175df8b4ec5dfc15247036194156897aafb8b0ec83406bbaa25e4092fea5ddd3b900da0ffdfaae19</hash>
        <hash alg="SHA-384">ad2c29b1e1e31366695b5aa4653bc6cfffa07bd9caf109d141f64aae49357723b29243786891c4ecd243b136008c3a7e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-util@9.4.56.v20240826?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-util/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-util</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-server@9.4.56.v20240826?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-server</name>
      <version>9.4.56.v20240826</version>
      <description>The core jetty server artifact.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">300d061a7acb727f75659b3844be176f</hash>
        <hash alg="SHA-1">65ce500f7cad946ce0e172c6ce90319caa29e787</hash>
        <hash alg="SHA-256">afb44ddcd73a6f31f518af69c4ca6af0f0d43a8f3bf67b842ff954891ca77e65</hash>
        <hash alg="SHA-512">dc0d1f05a7f8477e1f7f57adb307224aadcb1e1fed6f7e5df72d9b84437bf75276c3b0f13da9d079c541ad94601bdbd7314c61477b224dbbdc93a6d5b9f98478</hash>
        <hash alg="SHA-384">7e3e9c9760995e64071548d1b20054adce24cf6e550764c8c246f25aea44c9b59817ad92bfff40998c2da26ca4324a58</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-server@9.4.56.v20240826?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-server/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-server</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar">
      <publisher>GlassFish Community</publisher>
      <group>javax.servlet</group>
      <name>javax.servlet-api</name>
      <version>3.1.0</version>
      <description>Java.net - The Source for Java Technology Collaboration</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">79de69e9f5ed8c7fcb8342585732bbf7</hash>
        <hash alg="SHA-1">3cd63d075497751784b2fa84be59432f4905bf7c</hash>
        <hash alg="SHA-256">af456b2dd41c4e82cf54f3e743bc678973d9fe35bd4d3071fa05c7e5333b8482</hash>
        <hash alg="SHA-512">32f7e3565c6cdf3d9a562f8fd597fe5059af0cf6b05b772a144a74bbc95927ac275eb38374538ec1c72adcce4c8e1e2c9f774a7b545db56b8085af0065e4a1e5</hash>
        <hash alg="SHA-384">8bf960fd053ef6ad1c3535824311f676b9ad537678b85f855dd5d6d726e391f8a7be9c9c76a8ae3ce8bfe671c1e2c942</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://servlet-spec.java.net</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/SERVLET_SPEC</url></reference><reference type="mailing-list"><url>users@servlet-spec.java.net</url></reference><reference type="vcs"><url>http://java.net/projects/glassfish/sources/svn/show/tags/javax.servlet-api-3.1.0</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-io@9.4.56.v20240826?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-io</name>
      <version>9.4.56.v20240826</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ac859dcea6c2cec4beed7ef232892e4f</hash>
        <hash alg="SHA-1">533e7cbc5efc1d58d14cefb68904cd3af47fc316</hash>
        <hash alg="SHA-256">62a3f852e56e3fff74705bd84dbaa4f5fc5dd2182c980042c35731bcaceac287</hash>
        <hash alg="SHA-512">76ec3fef40a444a7a19c48d04a6b3d2ae81c0a86e8aa75a1d3ff6ba4ab0d9c50346244b502e1a5de410206b794a7452219834c80868eac07e76d836a93cb4c14</hash>
        <hash alg="SHA-384">1d93614743bd36852badee079fe7d9f7b2303f54b7ec0a2a30c3706f3182c9431ebc6002db1bed820df07705d5f0587a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-io@9.4.56.v20240826?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-io/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-io</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-http@9.4.56.v20240826?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-http</name>
      <version>9.4.56.v20240826</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">25cbc8436598507e932362e2ee618847</hash>
        <hash alg="SHA-1">e522a857d234e5ade679abfae807bcf4ecdd6f2e</hash>
        <hash alg="SHA-256">203bb49644f2be0aea6a6adb320e64808156588b854ff231a756f65847fcd493</hash>
        <hash alg="SHA-512">48d5512d378d58c3df93bbe1c68d5a4b097e2dc7466992393e0731414dc0fe449312e067d0874e503dd27cb9b6a1f2da0d1f1569a7b484c1f12bd533afbe2723</hash>
        <hash alg="SHA-384">fd92cbb258c732e91d12f9b14220a631cbcff00ac59d4ec83230f745198e5466087c268f82a0e2a8da00002947d681d7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-http@9.4.56.v20240826?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-http/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-http</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.56.v20240826?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-continuation</name>
      <version>9.4.56.v20240826</version>
      <description>Asynchronous API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1b27b1b13d025b67164c1b0247975b83</hash>
        <hash alg="SHA-1">be8f9b519d692dfd1e2726ee9e26573dabc99e70</hash>
        <hash alg="SHA-256">9c477faa5b4a7abf10f7553f5f93e79063470eb53b1ea28f223077d68041b24b</hash>
        <hash alg="SHA-512">05e2b67b01d0a237a9b385f0624e665b760139c4c00e9157826b4d95443f9ac9864109f23fbe67cbf1d7d68a7da8baad7d63edb2451a079d8babe46e77b2268b</hash>
        <hash alg="SHA-384">673d6c533af2e927d6bd90a539cb337fb2520c4427b5e20327111648169ad2c678cb0acca04e45164af3a3b833254f3f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.56.v20240826?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-continuation/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-continuation</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.56.v20240826?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-proxy</name>
      <version>9.4.56.v20240826</version>
      <description>Jetty Proxy</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c03e6cee8c2c367369772495ef9eb5ee</hash>
        <hash alg="SHA-1">fdeb0e5beb9ddbfb49b4aec3daa55d71e0cf1956</hash>
        <hash alg="SHA-256">8721f548e419f64290a9e2b0b0504063dfec56a6c76a23f634e021e054b7b677</hash>
        <hash alg="SHA-512">c078dd462cf665f592a8979b453cf448b32ef52e90f43960b06737381d66929a419114ea4347ff7ac455c65aec17c018d4017857386dd4a806b366b8233feed3</hash>
        <hash alg="SHA-384">0ce470705ae4175f3a6318a8ef99dd7922fdf8de37051358292713e24a431901f4baa7fb18fb1e7400b99a9d29538673</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.56.v20240826?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-proxy/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-proxy</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-client@9.4.56.v20240826?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-client</name>
      <version>9.4.56.v20240826</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0cdd0dcfcd64214e1ea244933a686f6f</hash>
        <hash alg="SHA-1">b33d6d9045da8f0b317162facabcd1dc9ebf751d</hash>
        <hash alg="SHA-256">e894bc56bbdeb8680cf084637b4df23a0fc9dcf31049ae6e68b2f2ae2cd81e1e</hash>
        <hash alg="SHA-512">cd95136196735b32e2cb4781bb9c0b2dbcd406fe042f68e7fda0319da5aae8d0c5a0aab8af0603615f9de9205e2a13497ed1e18e8c4f0760313b8c58c24a54d7</hash>
        <hash alg="SHA-384">648e7e21992f6c757741e83da8cbe538e9db371dc6ddc2b23629e84066ebaded850d81d036b17c810790a4d44206b9b7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-client@9.4.56.v20240826?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-client/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-client</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.56.v20240826?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-servlets</name>
      <version>9.4.56.v20240826</version>
      <description>Utility Servlets from Jetty</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">22e935d51d7e83d9c06a2b75c66a9cb8</hash>
        <hash alg="SHA-1">62bbe12f1a737d9b96358a9964466ffea6a6487a</hash>
        <hash alg="SHA-256">d6556e7285ba45a58d1a7a2731b18376e62937d32fd3bf916d99c19141a0fd49</hash>
        <hash alg="SHA-512">13e91739457ebddbcaebb3644545dacf20f0d6398bbc6eee6fb931143207861d1e53e2bafe57aa777c0b04c7e0ebe0cd332a487db08530f3c87ec8b312735f37</hash>
        <hash alg="SHA-384">406aa8cf244bb574edd63203e6f130656e5b1093066d89845fd8091ee420921f03efc5663b3426e825d762406d2ad010</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.56.v20240826?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-servlets/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-servlets</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.servlet</group>
      <name>jakarta.servlet-api</name>
      <version>4.0.3</version>
      <description>Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs,
        implementations of those APIs, and technology compatibility kits for Java runtimes
        that enable development, deployment, and management of server-side and cloud-native applications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">193258b1056435dba7919a978052cd81</hash>
        <hash alg="SHA-1">7c810f7bca93d109bac3323286b8e5ec6c394e12</hash>
        <hash alg="SHA-256">6d93010ca93301383c5ca960d55611a5c91798da1efb0f1fe9356f27831bf499</hash>
        <hash alg="SHA-512">7d8165cac1ef46736d49a69875c0239d41ffeeac5d2818eb531572eaa95910814de8278a3be633ec00f205685644deb646e773323b42562a82af71bd64d06fdb</hash>
        <hash alg="SHA-384">ca4b813b8e6bb9e4712edb5141b75199fd68c3d6e9cac01a62566bcd73ab5c39e118840b10d19a062e422c844c8bbf17</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.servlet</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/servlet-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/servlet-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/servlet-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.16.1</version>
      <description>The Apache Commons Codec component contains encoder and decoders for
     various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6c5be822d8d3fa61c3b54c4c8978dfdc</hash>
        <hash alg="SHA-1">47bd4d333fba53406f6c6c51884ddbca435c8862</hash>
        <hash alg="SHA-256">ec87bfb55f22cbd1b21e2190eeda28b2b312ed2a431ee49fbdcc01812d04a5e4</hash>
        <hash alg="SHA-512">bd33fd5340757ea0616a8c2a48760cfc9932f93b8e067701f4a122fd59735083468a016d8c0fd65973dd3fa4fc3537855e71a1fae7d14e1777e31ff1c47708ce</hash>
        <hash alg="SHA-384">ee7f4c3e5c01cf77f4d82b09c358087738e6e79507ced9f2c82fdce3b32825bb62b2d66b30ef897e2972d3253478c525</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.16.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-codec/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CODEC</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://github.com/apache/commons-codec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.23.0</version>
      <description>Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">96b88349958aeaa15cdf6e5e877bdced</hash>
        <hash alg="SHA-1">4af2060ea9b0c8b74f1854c6cafe4d43cfc161fc</hash>
        <hash alg="SHA-256">c267f17160e9ef662b4d78b7f29dca7c82b15c5cff2cb6a9865ef4ab3dd5b787</hash>
        <hash alg="SHA-512">e1ee5b7526ca1b6b67b3a6671d13899048f078bf0e73c1e9c601d947dcc9fd5c78cec9592b2a7a586faf4a7fba1c6885f679375cc2f06680a13ecfdad1ed41dd</hash>
        <hash alg="SHA-384">10e49e696c18750c37eee7807aca1ef28fadf2c9da6eabb3b5443bb0e1fa8ebd6638addb2042f27e9a9874495eb10d1c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.12.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">19fe50567358922bdad277959ea69545</hash>
        <hash alg="SHA-1">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>
        <hash alg="SHA-256">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>
        <hash alg="SHA-512">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>
        <hash alg="SHA-384">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-math3</name>
      <version>3.6.1</version>
      <description>The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5b730d97e4e6368069de1983937c508e</hash>
        <hash alg="SHA-1">e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf</hash>
        <hash alg="SHA-256">1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308</hash>
        <hash alg="SHA-512">8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226</hash>
        <hash alg="SHA-384">95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-math/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/MATH</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-math.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.10.0</version>
      <description>Apache Commons Text is a library focused on algorithms working on strings.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4afc9bfa2d31dbf7330c98fcc954b892</hash>
        <hash alg="SHA-1">3363381aef8cef2dbc1023b3e3a9433b08b64e01</hash>
        <hash alg="SHA-256">770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018</hash>
        <hash alg="SHA-512">afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831</hash>
        <hash alg="SHA-384">06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-text</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.16.1</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ed8191a5a217940140001b0acfed18d9</hash>
        <hash alg="SHA-1">377d592e740dc77124e0901291dbfaa6810a200e</hash>
        <hash alg="SHA-256">f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f</hash>
        <hash alg="SHA-512">97eab31b073c5c57c8bcfaa2fec7b481a15a9a1f9ed864dfdc63b57f062b230557caa734c3133aca1165facb588c58db0185c07832241d70159e87a4bcf48008</hash>
        <hash alg="SHA-384">bd78e2eb3d005046d1329557d3a77529e98384d4d87940374eef432d73d5a06ef20fb7b0c44389de64496fe134dcf199</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.16.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/collections/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-collections4</name>
      <version>4.4</version>
      <description>The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4a37023740719b391f10030362c86be6</hash>
        <hash alg="SHA-1">62ebe7544cb7164d87e0637a2a6a2bdc981395e8</hash>
        <hash alg="SHA-256">1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1</hash>
        <hash alg="SHA-512">5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f</hash>
        <hash alg="SHA-384">74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-collections/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-collections.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>3.0.0</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">195d5db8981fbec5fa18d5df9fad95ed</hash>
        <hash alg="SHA-1">5871fb60dc68d67da54a663c3fd636a10a532948</hash>
        <hash alg="SHA-256">bec0b24dcb23f9670172724826584802b80ae6cbdaba03bdebdef9327b962f6a</hash>
        <hash alg="SHA-512">399510f759fb48255c6298f3545c9b644372fbc9d7245e80e6b51f49da0ac9275d104092c537ac047d5a1312c7d191dee8d655ca8d760b59ce1452bf4370a6e0</hash>
        <hash alg="SHA-384">a7fa7a0b69f41518fdb70e847148e17d0909fb657cee127308fb6cd14f913c63c82608aeae3955f10b48d358a8addfee</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="vcs"><url>https://code.google.com/p/findbugs/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.ning/compress-lzf@1.1.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.ning</group>
      <name>compress-lzf</name>
      <version>1.1.2</version>
      <description>Compression codec for LZF encoding for particularly encoding/decoding, with reasonable compression.
Compressor is basic Lempel-Ziv codec, without Huffman (deflate/gzip) or statistical post-encoding.
See "http://oldhome.schmorp.de/marc/liblzf.html" for more on original LZF package.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f620dc5d92f58cfdb1c51895daf05f58</hash>
        <hash alg="SHA-1">d09d33ffa7bc1d987db92e5ebec926ff92b7cbdf</hash>
        <hash alg="SHA-256">a9a76c85a3cef3a22d4c0e8647a1449b638885f2ceb4d8c9f66df3c677cc228e</hash>
        <hash alg="SHA-512">ec119a239e5dc1a213ae06380cdaa1ab07049430485fd2e5651281ae53705feb4d5dd767ac87aca8e329adcd1e1325585d50b273738e6cb2b94b31c7156828b2</hash>
        <hash alg="SHA-384">f00e771ca4878a82ac6698fef4b8b17474fef2b3602ac850ec352a66d43cd798270a215313b17d98096e2f017eb7095a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.ning/compress-lzf@1.1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/ning/compress</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/ning/compress/issues</url></reference><reference type="vcs"><url>https://github.com/ning/compress</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar">
      <publisher>xerial.org</publisher>
      <group>org.xerial.snappy</group>
      <name>snappy-java</name>
      <version>1.1.10.5</version>
      <description>snappy-java: A fast compression/decompression library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a52ffcdbbe525b486237a7098e5c5ff7</hash>
        <hash alg="SHA-1">ac605269f3598506196e469f1fb0d7ed5c55059e</hash>
        <hash alg="SHA-256">0f3f1857ed33116583f480b4df5c0218836c47bfbc9c6221c0d73f356decf37b</hash>
        <hash alg="SHA-512">36c288aa84017b52362a49a20d1702151a16b9f58518b6877f11122941a549d94fab8d515f7f1ad6384fb94be569328abf862edaf970c10a16832498dfda853b</hash>
        <hash alg="SHA-384">693a542ca2471dec4da5fe582563aff1bf5238e1a8d1a1f79cd8138334f94f1112094fbd270b1637d983c9290084a6e1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/xerial/snappy-java</url></reference><reference type="vcs"><url>https://github.com/xerial/snappy-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar">
      <group>org.lz4</group>
      <name>lz4-java</name>
      <version>1.8.0</version>
      <description>Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">936a927700aa8fc3b75d21d7571171f6</hash>
        <hash alg="SHA-1">4b986a99445e49ea5fbf5d149c4b63f6ed6c6780</hash>
        <hash alg="SHA-256">d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef</hash>
        <hash alg="SHA-512">98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9</hash>
        <hash alg="SHA-384">8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.lz4/lz4-java@1.8.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/lz4/lz4-java</url></reference><reference type="vcs"><url>git://github.com/lz4/lz4-java.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.luben/zstd-jni@1.5.5-4?type=jar">
      <publisher>com.github.luben</publisher>
      <group>com.github.luben</group>
      <name>zstd-jni</name>
      <version>1.5.5-4</version>
      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fddac848b1d75ccd361f1183f19ee1e0</hash>
        <hash alg="SHA-1">d724d95eb8423d185e2efb8ba15f7f3fdf200cfb</hash>
        <hash alg="SHA-256">e234c9ccbe9e36e19cc36c633d15f4a461f1bdc985d66662a2abbaa89859e522</hash>
        <hash alg="SHA-512">d99732d7649e3b91b31c617a6811a0a9f1bf1cb6c89fcb275e5f27de9a50d34e939b50b2987c90147bdc52ffc82b794ccc62cca5523e9439a33e259e824b3f2a</hash>
        <hash alg="SHA-384">33ab16fe8848f0ad7a708c5cf3572d3f05d6c9fbf996a0121f86d0516978ea52a0941331caefdbbe164990f31978a449</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.luben/zstd-jni@1.5.5-4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/luben/zstd-jni</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.45?type=jar">
      <group>org.roaringbitmap</group>
      <name>RoaringBitmap</name>
      <version>0.9.45</version>
      <description>Roaring bitmaps are compressed bitmaps (also called bitsets) which tend to outperform conventional compressed bitmaps such as WAH or Concise.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c3b52f9b0f42b3b73588005e5cd905a1</hash>
        <hash alg="SHA-1">856885b6afb1cad048dd188eb126e16dc47dd713</hash>
        <hash alg="SHA-256">f3a88f1684b6a1622c1f4f4dbaac4f9fdb7d640e2abf37469a0a2d01a9ea1932</hash>
        <hash alg="SHA-512">65b6820d09e9666507f2293ac8cc2fe359fd4414952e97b2a295273d6cd6efbb0a6bf5768d3eabd60c16e7d1e5b91f8e5c54be5e018f54dad08e7daa66b99993</hash>
        <hash alg="SHA-384">3a5ccd0648edd7dba5ff3e45d8b71d47ec500420c8da039b2c08c04404ed195a1929b8193e725619fb1ba7a984111f34</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.45?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/RoaringBitmap/RoaringBitmap</url></reference><reference type="issue-tracker"><url>https://github.com/RoaringBitmap/RoaringBitmap/issues</url></reference><reference type="vcs"><url>https://github.com/RoaringBitmap/RoaringBitmap</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.roaringbitmap/shims@0.9.45?type=jar">
      <group>org.roaringbitmap</group>
      <name>shims</name>
      <version>0.9.45</version>
      <description>Roaring bitmaps are compressed bitmaps (also called bitsets) which tend to outperform conventional compressed bitmaps such as WAH or Concise.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2fdcac0fa9b0c8d81ec5bb6cf569d4f3</hash>
        <hash alg="SHA-1">480ae48bcdde25c911aad8d212ba2641fe9b4be9</hash>
        <hash alg="SHA-256">4af32f9523c6249ad00d76b69129f59ad22976ef8cff86b6dd5479f6a64cec8d</hash>
        <hash alg="SHA-512">44baa9a38c6d89f152322417e5f04ade56ec25a7b599d7c52f0eb3730499441bf54cac060cfcd5a31729621aa6f87dfd44fee99ab32051048aff824350cda94e</hash>
        <hash alg="SHA-384">bfb85995d9fd063cefceb7c44d7eeae5c75d1644246e71761c0e8858f6502fe81222a452ed079fef69188f102c16c662</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.roaringbitmap/shims@0.9.45?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/RoaringBitmap/RoaringBitmap</url></reference><reference type="issue-tracker"><url>https://github.com/RoaringBitmap/RoaringBitmap/issues</url></reference><reference type="vcs"><url>https://github.com/RoaringBitmap/RoaringBitmap</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.scala-lang.modules/scala-xml_2.12@2.1.0?type=jar">
      <publisher>org.scala-lang.modules</publisher>
      <group>org.scala-lang.modules</group>
      <name>scala-xml_2.12</name>
      <version>2.1.0</version>
      <description>scala-xml</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">eb4a36f663f35e5d97ba7f51b0e8bbca</hash>
        <hash alg="SHA-1">16b228fa6f9d5afece0f2d2d6d5b03d5372dbea4</hash>
        <hash alg="SHA-256">d9a6df43cfac692f05e7166d39aae4476a246dac7740c7794a3072f1a67280ce</hash>
        <hash alg="SHA-512">a4a60375d6f78c311b61e48f2be56ce048baf920615763ac37b72e43d9409892add045aec3630f58db9e0dd1746cd75358015089f5ee7816347e0adbef264677</hash>
        <hash alg="SHA-384">e0831c12d568272b475d95b32b6fcaae8920d781b8f9be28003e5f2ef7d768bf48d8d5fa175d30906f04d35e9ddf83ce</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.scala-lang.modules/scala-xml_2.12@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.scala-lang.org/</url></reference><reference type="issue-tracker"><url>https://github.com/scala/scala-xml/issues</url></reference><reference type="vcs"><url>https://github.com/scala/scala-xml</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.scala-lang.modules/scala-collection-compat_2.12@2.7.0?type=jar">
      <publisher>org.scala-lang.modules</publisher>
      <group>org.scala-lang.modules</group>
      <name>scala-collection-compat_2.12</name>
      <version>2.7.0</version>
      <description>scala-collection-compat</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">59f21493f985287092515ef1547ba75f</hash>
        <hash alg="SHA-1">4a53bc022fa7d4792bcb3fe2707e7cf80cd688a3</hash>
        <hash alg="SHA-256">fb68864a0248af0979d45921869eb1230b5926aa61e5c0a8737c3f73ae582e92</hash>
        <hash alg="SHA-512">93ca5477ea8cb12bba13731acbe15fbf30425d8a6c88c709a5546fd595ed4979c48922f612c853575dd7877acbabc10ad75e1d1d962f54a1795660d702f60a87</hash>
        <hash alg="SHA-384">780c45781ab75ef1d88c212926c38f211263f289e8f26b370962337f3846271f01dd53ba46576366931913598ce5ed3b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.scala-lang.modules/scala-collection-compat_2.12@2.7.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.scala-lang.org/</url></reference><reference type="issue-tracker"><url>https://github.com/scala/scala-collection-compat/issues</url></reference><reference type="vcs"><url>https://github.com/scala/scala-collection-compat</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar">
      <publisher>LAMP/EPFL</publisher>
      <group>org.scala-lang</group>
      <name>scala-library</name>
      <version>2.12.18</version>
      <description>Standard library for the Scala Programming Language</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a7dc0cf9f73ab2dffb2f34b69e93c349</hash>
        <hash alg="SHA-1">fa825f984172f6801e3d8c476071b1823c0a925b</hash>
        <hash alg="SHA-256">e51e6636c003359e106bea4ad99def70e613c290190c8c84f10f9560dd5b00ae</hash>
        <hash alg="SHA-512">d50e05a806168687b1526bc197ba626973121eb692e68f567a15a944eb44e3fec37d5147e000d3bd05d69dc9874695389041c6c16bdcc1e665c1ef04e01be67d</hash>
        <hash alg="SHA-384">7bec1053a4befc082a7ecbf13d8c17082e113fb5d4a1f389f2de8d23e11372b42941367a09878b236b830190ab32d80b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.scala-lang.org/</url></reference><reference type="issue-tracker"><url>https://github.com/scala/bug/issues</url></reference><reference type="vcs"><url>https://github.com/scala/scala</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.scala-lang/scala-reflect@2.12.18?type=jar">
      <publisher>LAMP/EPFL</publisher>
      <group>org.scala-lang</group>
      <name>scala-reflect</name>
      <version>2.12.18</version>
      <description>Reflection Library for the Scala Programming Language</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b642844f7dde3e3cc143275a85075242</hash>
        <hash alg="SHA-1">7e1a6985bfbe78bdc94f33613301ef385d4629b4</hash>
        <hash alg="SHA-256">d6a24e175246541ffcbc965a231aa1d3bb01d61def196f91495690fabf9783bc</hash>
        <hash alg="SHA-512">ef5661d7832123757eb3b30745860b56ca343b9268eab97519d7a0793a1035b8d452a46767ce65f2b5370c7be6f9dcf0ffdab4ac04e41fc0a85374987d4551ca</hash>
        <hash alg="SHA-384">0d372d4d3579397253939207b433de9092d460291beda2f39c6df4518e2b73cec69ae622be31115e4fec2efdd7f1cd6d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.scala-lang/scala-reflect@2.12.18?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.scala-lang.org/</url></reference><reference type="issue-tracker"><url>https://github.com/scala/bug/issues</url></reference><reference type="vcs"><url>https://github.com/scala/scala</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar">
      <publisher>org.json4s</publisher>
      <group>org.json4s</group>
      <name>json4s-jackson_2.12</name>
      <version>3.7.0-M11</version>
      <description>json4s-jackson</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">53dc7ac002aa4de2843799cd239aae2d</hash>
        <hash alg="SHA-1">54089dd27d932de33c329199474ad429ee076510</hash>
        <hash alg="SHA-256">d03ed279c83870b9bd624b1817fe6290822d7e74207d1e250860fbdd935643dc</hash>
        <hash alg="SHA-512">ad9084168bf882e70a4827d3bc1a6905a9f931e25d376aa75a3bc421410c870b3d6e33f5271cdc42504f254f54ddb33f0f1df8b3df93b9056e422b149d6dd367</hash>
        <hash alg="SHA-384">904c7e915b15ae824616ce1a8aaf7d13d67bcf0fdac05381cb852dafbc27429829d518b2abafce6c9392b2e5f8c6a7d7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/json4s/json4s</url></reference><reference type="vcs"><url>https://github.com/json4s/json4s</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.json4s/json4s-core_2.12@3.7.0-M11?type=jar">
      <publisher>org.json4s</publisher>
      <group>org.json4s</group>
      <name>json4s-core_2.12</name>
      <version>3.7.0-M11</version>
      <description>json4s-core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1db3cb3db15c895307cfd20b81e2d8a6</hash>
        <hash alg="SHA-1">4126de102c272d727ea0e1875ee3db9f6ac7060f</hash>
        <hash alg="SHA-256">2fd8e66a3715565294c4edb5d2514e7ff59a14960c7f8dd84cf0991661a48a10</hash>
        <hash alg="SHA-512">7347a1bf54151a42dcf2aade3ca125da563c025644f935497a5c5e060198652c3ee7c52ee6de484a8f45aef1ab585dc831fbf5ae14395712236e752aec476861</hash>
        <hash alg="SHA-384">f6501957f7a579ee24997061ca3ea416d487906f386382c9d39e9cd8816efb180fd6489a8ff0551dc1e00e083810105e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.json4s/json4s-core_2.12@3.7.0-M11?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/json4s/json4s</url></reference><reference type="vcs"><url>https://github.com/json4s/json4s</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.json4s/json4s-ast_2.12@3.7.0-M11?type=jar">
      <publisher>org.json4s</publisher>
      <group>org.json4s</group>
      <name>json4s-ast_2.12</name>
      <version>3.7.0-M11</version>
      <description>json4s-ast</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f106ddf363ca77383877ccb0bdeaa425</hash>
        <hash alg="SHA-1">f8c92b6b7cb37f3e2fdf649ad1ba3d65248bb45d</hash>
        <hash alg="SHA-256">f9388c0ad4a969bf1a1867e85ce24ed87ca5a1095342b96b35c356fd971b544d</hash>
        <hash alg="SHA-512">806f72c85625f66a0de4c1629e354ba687b55e303899de0a6b8fbe256ed674da1aedf04471b7cbe969ee5a21ff48a2d97dab2145229f8e04f7d886087336de61</hash>
        <hash alg="SHA-384">99795db385defb8e98d94b6d52041ec35b9c914f0b1d0267aa737641bcd677cf07468885f09e8ef383e0052b45fca30f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.json4s/json4s-ast_2.12@3.7.0-M11?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/json4s/json4s</url></reference><reference type="vcs"><url>https://github.com/json4s/json4s</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.json4s/json4s-scalap_2.12@3.7.0-M11?type=jar">
      <publisher>org.json4s</publisher>
      <group>org.json4s</group>
      <name>json4s-scalap_2.12</name>
      <version>3.7.0-M11</version>
      <description>json4s-scalap</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2a5d1806ab0330c4e355c34a13afaf9e</hash>
        <hash alg="SHA-1">5a5aafd028f7ac4a8565e1cebe1307c146c87f70</hash>
        <hash alg="SHA-256">d2a1f84b618e1cba12c4e8ce2babc23d78a12de5f568abf8fbaeca39c52e0eb8</hash>
        <hash alg="SHA-512">ff1771820f477f755982690dc5d32c8f24a075263d0e8ab83a4f3cac4824a8cd522860661f7689b28c65550a80775e269461f3bd7c827a80bd70967444a13368</hash>
        <hash alg="SHA-384">924e5e9aaa2f7823b1d275c866c3713a33be2458bf7aa60a73f4b6989babf07f2d4ee723a7175469eb4c77f7fb4478ed</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.json4s/json4s-scalap_2.12@3.7.0-M11?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/json4s/json4s</url></reference><reference type="vcs"><url>https://github.com/json4s/json4s</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jersey.core/jersey-client@2.40?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jersey.core</group>
      <name>jersey-client</name>
      <version>2.40</version>
      <description>Jersey core client implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c885d8f7fe001573e1f9921c44fae1c4</hash>
        <hash alg="SHA-1">231decdfc01b6c73411af2577a502c19632a1ed0</hash>
        <hash alg="SHA-256">fdeaa03c46a8a0c7618a751617c6beccdebc8082d0e992c0c7965bc50fd7daa0</hash>
        <hash alg="SHA-512">453f0f3e717c4c47ea96b96f1e79d1e98a6adbbe6b35d56d6d25676a52a1271bfc3d6bcf1b47c7bfb07c807bc1e6d94def62681f8f02e183ad70f5935bf63b1c</hash>
        <hash alg="SHA-384">948dfcc169a88aef9c64d84737b093afc50aa03d5a8e499bda33c0858f2d2dee521f0d666a597eba3fce0313e5612c1e</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
        <license>
          <id>BSD-3-Clause</id>
        </license>
        <license>
          <id>BSD-2-Clause</id>
        </license>
        <license>
          <name>Apache License, 2.0</name>
          <url>http://www.apache.org/licenses/LICENSE-2.0.html</url>
        </license>
        <license>
          <name>Public Domain</name>
          <url>https://creativecommons.org/publicdomain/zero/1.0/</url>
        </license>
        <license>
          <name>Modified BSD</name>
          <url>https://asm.ow2.io/license.html</url>
        </license>
        <license>
          <name>jQuery license</name>
          <url>jquery.org/license</url>
        </license>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
        <license>
          <name>W3C license</name>
          <url>https://www.w3.org/Consortium/Legal/copyright-documents-19990405</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jersey.core/jersey-client@2.40?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.jersey/jersey-client</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jersey/issues</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jersey/jersey-client</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.ws.rs</group>
      <name>jakarta.ws.rs-api</name>
      <version>2.1.6</version>
      <description>Jakarta RESTful Web Services API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c3892382aeb5c54085b22b1890511d29</hash>
        <hash alg="SHA-1">1dcb770bce80a490dff49729b99c7a60e9ecb122</hash>
        <hash alg="SHA-256">4cea299c846c8a6e6470cbfc2f7c391bc29b9caa2f9264ac1064ba91691f4adf</hash>
        <hash alg="SHA-512">c1e2655269b9a32f9c0aec9edf12bf6d8b397d8cbcf60e28dd21ab13ecc2738800ebe5c2d49ed3c50d4dac6617671f0fae873daf8ec116a16ef7f7f0a3bef7fa</hash>
        <hash alg="SHA-384">3fd05e2b167d927216d3b2fc9d1c5a70aa3911d075c2159f958ce755c6a41d93bd76f0ce79ccd22e5a60182aa91fdb07</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/jaxrs-api</url></reference><reference type="distribution"><url>https://repo.eclipse.org/content/repositories/jax-rs-api-releases/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxrs-api/issues</url></reference><reference type="mailing-list"><url>jaxrs-dev@eclipse.org</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxrs-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>org.glassfish.hk2.external</group>
      <name>jakarta.inject</name>
      <version>2.6.1</version>
      <description>Injection API (JSR 330) version ${javax.inject.version} repackaged as OSGi bundle</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4d7c80a1e3cd54531af03bef4537f7af</hash>
        <hash alg="SHA-1">8096ebf722902e75fbd4f532a751e514f02e1eb7</hash>
        <hash alg="SHA-256">5e88c123b3e41bca788b2683118867d9b6dec714247ea91c588aed46a36ee24f</hash>
        <hash alg="SHA-512">7fc8196ad9ee03a831dfff85c945e416c3906071a7aa8ebf6ab8b7008dfec0adccc1f1dca53ed6768ac5676cd4b3c43471674f97ff73e1f61f5a427aaed68e05</hash>
        <hash alg="SHA-384">6b3ea9eeec5cbbc1fb3e6c89160af67b82ffbd68948dd4790e3fe3ce2fc495c063698a7d6a1998d5db51abafe3915e19</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/glassfish-hk2/external/jakarta.inject</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/glassfish-hk2/external/jakarta.inject</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jersey.core/jersey-common@2.40?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jersey.core</group>
      <name>jersey-common</name>
      <version>2.40</version>
      <description>Jersey core common packages</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1ad4fbdae8cdaa6dc973f4b3291c7ff0</hash>
        <hash alg="SHA-1">b826a4ebfcf316b7f168a41dc07657f0b889e6a3</hash>
        <hash alg="SHA-256">dac402e730e12816ba72b1fe3107301efb0a589ca65617255d86bc5b705080fe</hash>
        <hash alg="SHA-512">fe3e2bdb11e23751ad02a84b2af46e857c944824226dd1368e49ff257748a0d58c52f0c7c321d64235c948848ccedb202bea79227bc7a9d2de7498834f9fedcf</hash>
        <hash alg="SHA-384">6012543a933c4f6bbacff7ba98bcc4bc234492c1dd3beffeb572f0a6a9cea9b74a061bce24673abd5fb835afaef2bcbb</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <name>The GNU General Public License (GPL), Version 2, With Classpath Exception</name>
          <url>https://www.gnu.org/software/classpath/license.html</url>
        </license>
        <license>
          <name>Apache License, 2.0</name>
          <url>http://www.apache.org/licenses/LICENSE-2.0.html</url>
        </license>
        <license>
          <name>Public Domain</name>
          <url>https://creativecommons.org/publicdomain/zero/1.0/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jersey.core/jersey-common@2.40?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.jersey/jersey-common</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jersey/issues</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jersey/jersey-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.annotation</group>
      <name>jakarta.annotation-api</name>
      <version>1.3.5</version>
      <description>Jakarta Annotations API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8b165cf58df5f8c2a222f637c0a07c97</hash>
        <hash alg="SHA-1">59eb84ee0d616332ff44aba065f3888cf002cd2d</hash>
        <hash alg="SHA-256">85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a</hash>
        <hash alg="SHA-512">d1acff146c0f9ea923a9325ad4c22ba2052ec474341ab8392abab7e8abd3ca010db2400ff9b5849fc4f1fa5c0a18830eb104da07a13bd26b4f0a43d167935878</hash>
        <hash alg="SHA-384">004a4bde333c0575f72df1cb9cf95ee0c6c7f738a6f0f723a5ec545aaa1664abeb82f01627708a1377e3136754fb7859</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.ca</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/common-annotations-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/ca-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/common-annotations-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.hk2</group>
      <name>osgi-resource-locator</name>
      <version>1.0.3</version>
      <description>Used by various API providers that rely on META-INF/services mechanism to locate providers.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e7e82b82118c5387ae45f7bf3892909b</hash>
        <hash alg="SHA-1">de3b21279df7e755e38275137539be5e2c80dd58</hash>
        <hash alg="SHA-256">aab5d7849f7cfcda2cc7c541ba1bd365151d42276f151c825387245dfde3dd74</hash>
        <hash alg="SHA-512">4d84983a9b1c72f58661b576c78ca456a2106602c2ad211cd7e72d94464c8774173b34a35629c507c7c84c982f1de0c9bf48352458e8480be5f874d20d6e69a3</hash>
        <hash alg="SHA-384">9f92002296c66cc8996d459b95a9c531ec71b98a8b819121abbc7d636a6c4ace04c88878ba6917f71650280a880d1ce2</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j/osgi-resource-locator</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/ee4j/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/glassfish-hk2-extra</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jersey.core/jersey-server@2.40?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jersey.core</group>
      <name>jersey-server</name>
      <version>2.40</version>
      <description>Jersey core server implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">abc122c513ee2586c1aef3e365066a3f</hash>
        <hash alg="SHA-1">4550ae3be0d3e0434144c2e9ae9ef46041571b1b</hash>
        <hash alg="SHA-256">ffa6c93f15f9543158841e0d7e102c3ba9bd6f845db2dde0aad3518bc417d178</hash>
        <hash alg="SHA-512">1a270e2418a0049a5f57a9b7638a8d6d8bc06e66383aefaf0129f9cf8f0637311680f6f5e69bbd53ba1dcb6e2c37d337b4368cbb2dde0c33ea761086b74a2310</hash>
        <hash alg="SHA-384">5c09292f2641725e64af1c27884d82e3da088d77f8923b48e7c7197b7157f7eb77aa1a2fdcd7cafa647b306865b88e37</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <name>The GNU General Public License (GPL), Version 2, With Classpath Exception</name>
          <url>https://www.gnu.org/software/classpath/license.html</url>
        </license>
        <license>
          <name>Apache License, 2.0</name>
          <url>http://www.apache.org/licenses/LICENSE-2.0.html</url>
        </license>
        <license>
          <name>Modified BSD</name>
          <url>https://asm.ow2.io/license.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jersey.core/jersey-server@2.40?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.jersey/jersey-server</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jersey/issues</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jersey/jersey-server</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.validation</group>
      <name>jakarta.validation-api</name>
      <version>2.0.2</version>
      <description>Jakarta Bean Validation API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">77501d529c1928c9bac2500cc9f93fb0</hash>
        <hash alg="SHA-1">5eacc6522521f7eacb081f95cee1e231648461e7</hash>
        <hash alg="SHA-256">b42d42428f3d922c892a909fa043287d577c0c5b165ad9b7d568cebf87fc9ea4</hash>
        <hash alg="SHA-512">3ca8556b80ca809b3a43fac31469702bbad62a00e63b11a304dad1e372d9f6c128357463a4c70c423055941c7e2e417f87a9474a204d189c8e4b62f42047c8eb</hash>
        <hash alg="SHA-384">6ae3963fd6a5e83b068a8344b88f6bfbd26d29cee64193025bc5e98195678e49826463da27a7a1c15cd83b2149d57a94</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://beanvalidation.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://hibernate.atlassian.net/projects/BVAL/</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/beanvalidation-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.40?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jersey.containers</group>
      <name>jersey-container-servlet</name>
      <version>2.40</version>
      <description>Jersey core Servlet 3.x implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3e303adf09b3881f932f6d400b94c400</hash>
        <hash alg="SHA-1">a06f7096c476fd127a22f18fe767c5175f4b4dbf</hash>
        <hash alg="SHA-256">f16fc54ca51c0964a9a187e277dce0fa36b296c3d02b02bd685589b5f2766ed2</hash>
        <hash alg="SHA-512">094b06b40727a2d5b3eb039ab789ad17d59a3debf20f98165bd52de82013b3b8bd79df770f87a15c4fecd57037dd205b787998549e3f94d7838437cddf87e8e9</hash>
        <hash alg="SHA-384">0e7a3201808a31452081ca32fbd785d6df340698d8a73223bab78dd55035fd5803f0c508b334825aae2625f43cc39d0e</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
        <license>
          <id>BSD-3-Clause</id>
        </license>
        <license>
          <id>BSD-2-Clause</id>
        </license>
        <license>
          <name>Apache License, 2.0</name>
          <url>http://www.apache.org/licenses/LICENSE-2.0.html</url>
        </license>
        <license>
          <name>Public Domain</name>
          <url>https://creativecommons.org/publicdomain/zero/1.0/</url>
        </license>
        <license>
          <name>Modified BSD</name>
          <url>https://asm.ow2.io/license.html</url>
        </license>
        <license>
          <name>jQuery license</name>
          <url>jquery.org/license</url>
        </license>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
        <license>
          <name>W3C license</name>
          <url>https://www.w3.org/Consortium/Legal/copyright-documents-19990405</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.40?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-container-servlet</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jersey/issues</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jersey/project/jersey-container-servlet</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.40?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jersey.containers</group>
      <name>jersey-container-servlet-core</name>
      <version>2.40</version>
      <description>Jersey core Servlet 2.x implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e24021b08e3725b8923b4ecc8df43631</hash>
        <hash alg="SHA-1">b1c171b170fc0b062f04842991de043765c84ec2</hash>
        <hash alg="SHA-256">689909c8dbcebdbd91e80f79e057115904c02f7ee04dff9aabadc66243760fc0</hash>
        <hash alg="SHA-512">c413193139cfa25b6c9ce81d2da3bcc0089168f7df9c15eef46a6d517d655914566f56a3dcefa9855edd743a7240032ea758db907509c9a82adf357cc617752b</hash>
        <hash alg="SHA-384">3b7aca1d9f5f69f3cd53145a398711991c6965df4409a790ca1401555948a38e4646e54d8deb532e84e2d07690b2fc22</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
        <license>
          <id>BSD-3-Clause</id>
        </license>
        <license>
          <id>BSD-2-Clause</id>
        </license>
        <license>
          <name>Apache License, 2.0</name>
          <url>http://www.apache.org/licenses/LICENSE-2.0.html</url>
        </license>
        <license>
          <name>Public Domain</name>
          <url>https://creativecommons.org/publicdomain/zero/1.0/</url>
        </license>
        <license>
          <name>Modified BSD</name>
          <url>https://asm.ow2.io/license.html</url>
        </license>
        <license>
          <name>jQuery license</name>
          <url>jquery.org/license</url>
        </license>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
        <license>
          <name>W3C license</name>
          <url>https://www.w3.org/Consortium/Legal/copyright-documents-19990405</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.40?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-container-servlet-core</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jersey/issues</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jersey/project/jersey-container-servlet-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.40?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jersey.inject</group>
      <name>jersey-hk2</name>
      <version>2.40</version>
      <description>HK2 InjectionManager implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">25d9df975277390b7c2820eea9339c20</hash>
        <hash alg="SHA-1">4c94775bdcce0c2e32b231f6c638e82bfe3b6eee</hash>
        <hash alg="SHA-256">e5f69ac32a5c82e0603fb90b689bf9ef0ba237b3ba4f2bba3159f7d8c756b397</hash>
        <hash alg="SHA-512">7039589d078ac6371cab996f97cd47a34d029da63557ec59125df9bec860af45fa07f3cac9e5d5423d55fd4b8d81cbeda46725d645b1134fa58ab88253850bcd</hash>
        <hash alg="SHA-384">9e1a52da5def5d87baebe8bcde4e6bb25e3f29203d7bca0142d71472a246232b1e4d652369f32911c3bb4a546b4bf219</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
        <license>
          <id>BSD-3-Clause</id>
        </license>
        <license>
          <id>BSD-2-Clause</id>
        </license>
        <license>
          <name>Apache License, 2.0</name>
          <url>http://www.apache.org/licenses/LICENSE-2.0.html</url>
        </license>
        <license>
          <name>Public Domain</name>
          <url>https://creativecommons.org/publicdomain/zero/1.0/</url>
        </license>
        <license>
          <name>Modified BSD</name>
          <url>https://asm.ow2.io/license.html</url>
        </license>
        <license>
          <name>jQuery license</name>
          <url>jquery.org/license</url>
        </license>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
        <license>
          <name>W3C license</name>
          <url>https://www.w3.org/Consortium/Legal/copyright-documents-19990405</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.40?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-hk2</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jersey/issues</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jersey/project/jersey-hk2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>org.glassfish.hk2</group>
      <name>hk2-locator</name>
      <version>2.6.1</version>
      <description>ServiceLocator Default Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dfd358720393d83b01747928db6e3912</hash>
        <hash alg="SHA-1">9dedf9d2022e38ec0743ed44c1ac94ad6149acdd</hash>
        <hash alg="SHA-256">febc668deb9f2000c76bd4918d8086c0a4c74d07bd0c60486b72c6bd38b62874</hash>
        <hash alg="SHA-512">e2c87a265f114042f4c04397db4adca7291fd68e08e97129576ceb603287b57ccf5b03d0c285727ebb8cd7f88009280bdeab4254475d59da1ac41ba57b7cdecb</hash>
        <hash alg="SHA-384">05afff9ebfdbdaed71770a58fe334751b9ac7476eb4114e08fc376bf4e16226b5016784c99c3dd8cb04c79d954068402</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>org.glassfish.hk2.external</group>
      <name>aopalliance-repackaged</name>
      <version>2.6.1</version>
      <description>Dependency Injection Kernel</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0237846ebdaa7db36b356044a373ffba</hash>
        <hash alg="SHA-1">b2eb0a83bcbb44cc5d25f8b18f23be116313a638</hash>
        <hash alg="SHA-256">bad77f9278d753406360af9e4747bd9b3161554ea9cd3d62411a0ae1f2c141fd</hash>
        <hash alg="SHA-512">2d9e5395ba887fa5bb6a8209b731292d440f5c1db2fccaf56c41b1f1d9f774733da28aa8b9b769e765fe62f3640d7bcb2cf6140f0044a8b576e9e45144038c46</hash>
        <hash alg="SHA-384">f481e2a4e18308a1a0bd85e79f95711434436fa69a504fe98a3d7ea899eaed505a5cb2bfe08f41d1b2af56e150ec0741</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>org.glassfish.hk2</group>
      <name>hk2-api</name>
      <version>2.6.1</version>
      <description>HK2 API module</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">23e8c18dae0c7b776bed756763d5153f</hash>
        <hash alg="SHA-1">114bd7afb4a1bd9993527f52a08a252b5d2acac5</hash>
        <hash alg="SHA-256">c2cb80a01e58440ae57d5ee59af4d4d94e5180e04aff112b0cb611c07d61e773</hash>
        <hash alg="SHA-512">9abe9f78d7f6c805b6c7b515579230e5fa573abbcd818bed56068080d6458608e2e99d5937eb959cf1e4f4cfdc4f790059dfc1231313cd8f30aaefbf518eb1c7</hash>
        <hash alg="SHA-384">2236ca10af39c4f4f6f1ac63c3652eaa4124bce8f557f8ebaa78576e00c25b986ee9d7e417db6edb9a06aa46b36f4d24</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>org.glassfish.hk2</group>
      <name>hk2-utils</name>
      <version>2.6.1</version>
      <description>HK2 Implementation Utilities</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">75ccb55538a77bf878996497ffeb86f3</hash>
        <hash alg="SHA-1">396513aa96c1d5a10aa4f75c4dcbf259a698d62d</hash>
        <hash alg="SHA-256">30727f79086452fdefdab08451d982c2082aa239d9f75cdeb1ba271e3c887036</hash>
        <hash alg="SHA-512">8da7cd88de45270b1fcfd2c471ae092b3972af78a6e0ecc76ed4ac10b6bd6712d2a538bd163a457f21cea4e7e5c52f547108f44aaa791ed0fd069f697f1282c1</hash>
        <hash alg="SHA-384">94fb55c1f57b96fd84e717fbf3c254f16e2308bc33976addb71d26bf367b7c2ec63e657a953f30f55d7046dd07510e50</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar">
      <publisher>Shigeru Chiba, www.javassist.org</publisher>
      <group>org.javassist</group>
      <name>javassist</name>
      <version>3.29.2-GA</version>
      <description>Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple.  It is a class library for editing bytecodes in Java.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9783c90ffa4d36eddda9526fde06f3ea</hash>
        <hash alg="SHA-1">6c32028609e5dd4a1b78e10fbcd122b09b3928b1</hash>
        <hash alg="SHA-256">a90ddb25135df9e57ea9bd4e224e219554929758f9bae9965f29f81d60a3293f</hash>
        <hash alg="SHA-512">5f9e939a0c094e2c4d4b8509c126fcb9033ea47c2577e172b2326c8aceb86b5bc3168d056b3d986c7bb3d3f46ed6fed3155c77734afcbb8cb75162df0375a657</hash>
        <hash alg="SHA-384">8b1f8b7235a7aeab500bcff13b5f88fe95df983502975021ac7d5edd0c73d708f65da48796f5680f2ef710fed9d0e0aa</hash>
      </hashes>
      <licenses>
        <license>
          <id>MPL-1.1</id>
        </license>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.javassist.org/</url></reference><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://jira.jboss.org/jira/browse/JASSIST/</url></reference><reference type="vcs"><url>scm:git:git@github.com:jboss-javassist/javassist.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-all@4.1.96.Final?type=jar">
      <group>io.netty</group>
      <name>netty-all</name>
      <version>4.1.96.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">46f83444d7c3ca4de0604192c05a8bca</hash>
        <hash alg="SHA-1">2145ec747511965e4a57099767654cf9083ce8a7</hash>
        <hash alg="SHA-256">88909513ab90dd1456488b99a8544b071a9137f0eb15e1c62848b6aef96fc917</hash>
        <hash alg="SHA-512">273d0efeac083438c1925896fbfc56aa0e1e78d269e261a353af51c35e14f179616f3770aa290cc2347e2b573df45e1b62faf76e352b17f6b88e499d43eb14f0</hash>
        <hash alg="SHA-384">e7709f9829fbdb44bac680fdcd319622a2b954eaa5631a6adecba0dd6e196142aaf519cf182c61f0263ed6a4f90ac174</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-all@4.1.96.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-all/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-all</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-buffer@4.1.96.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-buffer</name>
      <version>4.1.96.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c3f08e639d22f2748a5660498761e92b</hash>
        <hash alg="SHA-1">4b80fffbe77485b457bf844289bf1801f61b9e91</hash>
        <hash alg="SHA-256">1dee6f5b4aa485339d49525ec3689463f724785fc35e7db02f9e46cbdecbe335</hash>
        <hash alg="SHA-512">2f6e0d7f1a9237c596b595487ac98c92e50426a18bc78d52e6463cf9f5d6c7872a4c6e32f5e0b55499419e8bdf6f5037be1b5f0e4909b1482abc536fc6fd946f</hash>
        <hash alg="SHA-384">ad976a4ceb755a6d7f4eae0d2f7337048b52d4e90b53d452ac9037f55a45ddd7c25bb7e0422ec34379f715dd29008fb9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-buffer@4.1.96.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-buffer/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-buffer</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-codec@4.1.96.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-codec</name>
      <version>4.1.96.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">175181bab4a6445676792450f124f277</hash>
        <hash alg="SHA-1">9cfe430f8b14e7ba86969d8e1126aa0aae4d18f0</hash>
        <hash alg="SHA-256">07305d3e565fc01da310f1c8ea7935c08e42ff1977590f2d44fc1305cb470d60</hash>
        <hash alg="SHA-512">5ea90573bccd510a45d2af90f6db49a00bfb35674225a0e508f6d0c3111d460fd6e8bc1903fb8fb7d48089ad970a6578e3017b1230ed7231885cf437be6875c7</hash>
        <hash alg="SHA-384">f4b7c93725813ff72e64b1c870fa696b6cddf2df2e7a13c2278949dd7766ec0246f82a9762e8c5bc07dd74cfafee9012</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-codec@4.1.96.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-codec/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-codec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-codec-http@4.1.96.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-codec-http</name>
      <version>4.1.96.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d4fb641a425611aa91e6b7a3e7c83c69</hash>
        <hash alg="SHA-1">a4d0d95df5026965c454902ef3d6d84b81f89626</hash>
        <hash alg="SHA-256">b64808027d7d18c59126ff3a33012c43ac58a0798c1cd1e765f6f71a3fd4ff76</hash>
        <hash alg="SHA-512">12d7c15d379d6d23a6ef61edf0c19ffa404f300c226cff37caaf053e754da2364fbf5f3cc60cdbfee91f828706390e83a45fb4bbaa357d9bb2e5ec95433b831a</hash>
        <hash alg="SHA-384">2a7323c7f5a073985189b38c22d9393ea50ba0984d53c66304721484cabe27181fa6d0e90f35a3462f5681dd76421bb1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-codec-http@4.1.96.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-codec-http/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-codec-http</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-codec-http2@4.1.96.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-codec-http2</name>
      <version>4.1.96.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">deedd2c77e4e20084b9aa9ceb5119372</hash>
        <hash alg="SHA-1">cc8baf4ff67c1bcc0cde60bc5c2bb9447d92d9e6</hash>
        <hash alg="SHA-256">6eb87af9a396ba21a6cbbbd047c4b3139f40ded2feefba4632802e94c0ef24dd</hash>
        <hash alg="SHA-512">e1f240be7820920461675eb93b89bfea021f3f5dda895cb69a4007d4e174c5ab194fd9a785b7dd08cd783ec725ff71a43206597ffde2779804f1f8d906c1dbc3</hash>
        <hash alg="SHA-384">e58879e673b03410ec48e5fcd94eb51c8a3ca1597f946792cd0421f242ff4262e098d454521688f8f565968c37aa7c48</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-codec-http2@4.1.96.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-codec-http2/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-codec-http2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-codec-socks@4.1.96.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-codec-socks</name>
      <version>4.1.96.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">00af26bad44ea20b55ca3246381d987f</hash>
        <hash alg="SHA-1">f53c52dbddaa4a02a51430405792d3f30a89b147</hash>
        <hash alg="SHA-256">29de9bb7fe9633fcc3d2f8246293f8692aa5e5bd7ee2a425a0f211d5e6b493b8</hash>
        <hash alg="SHA-512">a636a907af8e6a670ba9e0d2ef7d02e98bb9d6173e22b93e05a27bbfcbd10af58b1d93878fa4b355eab49e2cf2cbfba9937ff4fac34d444a5d7c8ed9ed9878af</hash>
        <hash alg="SHA-384">20191f8d110c93b20c5d606e8bbc8872d2c9698e4478611ed93c624e8223b09e7717c96364d6a03f464cf208eabda2b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-codec-socks@4.1.96.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-codec-socks/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-codec-socks</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-common@4.1.96.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-common</name>
      <version>4.1.96.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f4160d8db7ea478573d81d9ed0d7b131</hash>
        <hash alg="SHA-1">d10c167623cbc471753f950846df241d1021655c</hash>
        <hash alg="SHA-256">da104e80db830922eaf860eb1c5e957cd1d124068253d02e9c7a7843bc66427a</hash>
        <hash alg="SHA-512">88cd84d3bb7e285d572b63dfefd6f41ac99e226317b13e28d15e99f62532ee03f3782e282513dd66fb4fa85a1f1007c4e3a08dbdf6af3701d39c9ee8b6d47854</hash>
        <hash alg="SHA-384">149eadec0b9d14d5ba0f6c07a44ff3a4dcf099357ca14f45d5570b4bf2d5f0ef77ac500b49b5a9fad38229a4ba54563a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-common@4.1.96.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-common/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-handler@4.1.96.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-handler</name>
      <version>4.1.96.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">44fe86cec3f6f4c8c933a5913ba7db87</hash>
        <hash alg="SHA-1">7840d7523d709e02961b647546f9d9dde1699306</hash>
        <hash alg="SHA-256">574ebef95a16053246ab692773d75d8bd7907b709e1083a096fa6ab2a6d6c2b3</hash>
        <hash alg="SHA-512">ab414f671972e7fe6e08778012f8c73d5c1bec1f6ba7eb658dd6220790c5e4d80d1ef7dcff35a3445fa0fb0418cad3ce0829f1074c20567e2eb8f8312023d153</hash>
        <hash alg="SHA-384">352881b672b26fab8c06406f33c610ff421f3711efd16a50fa404ccb06b2e69871f2d76702e69da9f93a61133444d620</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-handler@4.1.96.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-handler/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-handler</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.96.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-native-unix-common</name>
      <version>4.1.96.Final</version>
      <description>Static library which contains common unix utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b4bdb115c9a29c4e00994df5bdb53294</hash>
        <hash alg="SHA-1">daf8578cade63a01525ee9d70371fa78e6e91094</hash>
        <hash alg="SHA-256">4f96297a06a544a4cdb6fe6af8b868640f100fa96969e2196be216bd41adef13</hash>
        <hash alg="SHA-512">f135b399578d9a324d97c5a2f6292e8262a5dc4dbe0ccb308281bd56a450ae2e3cdace46bf2669f36239b4e960dccb5a30b1892fae18ceeb43e536315188b53a</hash>
        <hash alg="SHA-384">fa76a8962313cabf6218b70d4d47c69a18d5c0c308f4b742f1489b03da1bf775a05a24ce3e95bf4b84a0962638452269</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-native-unix-common@4.1.96.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-transport-native-unix-common/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-transport-native-unix-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-handler-proxy@4.1.96.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-handler-proxy</name>
      <version>4.1.96.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e545e64387fca02cd771e4cf58263f6d</hash>
        <hash alg="SHA-1">dcabd63f4aaec2b4cad7588bfdd4cd2c82287e38</hash>
        <hash alg="SHA-256">4832bbbab1daac36ecd04d2ed2dc586c4a57b4604d89145a2de487ff5b00e4cd</hash>
        <hash alg="SHA-512">1b3803744a88e9368a490af4196b60b23623aa7d9e45f67d63c42ff8ecb8b308d60d9b59065253f71ca0f12714ad2e3aeca7404290c16d4cec2678381e83e644</hash>
        <hash alg="SHA-384">bb75c13c0bed0d683d3c0619dfd5233b0946d2b972bcda11c0e20d7f2dcbc7b199d43b06a7a27e52aa4fa88af00910ab</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-handler-proxy@4.1.96.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-handler-proxy/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-handler-proxy</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-resolver@4.1.96.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-resolver</name>
      <version>4.1.96.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">405c47ca1ad8320313567febdfe14f6c</hash>
        <hash alg="SHA-1">0e51db5568a881e0f9b013b35617c597dc32f130</hash>
        <hash alg="SHA-256">54951fae449fa343038fc57855abf5822918d52ca5a302a421f327cad9c75cf1</hash>
        <hash alg="SHA-512">9a112bdfba66e0a409319dc80ebf689584f771b4188d2c8a5f5e436f52fcfe73ae5e2c538211147015c6b51459e0994a96c30bcba8b0947a60f64907c3e59ad4</hash>
        <hash alg="SHA-384">456ac8df2d85a674c4c70aa125c27e1786c32b426e5d6000b3681f4a3c9af56b09f6558c15d4157b5629fa2e851715b3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-resolver@4.1.96.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-resolver/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-resolver</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport@4.1.96.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport</name>
      <version>4.1.96.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">399c3790cee935549188e9278bd776f0</hash>
        <hash alg="SHA-1">dbd15ca244be28e1a98ed29b9d755edbfa737e02</hash>
        <hash alg="SHA-256">8fe3afbe8b094a7b9f1eb27becf1cf017e5572343c1744d2b6040d5f331e84e3</hash>
        <hash alg="SHA-512">03b8d37fa8ac0735e63367bad881cc8615a4539aedffae8a43234431353d4a68419e43721bb403a6c43c76277c88d4aced9a2df5bdd132d997e9e3897f194887</hash>
        <hash alg="SHA-384">81dffe7ffd6c4ece4e5abf70f684ae5e814cda658a93cae19d1cd31237d90f8adb27a07cb969daccf1e285d3d5891126</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport@4.1.96.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-transport/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-transport</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-classes-epoll@4.1.96.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-classes-epoll</name>
      <version>4.1.96.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">da2406ec974699953aac1f77b18b8fde</hash>
        <hash alg="SHA-1">b0369501645f6e71f89ff7f77b5c5f52510a2e31</hash>
        <hash alg="SHA-256">1591b3ea061932677dc2bab6cb7d82e8f1837a52b3c781f4daa99984ec87a9cd</hash>
        <hash alg="SHA-512">c531b40a3f95c2bbc3cd67e44fa49a1ca29111512efaab26a8d5bf0febee389a272df28127f929525c2d571cccfb8b7958c040a2bafff46a1a3f7898a9a4c6f5</hash>
        <hash alg="SHA-384">c61fc598cb34d219fd218ae3e205d35a3fb276a0cdf92aad08283daa77dad6494d51a32cf0f1f313ffaa636c9bd9e969</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-classes-epoll@4.1.96.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-transport-classes-epoll/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-transport-classes-epoll</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.96.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-classes-kqueue</name>
      <version>4.1.96.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ad1b1afb29994560ee3eeddb98308a01</hash>
        <hash alg="SHA-1">782f6bbb8dd5401599d272ea0fb81d1356bdffb2</hash>
        <hash alg="SHA-256">f2f1fab3b297aee20a3922c79b548c8b4b72bb10b635375434c108ee05f29430</hash>
        <hash alg="SHA-512">50eade39792c628792679d771b38256fcbdd22eec9dc0f68e2b5a4c9c71ba5b7d41364656df01cde1a4be2041a9f7a4d9628cbcf45b7e657b0bf13265576a615</hash>
        <hash alg="SHA-384">a72fba06c47cfc5d06f491395c27131a335995f5b7577b4ccaf7d80ae0a888e068356c47380359ab1393b58ff980188b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.96.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-transport-classes-kqueue/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-transport-classes-kqueue</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-x86_64&amp;type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-native-epoll</name>
      <version>4.1.96.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bc9808cf42cc59ff19497f6f2dce9ac4</hash>
        <hash alg="SHA-1">3f8904e072cfc9a8d67c6fe567c39bcbce5c9c55</hash>
        <hash alg="SHA-256">9363c8131744931d54db62d03922563aa5ddc96db53910beb9c2953bfa8bca34</hash>
        <hash alg="SHA-512">9fd5830fa697bf41851b14a00597b9f03b18055883a38897b5bcb23140a7f522e0a524dd339feeb9a6fd25633287f4ea37a5e5c93fcaa2e76258508802cbd55b</hash>
        <hash alg="SHA-384">b2e0a4eea045384f779b55054a2cebade06e0c27f61950314ddbc0b3034f3dbf680863e213dde69c4aed3cb77b7e4cdc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-x86_64&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-transport-native-epoll/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-transport-native-epoll</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-aarch_64&amp;type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-native-epoll</name>
      <version>4.1.96.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">80aafea66fc444b4d8cbfad53e69c7f7</hash>
        <hash alg="SHA-1">cae778ab150745432a90d4f26f6174fe564f56fc</hash>
        <hash alg="SHA-256">1f02bf3599366231064ee99fc8c621eb97eaac1e40ba472ffe4de968eb186b7e</hash>
        <hash alg="SHA-512">bc6b7f767c8b25b6c3be20e12224c337e349d81b2a741c2b38db776c422f472787023b15eb52a12ec0f49e2d3c152ca428ca3a30a0cbf45c7e7909662b46a977</hash>
        <hash alg="SHA-384">3c6126cbe05b8a14d905518c5cb515ede5a7c634989650df2b658310eb45209557004941bd3de3cb5705a63dc488ace7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-aarch_64&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-transport-native-epoll/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-transport-native-epoll</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-aarch_64&amp;type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-native-kqueue</name>
      <version>4.1.96.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5153b107e349cad3e4301f1968de8cc3</hash>
        <hash alg="SHA-1">070b3e957eec0cd78637c3bd15a8a4b24e653f87</hash>
        <hash alg="SHA-256">c5e228db77b235fc3e2df0afe0128904022893f1db5395fb8bd44257ada268c5</hash>
        <hash alg="SHA-512">6246162950baf29fb7a952c6289a5830a8bb65d057cc1262bfe7b5365527c73223324eb6a682f5ce4e55eeff4fd04f35ae326ac6ae98be3185c5b6da89adf89d</hash>
        <hash alg="SHA-384">3f2878cd18a27edde2ef5d200eacc6e9d705c43f0cf5d64e4ade60be6f28f38129862290f4931a7dca35ec122df07578</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-aarch_64&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-transport-native-kqueue/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-transport-native-kqueue</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-x86_64&amp;type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-native-kqueue</name>
      <version>4.1.96.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3358edcfbbf22751db678a3be1386396</hash>
        <hash alg="SHA-1">c127ed313fc80cf2cb366dccfded1daddc89a8ef</hash>
        <hash alg="SHA-256">89f1a331da4fd49d39ac83e03f4cdb04417bd7ce32f522ef2eb670e09225add6</hash>
        <hash alg="SHA-512">ae4aac703b720b6fcd0a109c85719baec7a1a38f362c9eda7c81ddd4faa38511fd059c725015b5ed469ea280bccf6bbbd5cabaa48c076cefc59b25d8c0cd8a29</hash>
        <hash alg="SHA-384">477bcdaf50fd851be646a9016b9d07c2d0e36f0287016b1f3d70da8da646494e7b9f08e728028063fa15b5a9992993d2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-x86_64&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-transport-native-kqueue/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-transport-native-kqueue</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.clearspring.analytics/stream@2.9.6?type=jar">
      <publisher>AddThis</publisher>
      <group>com.clearspring.analytics</group>
      <name>stream</name>
      <version>2.9.6</version>
      <description>A library for summarizing data in streams for which it is infeasible to store all events</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">298278ea2ea29ce1da1a956dd6fad4d4</hash>
        <hash alg="SHA-1">f9c235bdf6681756b8d4b5429f6e7217597c37ef</hash>
        <hash alg="SHA-256">d61aebbea8a08148c3aca6b03464495a4bbf9d362205d54ea5f6b443af73afdf</hash>
        <hash alg="SHA-512">cc9bb80ee82576c035827a3b41f4cee0852b37c80374619c4ddba349be1d4387ad657130caabafab28d50c4869e44c1d3eb852c6370c583ca42a03ee88799406</hash>
        <hash alg="SHA-384">b40935d7d5d780b7fd5306759c7aeaf2f1477beefa3626e7a0324305f5ab2efcb7656788767baf4f631f00f198c17873</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.clearspring.analytics/stream@2.9.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/addthis/stream-lib</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="vcs"><url>https://github.com/addthis/stream-lib</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-core</name>
      <version>4.2.19</version>
      <description>Metrics is a Java library which gives you unparalleled insight into what your code does in
        production. Metrics provides a powerful toolkit of ways to measure the behavior of critical
        components in your production environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd9caf026f4330b51c6308e6d0749084</hash>
        <hash alg="SHA-1">d32b4c3f3e733bf4cb239ca4204fbed8464973a5</hash>
        <hash alg="SHA-256">fa967bc2b37c8bff5bc377e60e439504fd9df5d335c7a42b37212403250023df</hash>
        <hash alg="SHA-512">dd1af2a8104e344ebdba21a7366c6aedfeaba7e03861af9c1ed53c82ce2c51e7a6034c46a6ad9a5e55e20670b5c490e178105c944c4f91b07d4be5455bb13dcc</hash>
        <hash alg="SHA-384">c6a6077f528be485082e2418b0f7d87e28a91d07d66bd861bd23fac60fd99e4828c5cfa8722ead6e69d5cde030ff465f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar</purl>
      <externalReferences><reference type="website"><url>https://metrics.dropwizard.io/metrics-core</url></reference><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-core/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.19?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-jvm</name>
      <version>4.2.19</version>
      <description>A set of classes which allow you to monitor critical aspects of your Java Virtual Machine
        using Metrics.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6de530c7794c0d324169aede9831a410</hash>
        <hash alg="SHA-1">13bb7b51914d43a7709f7b477b98f3732aaa03e4</hash>
        <hash alg="SHA-256">996a602152db07aa5cbc669265b564099c20acef2508ec5e717f20b98b5acbc5</hash>
        <hash alg="SHA-512">c076180eca8337b69dc5d6d3f08d3bfa83798f4d9501b745fba45539ce1656aa05b970340cee04ba143e6eaa263ac8de9f8f3d4ce856b05f34bf745a69539453</hash>
        <hash alg="SHA-384">5334104589e803d7a0ac2a147d5aedc4ca9cee7c70874e465a728cd80ec9ad135dd5731747575ed07159bb8f59b9eb7d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.19?type=jar</purl>
      <externalReferences><reference type="website"><url>https://metrics.dropwizard.io/metrics-jvm</url></reference><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-jvm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-json@4.2.19?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-json</name>
      <version>4.2.19</version>
      <description>A set of Jackson modules which provide serializers for most Metrics classes.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1340203cea37905d3f72ff20bf04f48b</hash>
        <hash alg="SHA-1">32afaab5bca42c8cbd4002f906b169d6c0fd4e4f</hash>
        <hash alg="SHA-256">cfbccdfd8fc073dbbd47ae734785c0a2a12a00c0c3903549719fc416e8b646c6</hash>
        <hash alg="SHA-512">472d110768089b1dfba53f6e5d35b86e312115eeaf0b7cbb010a9fcb1a0c2e2ffc41646d2f8d63635d5cc396dff75dfe1cec06168d0a6dc9262d7094cafbd044</hash>
        <hash alg="SHA-384">03cba41a9d9a16442973607601c1d8d5c2b76b345429fb9442f122f98777c6ce9ffbc161d9a42969fe7242932b5ddbe8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-json@4.2.19?type=jar</purl>
      <externalReferences><reference type="website"><url>https://metrics.dropwizard.io/metrics-json</url></reference><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-json/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.19?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-graphite</name>
      <version>4.2.19</version>
      <description>A reporter for Metrics which announces measurements to a Graphite server.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7608e89045df64926970bd2b3e46ff97</hash>
        <hash alg="SHA-1">c8ed09f56bca464c136066bedbac86f451aa7f20</hash>
        <hash alg="SHA-256">53d5417288b0e2a390d379a6f784210b43ebfbaa0a1f3349e2638a35bc2c0877</hash>
        <hash alg="SHA-512">7a851b1b46c2bb8c234cb43c400f4873d973e8d7c488e091ff28cde73697cd87674e7987b5f3aec82e185a997951b6e5b17053bc019bc0276658433b23be375a</hash>
        <hash alg="SHA-384">2dec5313ae6df3ad3122f474c69f573dec9d2f5ac92a6c727eda4a96988fc3175d26702d012f60f4a13700cf61c5bb05</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.19?type=jar</purl>
      <externalReferences><reference type="website"><url>https://metrics.dropwizard.io/metrics-graphite</url></reference><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-graphite/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.19?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-jmx</name>
      <version>4.2.19</version>
      <description>A set of classes which allow you to report metrics via JMX.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2ada942cc52a9e0341439b7cfaeaa5ed</hash>
        <hash alg="SHA-1">474c1c764df01a0d93fc268da1f779ab97fe99ae</hash>
        <hash alg="SHA-256">d51c124b6e1ec77b7711dffd4b46b47db529074ff522b49f2343c7c2e82798af</hash>
        <hash alg="SHA-512">d642f2c7d788b0e887fe5ef828a6117f9b5e11f88c1d35667e90862d9d69aa837322d488b1a9d1223c6d89c7d4fe2662603509377fc67f3fa05a48a069e9418a</hash>
        <hash alg="SHA-384">e6911e014be641705418e81c90532e634256eae34e04027cbd39c5f0d1ff94f76afad974534bc5aeaa1cb7fb5a7d65c8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.19?type=jar</purl>
      <externalReferences><reference type="website"><url>https://metrics.dropwizard.io/metrics-jmx</url></reference><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-jmx/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.15.2?type=jar">
      <publisher>com.fasterxml.jackson.module</publisher>
      <group>com.fasterxml.jackson.module</group>
      <name>jackson-module-scala_2.12</name>
      <version>2.15.2</version>
      <description>jackson-module-scala</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ecc6a1f298669beee1a395538e412aab</hash>
        <hash alg="SHA-1">e3d122234da3e5e22c73bd42291616f5331b547d</hash>
        <hash alg="SHA-256">81259ec6730f6d4b85d5586c9eaa6e75a6885b34bfca572be03126a9179719fe</hash>
        <hash alg="SHA-512">39fb1e425a124a7e50faaa11a0e858603c7b789fd66f78d006f1fffe08a83c4811011de797c8943e42c9a46bf39219684080108f3b346014793f8860b63d96a2</hash>
        <hash alg="SHA-384">76d844db959b3f16f848386cb16c76f84065fcde92b706f1b5c6e2ec16c931a4e53cd4cc80f90fb0ae595aa71531f95e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.15.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-module-scala</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-module-scala</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar">
      <group>com.thoughtworks.paranamer</group>
      <name>paranamer</name>
      <version>2.8</version>
      <description>Paranamer allows runtime access to constructor and method parameter names for Java classes</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f213c72b67d4850f17a4a3e9064904de</hash>
        <hash alg="SHA-1">619eba74c19ccf1da8ebec97a2d7f8ba05773dd6</hash>
        <hash alg="SHA-256">688cb118a6021d819138e855208c956031688be4b47a24bb615becc63acedf07</hash>
        <hash alg="SHA-512">d774b05135d34bc42d8a7bee6466715bc44837b95bbe618faa8680978c4348652292ea6dd8eeb88dc7fa859bfe685f4d8329032cbf4fce2ea7e555ba3243cc14</hash>
        <hash alg="SHA-384">699148a3f69ae205aa47c82e2cb78d3949afc71b090935579a0363fee8675eec3ba05e0d3127295213b39aad3485690b</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/paul-hammant/paranamer/paranamer</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/paul-hammant/paranamer/paranamer</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ivy/ivy@2.5.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ivy</group>
      <name>ivy</name>
      <version>2.5.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e2b8480e296278e41b68020a444c6ae1</hash>
        <hash alg="SHA-1">7fac35f24f89776e7b78ec98658d8bc8f22f7e89</hash>
        <hash alg="SHA-256">793120f8c9058aede475b093651aa5307603c1518180772c104562a0ed2e9feb</hash>
        <hash alg="SHA-512">9d63b3d5ef750e08f802a1d2f5a8d855ca30bad39fd58bc48db3d7bcfb7ecfd91a61965135755da81c8267d050d1a9addf4dd46eb28a3bfda467d691274e016a</hash>
        <hash alg="SHA-384">049d433f5ba75371f0376bf9f465e1bfb111458df469d8f0313113b175a1f13d3650f064cbe8ee3c3bef4ac84831caa0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ivy/ivy@2.5.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://ant.apache.org/ivy/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IVY</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/ant-dev</url></reference><reference type="vcs"><url>https://svn.apache.org/repos/asf/ant/ivy/core/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/oro/oro@2.0.8?type=jar">
      <group>oro</group>
      <name>oro</name>
      <version>2.0.8</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">42e940d5d2d822f4dc04c65053e630ab</hash>
        <hash alg="SHA-1">5592374f834645c4ae250f4c9fbb314c9369d698</hash>
        <hash alg="SHA-256">e00ccdad5df7eb43fdee44232ef64602bf63807c2d133a7be83ba09fd49af26e</hash>
        <hash alg="SHA-512">9a98e493c4d771322b1331ec05ab0e363a83d8ac2af8018d96a44df2bf5bfc97d33ebe6f6f93e46ab10bf1536f0c29e9d9569318ed49bc18b4e96b1a8b476d37</hash>
        <hash alg="SHA-384">f542e92b7a86bcb20cc21f0c4b29778428944391344ca11df432f9ce36a96ce8e8f65da67e450e52c0e8ba441d2a7332</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/oro/oro@2.0.8?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/net.razorvine/pickle@1.3?type=jar">
      <group>net.razorvine</group>
      <name>pickle</name>
      <version>1.3</version>
      <description>A feature complete pickle protocol implementation (Python's builtin serialization mechanism)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b043c671d86e43a0a11cc02e815616e9</hash>
        <hash alg="SHA-1">43eab5f4a8d0a06a38a6c349dec32bd08454c176</hash>
        <hash alg="SHA-256">259aca378cbcee48797d047169e573666640312a188e2428a03cb19b0fbc7664</hash>
        <hash alg="SHA-512">8199f376fcd39e0437a6a4fd7a853bd2edf1805bdd43b185dab8f5b97eda3a657a757bf61bad8474379c60b1074f38c4ed03ed2541e77408d08531036f725485</hash>
        <hash alg="SHA-384">a6ac01883fb7c170210d9b9b241a9544e168ede941618517ca468a499747ed044b3e792904c5b45ef77e48a69b19b017</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.razorvine/pickle@1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/irmen/pickle</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/irmen/pickle/issues</url></reference><reference type="vcs"><url>https://github.com/irmen/pickle</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar">
      <group>net.sf.py4j</group>
      <name>py4j</name>
      <version>0.10.9.7</version>
      <description>Py4J enables Python programs running in a Python interpreter to dynamically access Java objects in a Java Virtual Machine. Methods are called as if the Java objects resided in the Python interpreter and Java collections can be accessed through standard Python collection methods. Py4J also enables Java programs to call back Python objects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7afcbc30fa3c00d5febfbc522235f2a5</hash>
        <hash alg="SHA-1">e444374109f6f3ffdfdbd4e7dc5a89122b0c9134</hash>
        <hash alg="SHA-256">4d67d584e7b0f456deedffbd3f43047efd6748ff3d13b443abb61ec54cf7af13</hash>
        <hash alg="SHA-512">8e3bb548cea719e4ab0d3d559f1cdb8401c74606036c93f93b6519942994432786a800ce57b6d04fd090dfdea0359cf78e4d899021c5559f4f2f558fb09dc1be</hash>
        <hash alg="SHA-384">b7d117caa8c2269807f1ad4335fab2f9f6d99b93ee68ec548f3ff3d520f8d11ce8ecb2c2798f8fd86fb19606be60187f</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://nexus.sonatype.org/oss-repository-hosting.html/py4j</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-crypto</name>
      <version>1.1.0</version>
      <description>Apache Commons Crypto is a cryptographic library optimized with AES-NI (Advanced Encryption
Standard New Instructions). It provides Java API for both cipher level and Java stream level.
Developers can use it to implement high performance AES encryption/decryption with the minimum
code and effort. Please note that Crypto doesn't implement the cryptographic algorithm such as
AES directly. It wraps to Openssl or JCE which implement the algorithms.

Features
--------

1. Cipher API for low level cryptographic operations.
2. Java stream API (CryptoInputStream/CryptoOutputStream) for high level stream encryption/decryption.
3. Both optimized with high performance AES encryption/decryption. (1400 MB/s - 1700 MB/s throughput in modern Xeon processors).
4. JNI-based implementation to achieve comparable performance to the native C/C++ version based on OpenSsl.
5. Portable across various operating systems (currently only Linux/MacOSX/Windows);
   Apache Commons Crypto loads the library according to your machine environment (it checks system properties, `os.name` and `os.arch`).
6. Simple usage. Add the commons-crypto-(version).jar file to your classpath.


Export restrictions
-------------------

This distribution includes cryptographic software.
The country in which you currently reside may have restrictions
on the import, possession, use, and/or re-export to another country,
of encryption software. BEFORE using any encryption software,
please check your country's laws, regulations and policies
concerning the import, possession, or use, and re-export of
encryption software, to see if this is permitted.
See &lt;http://www.wassenaar.org/> for more information.

The U.S. Government Department of Commerce, Bureau of Industry and Security (BIS),
has classified this software as Export Commodity Control Number (ECCN) 5D002.C.1,
which includes information security software using or performing
cryptographic functions with asymmetric algorithms.
The form and manner of this Apache Software Foundation distribution makes
it eligible for export under the License Exception
ENC Technology Software Unrestricted (TSU) exception
(see the BIS Export Administration Regulations, Section 740.13)
for both object code and source code.

The following provides more details on the included cryptographic software:

* Commons Crypto use [Java Cryptography Extension](http://docs.oracle.com/javase/8/docs/technotes/guides/security/crypto/CryptoSpec.html) provided by Java
* Commons Crypto link to and use [OpenSSL](https://www.openssl.org/) ciphers</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c71451f3c4737ba6d84f9bd9e8f2400d</hash>
        <hash alg="SHA-1">4a8b4caa84032a0f1f1dad16875820a4f37524b7</hash>
        <hash alg="SHA-256">44dc28551cdba731658090d9b10d2eead9839c269d70cdcd7d56c0423df5227f</hash>
        <hash alg="SHA-512">62acf1d90ad667c8f3f9b267c6f4fefa57eb914ef57a24e10a7dc6ea7bf1f2a6933db831f836dc2ca0fe86aff84a6d1a0fb3c8bb34c7c24e3e1190778efb241d</hash>
        <hash alg="SHA-384">0d7c20964ab9cbde60d3d03ca92b481e30f969b30adc336b77ec8b8dcb660e327bfff8c98cb9c30163e7bdf5ffbae486</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-crypto/</url></reference><reference type="build-system"><url>https://builds.apache.org/search/?q=Commons-CRYPTO</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CRYPTO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-crypto.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-catalyst_2.12@3.5.6?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-catalyst_2.12</name>
      <version>3.5.6</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8788a14a44441dae618b1937f55bc484</hash>
        <hash alg="SHA-1">c7ff2adad1b2478bf78c55573c78e2b38b529b3e</hash>
        <hash alg="SHA-256">de7275d6319a0d6633de4fc5c3ff0a85c627254168c1f49ccd00bd460241360e</hash>
        <hash alg="SHA-512">d5d907ad0da43bdf5132fc80878176fa4599faa8d3e806b7835042d3a1912e744836ddb61355a0b8cbafff4072ae270c3165ddf058c0c4ac0dcc98e201722885</hash>
        <hash alg="SHA-384">8bf834ca5060dad197f7d02857cd9e414393dd9b8910c49145083e766e7aafdee1b75f5941354960b8686b0e2853d2dc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-catalyst_2.12@3.5.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/sql/spark-catalyst_2.12</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-sql-api_2.12@3.5.6?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-sql-api_2.12</name>
      <version>3.5.6</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">62f50068b88409e01a9919322cf4b7b0</hash>
        <hash alg="SHA-1">2c418f5b503b79eed85114884ed4f32b6332da4b</hash>
        <hash alg="SHA-256">3af362765dd607770886bfac1e3988af7f5852c54bf89c3b7ceeb60211fd193d</hash>
        <hash alg="SHA-512">8ef4c129721f08768e20614b0d5677bac4d65efd182703b945d143ed1bf6ea443f058d8e52821f3f8cc74ddccff0f2cc83ee10a828bdd138193d7b787ed5a827</hash>
        <hash alg="SHA-384">5e7f7de1a3a9f21c1c4441ff86dcb8ada2427256170881ac9e2981ebaee291ef8e08a8775572e408bb2b96001188cbfd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-sql-api_2.12@3.5.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/sql/spark-sql-api_2.12</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.12@2.3.0?type=jar">
      <publisher>org.scala-lang.modules</publisher>
      <group>org.scala-lang.modules</group>
      <name>scala-parser-combinators_2.12</name>
      <version>2.3.0</version>
      <description>scala-parser-combinators</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c455c1ff68f81060de08df6acc60d5c4</hash>
        <hash alg="SHA-1">0d629e5386cd9fa205434fc644ccce0217fd3477</hash>
        <hash alg="SHA-256">15bf13f5ce0e9ff4224603c44281265d0509ac31ea823c46aa29a5a52e09a574</hash>
        <hash alg="SHA-512">f59a980004d298f7e1a199a2bbdffa71f01c4b278691c4c864f0b74419bc1d44ba41793e45d733b67ded4928021232a3705a172c0161c7b5bb62982c401ffa0f</hash>
        <hash alg="SHA-384">21b02c08c542596d0e0433652b94bbb1a61eee309d8caf5ec5fc4d1135e23fce082d0238bc011c6c6558a9ec73c46c80</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.12@2.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.scala-lang.org/</url></reference><reference type="issue-tracker"><url>https://github.com/scala/scala-parser-combinators/issues</url></reference><reference type="vcs"><url>https://github.com/scala/scala-parser-combinators</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar">
      <publisher>ANTLR</publisher>
      <group>org.antlr</group>
      <name>antlr4-runtime</name>
      <version>4.9.3</version>
      <description>The ANTLR 4 Runtime</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">718f199bafa6574ffa1111fa3e10276a</hash>
        <hash alg="SHA-1">81befc16ebedb8b8aea3e4c0835dd5ca7e8523a8</hash>
        <hash alg="SHA-256">131a6594969bc4f321d652ea2a33bc0e378ca312685ef87791b2c60b29d01ea5</hash>
        <hash alg="SHA-512">2c3763a8fbc7af110df5d6bb57692759b23e8bf961a53694c69bde4cd9d8c3a8eaa55cf376ce34c6c4e2035a99d7abf08c6ffa3b75d18a6d93a9c1ca95927ea8</hash>
        <hash alg="SHA-384">62a62dab4a27733a810b97fe5544eb1b5b25d2df83ea8d93802cb0e6fd1b4b3ca5a130c51aa9198deefc30cd0f062841</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.antlr.org/antlr4-runtime</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/antlr/antlr4/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion</url></reference><reference type="vcs"><url>https://github.com/antlr/antlr4/tree/master/antlr4-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-vector@12.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-vector</name>
      <version>12.0.1</version>
      <description>An off-heap reference implementation for Arrow columnar data format.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">73bd1ca4d69182476d391e14260135c3</hash>
        <hash alg="SHA-1">809a112926070f912f12c151d5ab1fa810612ca5</hash>
        <hash alg="SHA-256">0ca927fb749772077d488a901ec977ff9428a6836a053b12b470adf822b1fd72</hash>
        <hash alg="SHA-512">51c4c13e1f642b6e07e6a0b93bf6fd953efd37dc235b9ce371fbd94c374cb3a42671e0fd1858c1cb3a7e8af4cb7acf22cac8ad1e051037fc3aa707ed7239bc1d</hash>
        <hash alg="SHA-384">d3478c448f20c6b2fc8985981a636dfc08bd92ca52b763875a71840b80ecb0c4088072f537b3b91dc14a8783a05c6744</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-vector@12.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/arrow-vector/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/arrow</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/arrow-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/arrow-vector</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-format@12.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-format</name>
      <version>12.0.1</version>
      <description>Generated Java files from the IPC Flatbuffer definitions.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d5f60e3a86c42f002c7b87baa8f26068</hash>
        <hash alg="SHA-1">b2dbacdcafb42e4fd7432468010d5d4d82380778</hash>
        <hash alg="SHA-256">ff08f69204e0a26b409a1c501197ba956f2fe044e53f1f4889025ec7622d7787</hash>
        <hash alg="SHA-512">e6b5d1318672142a2969c9921009ddb18ceec47c409bd206a0d3bff2dbb8ae06d763ce6244422b1b5dc0b658f5cdcd440d72197de1b9f1071da1485a59e560b9</hash>
        <hash alg="SHA-384">5a7ea6a9cb966e359d5d9319eff5be2c3b52b4871ae6466319f8eecb70e80697ba5396ebc0d3b15a96d2aa3ec3701d6e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-format@12.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/arrow-format/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/arrow</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/arrow-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/arrow-format</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-memory-core</name>
      <version>12.0.1</version>
      <description>Core off-heap memory management libraries for Arrow ValueVectors.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">59bdf36bbacafe58ce7a139d1f4daae4</hash>
        <hash alg="SHA-1">cd7f41f4ebbb7cdab55b7a3b935ab5bcb2108b8d</hash>
        <hash alg="SHA-256">25e23b9762ddce71fb9876a1794056a7dfc64f453c608763160fcc1852c62c3f</hash>
        <hash alg="SHA-512">14e3b7abcd24fa21fb478f290ffb5460c042d5d23392ac0e0fcad917c15b5fa92b686cc68e6a8f3faf308058b8dd9e873aeaef3530e4fc6d36756f31a84435de</hash>
        <hash alg="SHA-384">173d748c8d147e002412f843f0868e2992fb9d17a4d6c91dc3e4c515352e4b9f661c696d1f159dbbc6d35df259e3b9b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/arrow-memory/arrow-memory-core/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/arrow</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/arrow-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/arrow-memory/arrow-memory-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.datatype</group>
      <name>jackson-datatype-jsr310</name>
      <version>2.15.2</version>
      <description>Add-on module to support JSR-310 (Java 8 Date &amp; Time API) data types.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">94d6cec0fe6ad8b81752beb500bd4bbc</hash>
        <hash alg="SHA-1">30d16ec2aef6d8094c5e2dce1d95034ca8b6cb42</hash>
        <hash alg="SHA-256">7574c81ad570476ef6aad26f419288fd466733f3315bee3012f2f29c9dc008c8</hash>
        <hash alg="SHA-512">3036ff042d09342d36e90960103ec57c77549b85e2c370dfdd57673195141fea6edbac29fa598cc1d1edf56e4d457b7b838dcdc3f50acae1cc70b5905e075301</hash>
        <hash alg="SHA-384">38a75ac595705f1f518c461009280318fbe85b3aab04a68b15e736b3365e20ea17c5db28e46da0d89673b223307b800f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-modules-java8/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar">
      <group>com.google.flatbuffers</group>
      <name>flatbuffers-java</name>
      <version>1.12.0</version>
      <description>Memory Efficient Serialization Library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">26ecc1a330e441f909226a338d4bef65</hash>
        <hash alg="SHA-1">8201cc7b511177a37071249e891f2f2fea4b32e9</hash>
        <hash alg="SHA-256">3f8c088b4dd04a9858721f2e162508c94db0dd86f961e306ee63ef2eda871bf7</hash>
        <hash alg="SHA-512">20750e91441c074ca28f72b0b6494e8f0bfbc94caff04eb49727efc6b28e453c84732f24acc52cf36b36ba66b57a145d003e87f749c5c4518ddc6f9247b8ab47</hash>
        <hash alg="SHA-384">7af7d2e03ae71bea1ebac6cc9c2926b9f952c48a124db160ee2327f2f7e6b2e3ba153e5924971788392fc278b0e04ee9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/flatbuffers</url></reference><reference type="vcs"><url>https://github.com/google/flatbuffers</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-memory-netty@12.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-memory-netty</name>
      <version>12.0.1</version>
      <description>Netty allocator and utils for allocating memory in Arrow</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bbeaa3dfe98fbed40b47f005e21a75fc</hash>
        <hash alg="SHA-1">f0e6801aa116b75775272dcac6ad49584382bf8c</hash>
        <hash alg="SHA-256">f3d45c3ca7ef7f9b3bbf6d8b68126d630fe3f538614fda00f95ec66f7d3aa051</hash>
        <hash alg="SHA-512">e023c562eab62a885c940530ccdd7495dce5a7f015b6cab963220981eca30d0daceccc297c0085b88007ad3bdcd0e81a2de9ab3c78b7c6aa6dce13bcfb1c3909</hash>
        <hash alg="SHA-384">f22815f86b1c4be39ab95db5059caf95ba62326f4ed5710520ccad6a90d827491178655d5f5a45211a712d0cbe32d573</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-memory-netty@12.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/arrow-memory/arrow-memory-netty/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/arrow</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/arrow-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/arrow-memory/arrow-memory-netty</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar">
      <group>org.codehaus.janino</group>
      <name>janino</name>
      <version>3.1.9</version>
      <description>The "JANINO" implementation of the "commons-compiler" API: Super-small, super-fast, independent from the JDK's "tools.jar".</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">597cbcd4d0b8273552758c50bf423926</hash>
        <hash alg="SHA-1">536fb0c44627faae32ca7a8a24734f4aab38c878</hash>
        <hash alg="SHA-256">7df88d90aa165ab48bdebea425fa009eeef04918c82e98cdbea5e747e114508d</hash>
        <hash alg="SHA-512">840dba1621f06322d6ede76c941665e4e119f26ca1b7cb1a510a2bd9d692d3a5d75ac79477055824c2af37958e1c330daf6e1fbb9fd5bbba82db3a3f6077ff11</hash>
        <hash alg="SHA-384">85599d163bfe4c2d66e526d549c5bd26bc4137c4bb80099130782e42cfb9d5a55d34b11d98877cf11436536d3f1f9aa3</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://janino-compiler.github.io/janino/</url></reference><reference type="vcs"><url>https://github.com/janino-compiler/janino</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar">
      <group>org.codehaus.janino</group>
      <name>commons-compiler</name>
      <version>3.1.9</version>
      <description>The "commons-compiler" API, including the "IExpressionEvaluator", "IScriptEvaluator", "IClassBodyEvaluator" and "ISimpleCompiler" interfaces.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e14b760178e0c2105e2951c2f452a1d1</hash>
        <hash alg="SHA-1">f0d70bb319e9339aea90a8665693e69848acc598</hash>
        <hash alg="SHA-256">d988a3ebc17188e9a1a3efadd8e958b90eb995c4fcc077292a5dfe5fe1109d25</hash>
        <hash alg="SHA-512">0d290612b69ddece1c58ae0a60c6a544893800f588a424afb7bc12215a9e3bfe775ff6bac749f16c7b4e32e186ad29bceb80112df4082f16ce1f749685135e80</hash>
        <hash alg="SHA-384">ab1394175f2509bcdc5aa1c76294ba146ba09bae259401932f08bb9b5debd11049d2c751e503e4255d4efd4a4f199107</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://janino-compiler.github.io/commons-compiler/</url></reference><reference type="vcs"><url>https://github.com/janino-compiler/commons-compiler</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.datasketches/datasketches-java@3.3.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.datasketches</group>
      <name>datasketches-java</name>
      <version>3.3.0</version>
      <description>Core sketch algorithms used alone and by other Java repositories in the DataSketches library.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5e2668c18f0e978c65bc260304fe5bc5</hash>
        <hash alg="SHA-1">fcf28150084f55866315283d9f25e500a05f6a20</hash>
        <hash alg="SHA-256">d1bf7b4ed14058f244fe7a85f7ae69f42de452b7e7c0cc26b735be40770e5901</hash>
        <hash alg="SHA-512">72e1d07034e54abac1bc4028cd1923370702beb601b9f3971b1c90b34050cc2d0cca7c954adab6a9335c7a2b5818f9aea04802e6bfb5cd2aab9cfecb54052e29</hash>
        <hash alg="SHA-384">fcfdf33727ed916dfae61755fe193369d913eaa50ebe35f388facf33876b582c9f3d980b2af869f2d91295ab22c4aa76</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.datasketches/datasketches-java@3.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://datasketches.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/datasketches-java/issues</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/datasketches-dev</url></reference><reference type="vcs"><url>https://github.com/apache/datasketches-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.datasketches/datasketches-memory@2.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.datasketches</group>
      <name>datasketches-memory</name>
      <version>2.1.0</version>
      <description>High-performance native memory access.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">52193044ed84264813b4130b65e93f09</hash>
        <hash alg="SHA-1">f9ef215c32b85e331d62a9dbf4bafb405a5f543a</hash>
        <hash alg="SHA-256">9d6cc5e06449c6bd61bba5eb7db30bb93583591300332a09ce615198bf86fb23</hash>
        <hash alg="SHA-512">5eb68c4b4579612300dbf74304f16be222fce5564a2abf4281b689693bb3f7efa18460df6e82853aeda56ded3fd15f9a7b0e614b216430602bb4cef18f3d7cff</hash>
        <hash alg="SHA-384">7aa8b45456fb9812f0fcc56167883668a3fc18f31ae7687e12912238eee319e9fdc8c738969d7c3a6835d9f0bfb1197b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.datasketches/datasketches-memory@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://datasketches.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/datasketches-memory/issues</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/datasketches-dev</url></reference><reference type="vcs"><url>https://github.com/apache/datasketches-memory</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-tags_2.12</name>
      <version>3.5.6</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c6f0f06ba1990aa828eb25e63e54ef44</hash>
        <hash alg="SHA-1">b97c73f0c21bc3a6e5570698226efe140158c248</hash>
        <hash alg="SHA-256">8cbd15332921e02f06f70a18bba0735ab8248f09b45cfe3b076fa6a2db518494</hash>
        <hash alg="SHA-512">d8f1fe5e7fd31cf56611be5c6c7b23377876a78987e736e1f5fe967111a53b166bbae18cf2967b9672d5a26b136307160ba56c023a9a50edfa4461bc2f43e4ab</hash>
        <hash alg="SHA-384">ba28a589161268f62ab2679b1c0d86de1bee7a75c6ad030d9a26ffdb0e219eac9effb03f0b01c970b2bfee1ac4d1c7e4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/common/spark-tags_2.12</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.orc/orc-core@1.9.6?classifier=shaded-protobuf&amp;type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.orc</group>
      <name>orc-core</name>
      <version>1.9.6</version>
      <description>The core reader and writer for ORC files. Uses the vectorized column batch
    for the in memory representation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">85b79ed561eec9c08005d68cd98001ac</hash>
        <hash alg="SHA-1">5389be613bb4300bd49457034233a01a0334bf50</hash>
        <hash alg="SHA-256">654c8d1ee1be22bf397e9969ef2519f137bda72d524fbf123bc00a2a247a22fe</hash>
        <hash alg="SHA-512">f2a5422d9e6c652ec480099afc2b6925293b006804e14cf81a372c59b9067a8b351f3b2929681dcf02fc5854eff4553aa0abda54890f63d43c6e173728283ad4</hash>
        <hash alg="SHA-384">030ff217d56fd587d5f5aca4ce12e32e52562f5b18bb6797baaceb01b39b961d5b53b2230a186917a7d8fb4cfec40457</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.orc/orc-core@1.9.6?classifier=shaded-protobuf&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://orc.apache.org/orc-core</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/orc-user/</url></reference><reference type="vcs"><url>https://github.com/apache/maven-apache-parent/tree/apache-27/orc/orc-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.orc/orc-shims@1.9.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.orc</group>
      <name>orc-shims</name>
      <version>1.9.6</version>
      <description>A shim layer for supporting various versions of Hadoop dynamically.

    This module uses a higher version of Hadoop so that we can create shims
    that let us use new features of Hadoop without having a hard dependency
    on the latest version.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8d7d976a0daba9603d79fa08390f0faf</hash>
        <hash alg="SHA-1">3ec8b2543d900fa554beafb942e8f975bd5f633e</hash>
        <hash alg="SHA-256">8344f52c14d41639596e934ec3f2782d01023f5fb06f5f68d82b3502e52ea0a2</hash>
        <hash alg="SHA-512">4e34983ec527e5f59979ce241c87d7a4a364c95580ed7253a5c299b98d4dfebc48acab33f261bbbdbd1085d927af7d3f64bbcc75abce643d326d00471df07155</hash>
        <hash alg="SHA-384">c721af2363bc97474d219c089bb25796a02a7f1b5b511a58bdbc5a62460d06aa25f68ceb5afe672a394e70bcbe149c7b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.orc/orc-shims@1.9.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://orc.apache.org/orc-shims</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/orc-user/</url></reference><reference type="vcs"><url>https://github.com/apache/maven-apache-parent/tree/apache-27/orc/orc-shims</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.airlift/aircompressor@0.27?type=jar">
      <group>io.airlift</group>
      <name>aircompressor</name>
      <version>0.27</version>
      <description>Compression algorithms</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2c1137bd68ec7a65655fc1adca94742b</hash>
        <hash alg="SHA-1">5b3b5e7932a1d088ad1f13d109ffd688ab59ef9d</hash>
        <hash alg="SHA-256">fdbef3137a28f63bb0cb93487803080ede746a4ec3d421e36c6f0c305c35e5e4</hash>
        <hash alg="SHA-512">d6ef205c5e56b9ebc0c871fc8b523cde226d05d3531bc8932cb850e4607c8bf4ab554def0206994f55e2ae9245518af7a379e2282247cd8dce97b3612b84e13e</hash>
        <hash alg="SHA-384">d74e216442328fc9225e0d82622285bea8885bf7c14b7869b142305e2f727e8f4b4d4edac6ac18651580da0b58ca6dc8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.airlift/aircompressor@0.27?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/airlift/aircompressor</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/airlift/aircompressor/tree/master</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jetbrains/annotations@17.0.0?type=jar">
      <group>org.jetbrains</group>
      <name>annotations</name>
      <version>17.0.0</version>
      <description>A set of annotations used for code inspection support and code documentation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7b06437ed47fa7b4a8ec8909f4fb9022</hash>
        <hash alg="SHA-1">8ceead41f4e71821919dbdb7a9847608f1a938cb</hash>
        <hash alg="SHA-256">195fb0da046d55bb042e91543484cf1da68b02bb7afbfe031f229e45ac84b3f2</hash>
        <hash alg="SHA-512">839ec18d4a6f930ecd39827ebd4013c13a7176003543b8f60056770179032648faf1651e9e73109e811881b68a39757ca7e39731a61ff4a3461637b196fe4f7b</hash>
        <hash alg="SHA-384">c9d045a68ef2b0d5b12aa00b636e43af22de4c02f4dfcc6b5b7b04fdd57c98c7246decd2e5dc3eb9f1b10d929ac33a11</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jetbrains/annotations@17.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/JetBrains/java-annotations</url></reference><reference type="vcs"><url>https://github.com/JetBrains/java-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>2.0.7</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">403dffa46cdd2e3c82da19df4f394a4c</hash>
        <hash alg="SHA-1">41eb7184ea9d556f23e18b5cb99cad1f8581fc00</hash>
        <hash alg="SHA-256">5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4</hash>
        <hash alg="SHA-512">216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8</hash>
        <hash alg="SHA-384">c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar">
      <publisher>ThreeTen.org</publisher>
      <group>org.threeten</group>
      <name>threeten-extra</name>
      <version>1.7.1</version>
      <description>Additional functionality that enhances JSR-310 dates and times in Java SE 8 and later</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5994a4f9bc61fe4bfae13fab1253ac47</hash>
        <hash alg="SHA-1">caddbd1f234f87b0d65e421b5d5032b6a473f67b</hash>
        <hash alg="SHA-256">9bbcbe09a631320bdc3325bbb04c93068473bc0e04b85e2ef3e42314d5a7dacf</hash>
        <hash alg="SHA-512">1ae1558df2e6e33a0a463e0204dc084bc2bcff6b27ebc983743533bee65f3e42915737a7e2f2096047b2ae5cb8363413964aab0f4eaed0b5f0d5865de56e9336</hash>
        <hash alg="SHA-384">df9dd8ee46fdd640c3abe5d5168570d29028bc94e931b505f3d36fac01da60ac90f2ed706f37b7eaa3aa8a23538488ff</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.threeten.org/threeten-extra</url></reference><reference type="distribution"><url>https://oss.sonatype.org/content/repositories/threeten-releases</url></reference><reference type="issue-tracker"><url>https://github.com/ThreeTen/threeten-extra/issues</url></reference><reference type="vcs"><url>https://github.com/ThreeTen/threeten-extra</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.orc/orc-mapreduce@1.9.6?classifier=shaded-protobuf&amp;type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.orc</group>
      <name>orc-mapreduce</name>
      <version>1.9.6</version>
      <description>An implementation of Hadoop's mapred and mapreduce input and output formats
    for ORC files. They use the core reader and writer, but present the data
    to the user in Writable objects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">745691f693f3731d81da8170eeeb20c9</hash>
        <hash alg="SHA-1">aeaee59a5848721663760b36d2e07f9b13973872</hash>
        <hash alg="SHA-256">90d01404544ed0515b98625c1573158fda880640d749472ed3f015b26087284a</hash>
        <hash alg="SHA-512">14c04e3f1b047ff1c9f0753286ae1d8ba879eadf27f33f953367a6c573ac8e15d606b4baf795af8507d42a4123c4af05280229948f549811415f55a28234f828</hash>
        <hash alg="SHA-384">24d6a214be90895d766e12d7b8c958917e1cb1f9e952bdab9982e3fb40c5c273977a5a3fa2c6bce258ddd0f685f005be</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.orc/orc-mapreduce@1.9.6?classifier=shaded-protobuf&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://orc.apache.org/orc-mapreduce</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/orc-user/</url></reference><reference type="vcs"><url>https://github.com/apache/maven-apache-parent/tree/apache-27/orc/orc-mapreduce</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.hive</group>
      <name>hive-storage-api</name>
      <version>2.8.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bea1adb65022d4616d23be770207600d</hash>
        <hash alg="SHA-1">4b151bcdfe290542f27a442ed09be99f815f88e8</hash>
        <hash alg="SHA-256">2bb77d246a9724a371301049239c6e53039efe4136b0ed34ee5a9c7b3cd861d8</hash>
        <hash alg="SHA-512">e76d1f1dcae0fcf26c56bf2006776a39b46572e9a67fcfab26774506a30de0a92447dcc545894c1796bbe092df53a51216c56721bfbc05c8a9b5fe9636ff07e7</hash>
        <hash alg="SHA-384">93eb2ba57fc637800ba539994682cf764436617f1b1584aa71f288797dad73e6b5dd95bc1dfb19be802a60e31b139866</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/hive-storage-api/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/maven-apache-parent/tree/apache-23/hive-storage-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-column@1.13.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-column</name>
      <version>1.13.1</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d75526e32d2630e5bad8d9fce847d838</hash>
        <hash alg="SHA-1">9ed76ae5d9fdfc6c2eb51aef87ad34c5cdc56384</hash>
        <hash alg="SHA-256">3ff4222b5da77cc85e3fee623ff9779f991a1a0987125e68bc642ff913ec5612</hash>
        <hash alg="SHA-512">4de18d73bdbf77f9327b7f61fd9e333d7d2700a552432401a1253ccb34c77f82d82ff514c9f1fefd8c21b407fdf21e68e8b2e9142c5fdffe0ef035485c716976</hash>
        <hash alg="SHA-384">76167345e924a70f01910bd3647388bd2e8c2d04e4ece65c1abf5968476a6870769c238e10e2cbfddb3962e30d4eff0d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-column@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PARQUET</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-column</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-common</name>
      <version>1.13.1</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6a52cc2d093a61027d8df49b6ae39a6a</hash>
        <hash alg="SHA-1">77e65a1a4522f476994aa90c06fcca842c4ab73f</hash>
        <hash alg="SHA-256">4a2d7a8eb395bbc8d202fa74b272e45374a1034b351028824ad46925366297ea</hash>
        <hash alg="SHA-512">236b9a8876c51f39aec3c7299642c4813b24f9a709b2b6306a058893ec1e97026dbd4009d9ea64a1984eaff0a6977648ff4e72363d1e9a25b635796aa5a472b4</hash>
        <hash alg="SHA-384">5afd34d71bbe49d7c875e02e2dfe234b4ca18e035f5e4348cc39d103a43fc303c72f3c7ac7b22ed8340c30f19cab33a9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PARQUET</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-encoding@1.13.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-encoding</name>
      <version>1.13.1</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2ca33d628896a57c83fd338ba4b3712c</hash>
        <hash alg="SHA-1">2554cef74a90736ad42ed994116123038c0ffee9</hash>
        <hash alg="SHA-256">0c921d275bbcc31552ee94d383ea38b2615110790d59f11ad07ffe5f3f0c23b3</hash>
        <hash alg="SHA-512">7d08f31b531bdb58d1593e15807f82387a99540c09e90d1cb4fee5b5d3d7b1ad04a599533717c27b83dccf0635983448ea2ae88385424976a46c2dca2dbe5ee9</hash>
        <hash alg="SHA-384">7ac660630e30e2cda430223450010d2be60dfdfb094712c241db1a73780c62ee66a6e53890ec3065ab762e5f8c13619b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-encoding@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PARQUET</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-encoding</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.yetus</group>
      <name>audience-annotations</name>
      <version>0.13.0</version>
      <description>Annotations for defining API boundaries and tools for managing javadocs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e7b6aa8d8967f6f34a711d763d1b4816</hash>
        <hash alg="SHA-1">8ad1147dcd02196e3924013679c6bf4c25d8c351</hash>
        <hash alg="SHA-256">3bfbb397b06f63a2a0a361f62ed32cf199bd92ddd48ea99281f4987edec9777b</hash>
        <hash alg="SHA-512">9fdd60a366629a7ef7f934eea7d27d38e1614472e9090fd23c66032589fbfb9d90516c9cb13a44e4a3598e50d62daf851bb87e4dc8375b1da2cfe6392c448bd8</hash>
        <hash alg="SHA-384">bdd7d0a05faa80c56ab33e8f0c9b70a366f3bcc9cb36fcf88d4f6761feee36b46787baf42b1f62606935eb595279de7e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://yetus.apache.org/audience-annotations</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/YETUS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/yetus-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/yetus.git/audience-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-format-structures</name>
      <version>1.13.1</version>
      <description>Parquet-mr related java classes to use the parquet-format thrift structures.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b41fcfc59d68450b5153472d5a92345c</hash>
        <hash alg="SHA-1">550ac211af104eabeedfaabe68f6769010a80366</hash>
        <hash alg="SHA-256">57b3e31e9502a1121dc481a3017fc2f20d1d6116da82dd58155a69b10b28e1e6</hash>
        <hash alg="SHA-512">ce1fd360edf3cb86d0d0c3d8b00d7c840b5a997cd5d44213dd7c6cbaa15c9eea1f5ef61474a1879d1b245c8feafea0b1f22c554f63e742feb1c5e9e9d1c237d3</hash>
        <hash alg="SHA-384">1c73a54de30153c0813b402e5f4bed5caab94c2c1bc2f473e3b78f441636607fb11ed115ae7a8adf6ada6f9ce4bfe37e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PARQUET</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-format-structures</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-hadoop@1.13.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-hadoop</name>
      <version>1.13.1</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">77cea2800fb038443a062ed25c0742cd</hash>
        <hash alg="SHA-1">6b9a84875b7576d64cf4890c69c2ed1c7557b950</hash>
        <hash alg="SHA-256">5b86f191d0bbfe866d194bd1a336fa79d049d342fb7a05aefcf31ea266792a40</hash>
        <hash alg="SHA-512">cacff5ff1e0b99c140a21181d26b3233c6118fc10a660f559919cb405631681d37073ad32dcd3b7399667a7d3364ad9fa7ce0f760feda5a6ffcc817c933f8ec6</hash>
        <hash alg="SHA-384">ebbd7008507e7f56a552a71df31b60c84c9be6bb7d99e86dd4070ea94708fbce10ee14348d79c0c518223c832faab450</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-hadoop@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PARQUET</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-hadoop</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-jackson@1.13.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-jackson</name>
      <version>1.13.1</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">83b70b16ef2ebd3e35d32af63a9d99c9</hash>
        <hash alg="SHA-1">c096efa2bb68d24d29139e93f9b5a5357f10f253</hash>
        <hash alg="SHA-256">d1e66f2a392d1777425688d3439b7f57d08c4404a81ae95bb247a16cfc773da1</hash>
        <hash alg="SHA-512">8c2b515d781e3cd2fc1d33671e2cae45d69e7d76e7e82b89a2c90022eb8852a135d920b198101328728f860008c8040d2628fda007d0ccfab0b761bfe8092afc</hash>
        <hash alg="SHA-384">2271d1678c68e85d847aee63392d15f165658f031c8c276cc44cae5bb19c8b0b2b2cfa36d2405575d4c0d5e4968009b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-jackson@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PARQUET</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-jackson</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.56.v20240826?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-servlet</name>
      <version>9.4.56.v20240826</version>
      <description>Jetty Servlet Container</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c398ec6bec057717ee3b7d105a369b7b</hash>
        <hash alg="SHA-1">c8645a939af24f227e4123b89af14264176f7c60</hash>
        <hash alg="SHA-256">6761b175f9ce2efad5cdfe5952dee6b9ee673739a9d758f3a7abba5b8403757e</hash>
        <hash alg="SHA-512">14c3ae03ff75e176027dc3e22cd454a08efae20be5e19ddcdd670729beda0c3304536e2abfac6f40e0b8edd349ec9bf4ca47128c6bb797f5a7cc7f2b66e475c0</hash>
        <hash alg="SHA-384">5fdc9b89e8cf232153b3c1097ac961c02ac8b47b7c22a2821500b672916a28768dfa01516ddbd4fdc61eaa643fc17667</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.56.v20240826?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-servlet/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-servlet</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.56.v20240826?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-util-ajax</name>
      <version>9.4.56.v20240826</version>
      <description>JSON/Ajax Utility classes for Jetty</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5d83a109c7401151dae9d7c1d54fa21f</hash>
        <hash alg="SHA-1">2f2695de1ae62d84ca8336c7e6ddedc80aa2e521</hash>
        <hash alg="SHA-256">cfb248aab6fbb4e5acfe4beed6a694471713d9ad4107d8f10ed9d59b9c254fed</hash>
        <hash alg="SHA-512">bbd5cbd69570e707b66a8fd0e59446263f02f160622aea97d4d12017027386f3d7e6541df5a382208f47fe930fb805603b4cc7d1c4044b8b5a2276a33364162a</hash>
        <hash alg="SHA-384">717ffcf800ad4cfb569128daa07c7ac060fbde150c1d4cee6e774786aaae6a6162fde69d3fc9408804e55b0aa87127dc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.56.v20240826?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-util-ajax/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-util-ajax</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.15.2</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">20ac0d0526a456274409fa852eb74087</hash>
        <hash alg="SHA-1">9353b021f10c307c00328f52090de2bdb4b6ff9c</hash>
        <hash alg="SHA-256">0eb2fdad6e40ab8832a78c9b22f58196dd970594e8d3d5a26ead87847c4f3a96</hash>
        <hash alg="SHA-512">edf622f3d2bb2cdf308875e467f28eafdd581c6ad47992a2b49a2c803b597c7fe4330c8f887687599c8a6a529d8b11054f8b354b7ddddd2bf904ef347d4f1cd2</hash>
        <hash alg="SHA-384">cced300ea06748cc30cdabf1a0a8e45749d3d2a52740975acd858bd13b83458d535a52fc4cc0eb8991ebd3638b9688ec</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-databind/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-databind</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.15.2</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">71dabcaac955a8bd17b5bba6580aac5b</hash>
        <hash alg="SHA-1">4724a65ac8e8d156a24898d50fd5dbd3642870b8</hash>
        <hash alg="SHA-256">04e21f94dcfee4b078fa5a5f53047b785aaba69d19de392f616e7a7fe5d3882f</hash>
        <hash alg="SHA-512">c9ffb4cf3e409921bca1fa6126ca8746c611042ac3fcf0e4f991d23d12b20ef0946ef1421d991ae8ed86012059df4e08fb776d96db6d13147c2ec85e22254537</hash>
        <hash alg="SHA-384">78885119a700d5dd717fc83e58bf063e1fd07bc823846b6797af6a04a99e92e8fbcf28c3a1316079e6695c138c110deb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-annotations/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.15.2</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e51fdee85b48e6637ad9e85ee76b58df</hash>
        <hash alg="SHA-1">a6fe1836469a69b3ff66037c324d75fc66ef137c</hash>
        <hash alg="SHA-256">303c99e82b1faa91a0bae5d8fbeb56f7e2adf9b526a900dd723bf140d62bd4b4</hash>
        <hash alg="SHA-512">a8a3ddf5c8a732fc3810f9c113d88fd59bf613d15dbf9d3e24dd196b2b8c2195f4088375e3d03906f2629e62983fef3267b5478abd5ab1df733ec58cd00efae6</hash>
        <hash alg="SHA-384">22f4b71de5860b9c54dd85091d5b1312f7f5097a376f68f5a35b32a342858bf2e24ed394d76be0648545a6137d78b82e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-core/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.23?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.xbean</group>
      <name>xbean-asm9-shaded</name>
      <version>4.23</version>
      <description>Repackaged and shaded asm jars</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">64f4c38a040bd32ccb65c58782ad52dd</hash>
        <hash alg="SHA-1">14e59bc47394bef27a6437074dc9178740832313</hash>
        <hash alg="SHA-256">0a9f790cd4759b7fb83fb6872504c73d669f72e731d9681f3e2da7ed3232c467</hash>
        <hash alg="SHA-512">d7cd996a56440872a335ca8dd24cdcb579a5bbb69d756dcb2c765f307223d813d498c964ed8cab28b57ab134472e99d88c2c8e646ec2d2e170b211ca2efd0c65</hash>
        <hash alg="SHA-384">f2f51a8562eaa9cdb5af87a91256cbf10931d9354c20c97b67da8b6769c8713465c4530e47be483feba83c6837622ae6</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.23?type=jar</purl>
      <externalReferences><reference type="website"><url>http://geronimo.apache.org/maven/xbean/4.23/xbean-asm9-shaded</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/XBEAN</url></reference><reference type="mailing-list"><url>mailto:xbean-dev-subscribe@geronimo.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/geronimo-xbean.git/xbean-asm9-shaded</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.protobuf/protobuf-java@3.23.4?type=jar">
      <group>com.google.protobuf</group>
      <name>protobuf-java</name>
      <version>3.23.4</version>
      <description>Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an
    efficient yet extensible format.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2ba07863c839f3584938a1ef7e594e33</hash>
        <hash alg="SHA-1">5cc1be17aed4e1e396c6b5359518f369a42ebc37</hash>
        <hash alg="SHA-256">2fc98a20224d88c8c3dd9a403a8c3930ce0e275aa847ad3734fcbb2db012498b</hash>
        <hash alg="SHA-512">a921afbe1f1f734ba579c0ad347e8c4cd1644a94af7740f2f36e541a4255e265d16bca93dd4edecb13a9ba9fe2dadbc413dd305ada99d6963f60d1afe47ec94d</hash>
        <hash alg="SHA-384">e94308ecc73db6b6b11519ea368d5246651b3aeda0053295f326b7a23b163354f41ab4d3b549b949a493132d27b8be48</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.protobuf/protobuf-java@3.23.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://developers.google.com/protocol-buffers/protobuf-java/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/protocolbuffers/protobuf/protobuf-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.objenesis/objenesis@3.3?type=jar">
      <publisher>Joe Walnes, Henri Tremblay, Leonardo Mesquita</publisher>
      <group>org.objenesis</group>
      <name>objenesis</name>
      <version>3.3</version>
      <description>A library for instantiating Java objects</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ab0e0b2ab81affdd7f38bcc60fd85571</hash>
        <hash alg="SHA-1">1049c09f1de4331e8193e579448d0916d75b7631</hash>
        <hash alg="SHA-256">02dfd0b0439a5591e35b708ed2f5474eb0948f53abf74637e959b8e4ef69bfeb</hash>
        <hash alg="SHA-512">1fa990d15bd179f07ffbc460d580a6fd0562e45dee8bd4a9405917536b78f45c0d6f644b67f85d781c758aa56eff90aef23eedcc9bd7f5ff887a67b716083e61</hash>
        <hash alg="SHA-384">2f6878f91a12db32c244afcee619d57c3ad6ff0297f4e41c2247e737c1ccc5fcc1ce03256b479b0f9b87900410bc4502</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.objenesis/objenesis@3.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://objenesis.org/objenesis</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/easymock/objenesis/objenesis</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar">
      <group>org.spark-project.spark</group>
      <name>unused</name>
      <version>1.0.0</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">763373ce9fe48581d4f2b8ffca35bb82</hash>
        <hash alg="SHA-1">205fe37a2fade6ce6dfcf8eff57ed21a4a1c22af</hash>
        <hash alg="SHA-256">00fd27fc9bde701581e7dcf5b95981d9e749a1c176bb8bfcd49f675768ff6bf0</hash>
        <hash alg="SHA-512">08a6ac8d2dc9d89ff557c7e96096c76e687efe3ce166aa6dbb76865bbef64dc8b6ecb5561ef03c2451a688ccdb3876b8f16b9137d02c290a698e917a5656b6fa</hash>
        <hash alg="SHA-384">c8c51d0d851835107db273d7ce522f026587d922c9d1d34739c3dedf9b7737c1c491e961dc7931f46c476d28acbc91f6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://nexus.sonatype.org/oss-repository-hosting.html/unused</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.spark/spark-sql_2.12@3.5.6?type=jar">
      <dependency ref="pkg:maven/org.rocksdb/rocksdbjni@8.3.2?type=jar"/>
      <dependency ref="pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-sketch_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-core_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-catalyst_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.orc/orc-core@1.9.6?classifier=shaded-protobuf&amp;type=jar"/>
      <dependency ref="pkg:maven/org.apache.orc/orc-mapreduce@1.9.6?classifier=shaded-protobuf&amp;type=jar"/>
      <dependency ref="pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-column@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-hadoop@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.56.v20240826?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.23?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.23.4?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.rocksdb/rocksdbjni@8.3.2?type=jar"/>
    <dependency ref="pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.spark/spark-sketch_2.12@3.5.6?type=jar">
      <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"/>
    <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.spark/spark-core_2.12@3.5.6?type=jar">
      <dependency ref="pkg:maven/org.apache.avro/avro@1.11.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.avro/avro-mapred@1.11.4?type=jar"/>
      <dependency ref="pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.twitter/chill-java@0.10.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.23?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-launcher_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-kvstore_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-network-common_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-network-shuffle_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-unsafe_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/javax.activation/activation@1.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-plus@9.4.56.v20240826?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-security@9.4.56.v20240826?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@9.4.56.v20240826?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-server@9.4.56.v20240826?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-http@9.4.56.v20240826?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.56.v20240826?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.56.v20240826?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.56.v20240826?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-client@9.4.56.v20240826?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.56.v20240826?type=jar"/>
      <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.3?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/com.ning/compress-lzf@1.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar"/>
      <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.5-4?type=jar"/>
      <dependency ref="pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.45?type=jar"/>
      <dependency ref="pkg:maven/org.scala-lang.modules/scala-xml_2.12@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.scala-lang.modules/scala-collection-compat_2.12@2.7.0?type=jar"/>
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"/>
      <dependency ref="pkg:maven/org.scala-lang/scala-reflect@2.12.18?type=jar"/>
      <dependency ref="pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-client@2.40?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-common@2.40?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-server@2.40?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.40?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.40?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.40?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-all@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-x86_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-aarch_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-aarch_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-x86_64&amp;type=jar"/>
      <dependency ref="pkg:maven/com.clearspring.analytics/stream@2.9.6?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.19?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-json@4.2.19?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.19?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.19?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ivy/ivy@2.5.1?type=jar"/>
      <dependency ref="pkg:maven/oro/oro@2.0.8?type=jar"/>
      <dependency ref="pkg:maven/net.razorvine/pickle@1.3?type=jar"/>
      <dependency ref="pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.23.4?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.avro/avro@1.11.4?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    <dependency ref="pkg:maven/org.apache.avro/avro-mapred@1.11.4?type=jar">
      <dependency ref="pkg:maven/org.apache.avro/avro-ipc@1.11.4?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.avro/avro-ipc@1.11.4?type=jar">
      <dependency ref="pkg:maven/org.apache.avro/avro@1.11.4?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar"/>
      <dependency ref="pkg:maven/org.tukaani/xz@1.9?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar"/>
    <dependency ref="pkg:maven/org.tukaani/xz@1.9?type=jar"/>
    <dependency ref="pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"/>
      <dependency ref="pkg:maven/com.twitter/chill-java@0.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.twitter/chill-java@0.10.0?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.objenesis/objenesis@3.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar"/>
    <dependency ref="pkg:maven/org.objenesis/objenesis@3.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.23?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar">
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar">
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.spark/spark-launcher_2.12@3.5.6?type=jar">
      <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.spark/spark-kvstore_2.12@3.5.6?type=jar">
      <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.rocksdb/rocksdbjni@8.3.2?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar"/>
    <dependency ref="pkg:maven/org.apache.spark/spark-network-common_2.12@3.5.6?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-all@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-x86_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-aarch_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-aarch_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-x86_64&amp;type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar"/>
      <dependency ref="pkg:maven/org.rocksdb/rocksdbjni@8.3.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@14.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.crypto.tink/tink@1.9.0?type=jar"/>
      <dependency ref="pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.45?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-all@4.1.96.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec-http@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec-http2@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec-socks@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-handler@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-handler-proxy@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-resolver@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-classes-epoll@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-x86_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-aarch_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-x86_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-aarch_64&amp;type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.96.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-codec@4.1.96.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-codec-http@4.1.96.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-codec-http2@4.1.96.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-codec-socks@4.1.96.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-common@4.1.96.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-handler@4.1.96.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.96.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-handler-proxy@4.1.96.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-resolver@4.1.96.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-transport@4.1.96.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-transport-classes-epoll@4.1.96.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.96.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-x86_64&amp;type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-classes-epoll@4.1.96.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.96.Final?classifier=linux-aarch_64&amp;type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-classes-epoll@4.1.96.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-x86_64&amp;type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.96.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.96.Final?classifier=osx-aarch_64&amp;type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.96.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.96.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/guava@14.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.crypto.tink/tink@1.9.0?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.10.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.23.4?type=jar"/>
      <dependency ref="pkg:maven/joda-time/joda-time@2.12.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.gson/gson@2.10.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.23.4?type=jar"/>
    <dependency ref="pkg:maven/joda-time/joda-time@2.12.5?type=jar"/>
    <dependency ref="pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.45?type=jar">
      <dependency ref="pkg:maven/org.roaringbitmap/shims@0.9.45?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.roaringbitmap/shims@0.9.45?type=jar"/>
    <dependency ref="pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.6?type=jar">
      <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/jul-to-slf4j@2.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.20.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.20.0?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.15.2?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/jul-to-slf4j@2.0.7?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.20.0?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.20.0?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.spark/spark-network-shuffle_2.12@3.5.6?type=jar">
      <dependency ref="pkg:maven/org.apache.spark/spark-network-common_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.45?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.spark/spark-unsafe_2.12@3.5.6?type=jar">
      <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.activation/activation@1.1.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar">
      <dependency ref="pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar">
      <dependency ref="pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar">
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@14.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper-jute@3.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper-jute@3.6.3?type=jar">
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-plus@9.4.56.v20240826?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.56.v20240826?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-jndi@9.4.56.v20240826?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.56.v20240826?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-xml@9.4.56.v20240826?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.56.v20240826?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-xml@9.4.56.v20240826?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@9.4.56.v20240826?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@9.4.56.v20240826?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.56.v20240826?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-security@9.4.56.v20240826?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.56.v20240826?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-security@9.4.56.v20240826?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-server@9.4.56.v20240826?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-server@9.4.56.v20240826?type=jar">
      <dependency ref="pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-http@9.4.56.v20240826?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@9.4.56.v20240826?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-http@9.4.56.v20240826?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@9.4.56.v20240826?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@9.4.56.v20240826?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@9.4.56.v20240826?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@9.4.56.v20240826?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.56.v20240826?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@9.4.56.v20240826?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-jndi@9.4.56.v20240826?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@9.4.56.v20240826?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.56.v20240826?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.56.v20240826?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@9.4.56.v20240826?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-client@9.4.56.v20240826?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-client@9.4.56.v20240826?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-http@9.4.56.v20240826?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@9.4.56.v20240826?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.56.v20240826?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.56.v20240826?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-http@9.4.56.v20240826?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@9.4.56.v20240826?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@9.4.56.v20240826?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.3?type=jar"/>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.23.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
    <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar"/>
    <dependency ref="pkg:maven/com.ning/compress-lzf@1.1.2?type=jar"/>
    <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
    <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.5-4?type=jar"/>
    <dependency ref="pkg:maven/org.scala-lang.modules/scala-xml_2.12@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.scala-lang.modules/scala-collection-compat_2.12@2.7.0?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.scala-lang/scala-reflect@2.12.18?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"/>
      <dependency ref="pkg:maven/org.json4s/json4s-core_2.12@3.7.0-M11?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.json4s/json4s-core_2.12@3.7.0-M11?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"/>
      <dependency ref="pkg:maven/org.json4s/json4s-ast_2.12@3.7.0-M11?type=jar"/>
      <dependency ref="pkg:maven/org.json4s/json4s-scalap_2.12@3.7.0-M11?type=jar"/>
      <dependency ref="pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.json4s/json4s-ast_2.12@3.7.0-M11?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.json4s/json4s-scalap_2.12@3.7.0-M11?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-client@2.40?type=jar">
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-common@2.40?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-common@2.40?type=jar">
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-server@2.40?type=jar">
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-common@2.40?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-client@2.40?type=jar"/>
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.40?type=jar">
      <dependency ref="pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.40?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-common@2.40?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-server@2.40?type=jar"/>
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.40?type=jar">
      <dependency ref="pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-common@2.40?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-server@2.40?type=jar"/>
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.40?type=jar">
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-common@2.40?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar">
      <dependency ref="pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar">
      <dependency ref="pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar">
      <dependency ref="pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar"/>
    <dependency ref="pkg:maven/com.clearspring.analytics/stream@2.9.6?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.19?type=jar">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-json@4.2.19?type=jar">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.19?type=jar">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.19?type=jar">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ivy/ivy@2.5.1?type=jar"/>
    <dependency ref="pkg:maven/oro/oro@2.0.8?type=jar"/>
    <dependency ref="pkg:maven/net.razorvine/pickle@1.3?type=jar"/>
    <dependency ref="pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar"/>
    <dependency ref="pkg:maven/org.apache.spark/spark-catalyst_2.12@3.5.6?type=jar">
      <dependency ref="pkg:maven/org.apache.spark/spark-core_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-sql-api_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-unsafe_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-sketch_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.1?type=jar"/>
      <dependency ref="pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.datasketches/datasketches-java@3.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.spark/spark-sql-api_2.12@3.5.6?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-reflect@2.12.18?type=jar"/>
      <dependency ref="pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.12@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-common-utils_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-unsafe_2.12@3.5.6?type=jar"/>
      <dependency ref="pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar"/>
      <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.arrow/arrow-vector@12.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-netty@12.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.12@2.3.0?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.12.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-vector@12.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.arrow/arrow-format@12.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-format@12.0.1?type=jar">
      <dependency ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-netty@12.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@12.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar">
      <dependency ref="pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar"/>
    <dependency ref="pkg:maven/org.apache.datasketches/datasketches-java@3.3.0?type=jar">
      <dependency ref="pkg:maven/org.apache.datasketches/datasketches-memory@2.1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.datasketches/datasketches-memory@2.1.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.orc/orc-core@1.9.6?classifier=shaded-protobuf&amp;type=jar">
      <dependency ref="pkg:maven/org.apache.orc/orc-shims@1.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/io.airlift/aircompressor@0.27?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.orc/orc-shims@1.9.6?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.airlift/aircompressor@0.27?type=jar"/>
    <dependency ref="pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.orc/orc-mapreduce@1.9.6?classifier=shaded-protobuf&amp;type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-column@1.13.1?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-encoding@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-encoding@1.13.1?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-hadoop@1.13.1?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-column@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-jackson@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar"/>
      <dependency ref="pkg:maven/io.airlift/aircompressor@0.27?type=jar"/>
      <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.5-4?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-jackson@1.13.1?type=jar"/>
  </dependencies>
</bom>
