{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:95c438d0-cc13-3c53-a19b-28dcd84916c8",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-ant@7.9.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-ant",
      "version" : "7.9.0",
      "description" : "Apache Ant integration for PMD.",
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-ant@7.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-ant/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-ant"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.9.0?type=jar",
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-core",
      "version" : "7.9.0",
      "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PLSQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b02f180aecae9bc080a271d37bbf6ab"
        },
        {
          "alg" : "SHA-1",
          "content" : "4cf550e42ff44d537f7855722612c1ada1617159"
        },
        {
          "alg" : "SHA-256",
          "content" : "158edda35a6b89bb85d9884703f989382f5c2c468d96a9c122c7b9541c188ca0"
        },
        {
          "alg" : "SHA-512",
          "content" : "419ba6ea220dfe9e1855784a7e49669fa3a8441c3fc373f808505a12647771fa1538825ecf8fb615487698934f96199bcb598106b142d4cb9bf96594938764a9"
        },
        {
          "alg" : "SHA-384",
          "content" : "78001e130049e74e69f9d0e233155b50369e40c1e4c60ced4cce4c06ecc8bf656f526700c1a8538dc10d46f0918d84fc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5299a2efa65beb5d6029b564083296c47b6e277b13810463dcfd21cb8bce45b6c67f71094d1b09beec743e48ddba1936"
        },
        {
          "alg" : "SHA3-256",
          "content" : "61dbf5a4feade47399650fc810b9daa0fb577e1b5774e719f8d8f76ae3289259"
        },
        {
          "alg" : "SHA3-512",
          "content" : "768fd2a07a6122c8f517d7439ba1acb015e0a56e033f02d327364c2e72e4cfaf00a0453cf36550fd55f9eb453d092da9de9a1145abb3eec36ae657e660c6064c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jul-to-slf4j",
      "version" : "1.7.36",
      "description" : "JUL to SLF4J bridge",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a3fe73e6cafe8f102facaf2dd65353f"
        },
        {
          "alg" : "SHA-1",
          "content" : "ed46d81cef9c412a88caef405b58f93a678ff2ca"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e641fb142c5f0b0623d6222c09ea87523a41bf6bed48ac79940724010b989de"
        },
        {
          "alg" : "SHA-512",
          "content" : "0bb1e7343d07d41bcfb0c1ffeb2db28cbb35e7a80a409b80042f463b082a292976f09d719e319471e31c7bab716121728a16509fd385fc6e3b400b1b214cffea"
        },
        {
          "alg" : "SHA-384",
          "content" : "50e2f326fc00537a5fb3726c7c55556851b3be8b4346f522f27ddecf2fdb44adabae3197b30ccfd854c37d6734adbd8f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4ad0c3870852ac44530a9dcb992d947cd8708ee6f422559da41aaaa8b22d1610fb116b32d2c54df83b110b85487083bf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8e3f5aaaa27f618b52e610376d2a16c6f9dc8dce5e6c2bbe42131a590626aae6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e3da265406b5e69f02235ed7272a48f71cb8b6f0a696820e28e90fb5eafeeb311abf2a4e779b402f384c6a80470fd41116ee52a526f57040fae3b24cb3b19c01"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/jul-to-slf4j"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "publisher" : "ANTLR",
      "group" : "org.antlr",
      "name" : "antlr4-runtime",
      "version" : "4.9.3",
      "description" : "The ANTLR 4 Runtime",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "718f199bafa6574ffa1111fa3e10276a"
        },
        {
          "alg" : "SHA-1",
          "content" : "81befc16ebedb8b8aea3e4c0835dd5ca7e8523a8"
        },
        {
          "alg" : "SHA-256",
          "content" : "131a6594969bc4f321d652ea2a33bc0e378ca312685ef87791b2c60b29d01ea5"
        },
        {
          "alg" : "SHA-512",
          "content" : "2c3763a8fbc7af110df5d6bb57692759b23e8bf961a53694c69bde4cd9d8c3a8eaa55cf376ce34c6c4e2035a99d7abf08c6ffa3b75d18a6d93a9c1ca95927ea8"
        },
        {
          "alg" : "SHA-384",
          "content" : "62a62dab4a27733a810b97fe5544eb1b5b25d2df83ea8d93802cb0e6fd1b4b3ca5a130c51aa9198deefc30cd0f062841"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e2919d471a5b4fa318cd34d4a9fa5a9e1fa4ed37e0ee34c72031f950c447c16df828cbe96635e525859153080b97510b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "70c29f56fa10bfccfd47623ca6e9d3625e1b81da7b0e57269def1d6f84c5cd6e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1a80c6cc4e5cd8e1455717e6d9fc3ab7937eb23f907e4189358f4b2f3eb14475689c02a8258419f6956feaf6da0c0c5cdcfb9300f91efef2f5bfbabac092386c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.antlr.org/antlr4-runtime"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/antlr/antlr4/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/antlr/antlr4/tree/master/antlr4-runtime"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar",
      "publisher" : "Saxonica",
      "group" : "net.sf.saxon",
      "name" : "Saxon-HE",
      "version" : "12.5",
      "description" : "The XSLT and XQuery Processor",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "39b53a0dcd01522e79223e2506061d44"
        },
        {
          "alg" : "SHA-1",
          "content" : "57c007520e2879387b8d13d0a512e9566eeffa73"
        },
        {
          "alg" : "SHA-256",
          "content" : "98c3a91e6e5aaf9b3e2b37601e04b214a6e67098493cdd8232fcb705fddcb674"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8385b52b9de03bbbcfd9900b78d7e1b544102900316d8d95b5f36b75b6f8f492cee7a1ecf737bd0b4caf85d79c003996f83ac156739d60e4d41edd5ef43a182"
        },
        {
          "alg" : "SHA-384",
          "content" : "1e08a834684848bfb6c8029b98d2c8f5634acba483c6cd783aa753a15551c48e32fe718c72abdbb1114bab6e8cbf654d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "89a7d4688edba721f2960ed5a1d572cf9cf83b6d3d71987ef9b8d4a1b00fbcb47f7f6469d8d14cae2ea3eb8b63841a4d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b963a7cb8580e362ee06b8fbd395016900a9842fa03f6f38106544259ebfc464"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f47e8e8922b657d8190b391178fc86b4808b0c1d40cdc4de8231cefd619d645de971d9b0e33c8da8c25de5cb4f558861cbed77839dd619f4f4f4317378cbdb3d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-2.0",
            "url" : "https://www.mozilla.org/MPL/2.0/"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.saxonica.com/"
        },
        {
          "type" : "vcs",
          "url" : "https://saxonica.plan.io/projects/saxonmirrorhe/repository"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar",
      "group" : "org.xmlresolver",
      "name" : "xmlresolver",
      "version" : "5.2.2",
      "description" : "An XML entity/uri resolver",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0de20e8f7acfa5942d78c239d3034deb"
        },
        {
          "alg" : "SHA-1",
          "content" : "152378e04ba01898847bf38fad5023c7d52f0c9d"
        },
        {
          "alg" : "SHA-256",
          "content" : "efc92bd7ed32b3e57095e0b3e872051ccfbbdcc980831ef33e89e38161a85222"
        },
        {
          "alg" : "SHA-512",
          "content" : "4213b91ddf162a2ee0515f823d859333fa475b84675277bf657eff03162eff4b91660313ce8c19fa9f30b02e2002d87cf06c492e4c303448a96b577b6928f3c0"
        },
        {
          "alg" : "SHA-384",
          "content" : "f093746aa8a39a5d1309fe7d14315ce851d649fe3700d2ec49013947d701c33345e32e4a4306d1475e266487b7ba0169"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a0eb7e9622c96a0dfbd141030b33b24e796e9ae438befde00a77629408a07d855d681f93b0fb052e19e762f5f170c77b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d808c261e2be19a82e25034d0a21cf40bad78eabdfba3bc6ff93f0f91ac30397"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e53fd7e8cc1f17144ac3667667d32a7a6fc21f7b7f7dce715590533f5d276e10be768156338d5e878c47d1e880f9e4799f18f289e00bfa155d45571d02787899"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xmlresolver/xmlresolver"
        },
        {
          "type" : "vcs",
          "url" : "scm:git@github.com:xmlresolver/xmlresolver.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents.client5",
      "name" : "httpclient5",
      "version" : "5.1.3",
      "description" : "Apache HttpComponents Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "757bfb86277b9b11798db8fdb351bf74"
        },
        {
          "alg" : "SHA-1",
          "content" : "13c984b7b881afcff3a7f0bb95878724a48a4b66"
        },
        {
          "alg" : "SHA-256",
          "content" : "28c759254f4e35319e078bb6ffea75676608dc12cb243b24fb3c8732522977fe"
        },
        {
          "alg" : "SHA-512",
          "content" : "4fb38b6bf164103e68320ce430776915a6831923eb3e0b6e6f29ff57647e6bd29efc07d46b107aec23bf9004cfd959fbda8153740ba0060260a54d67ccf8a093"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e6c7bc00b5e25c564faa6f20d01b26288163de846273943bdc7a043348cbe4a5540dc875ed057054c2af5c6e10f8147"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ecfe2613d27758859bfadc02b97b073b5ca74c2e983198c949851c2d287de00e85d4c1c822329e63a38617f85ff281fb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "29df48d822099ef07e6687f12acdecd8f22dcfe84106667183d6790bbc9ed121"
        },
        {
          "alg" : "SHA3-512",
          "content" : "46cafa187fb940370f545efc73ff7d160d9b54810a9556d13c4e0010b44a0155e0cfad0251fb030f0cbae2d2108a6ef0ac918c32b3ad6d6dc2da1a360815b564"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hc.apache.org/httpcomponents-client-5.0.x/5.1.3/httpclient5/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-client/tree/5.1.3/httpclient5"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents.core5",
      "name" : "httpcore5-h2",
      "version" : "5.1.3",
      "description" : "Apache HttpComponents HTTP/2 Core Components",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e12cc9746f6635675a408e641c95b177"
        },
        {
          "alg" : "SHA-1",
          "content" : "4664b59b09f5ee008e37a963bbb92f4068e91696"
        },
        {
          "alg" : "SHA-256",
          "content" : "d0e78ba15aa8ebe77982b660ac4b09a95d6e035dbdbea762577dc1c8e2935807"
        },
        {
          "alg" : "SHA-512",
          "content" : "76a22785285a3c12a98db24d678f1fd695cb4941be438fd80a7c41b4fbf804452694f93947579aba3bcee652671e362ae6d76bfb60a8db75518e52aba4ddad36"
        },
        {
          "alg" : "SHA-384",
          "content" : "cfead6178cd1cc30fcd9da2f8753897a2039e7915eded3278fb74545a49db68a10860ed064e9f52d0f1526e3cd7caa35"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d98a2ba3eaf1eb38629e2d02eb6b31e4e4b2290c321bd58c0377ad4427a969b881d6b31cf8afdc8b9e306ef8d7d39439"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7114b9fd4612be12d156312568633e13745c8bd3da7c28af60373a70f31875b5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3f32c0564b4af84b886df450df91498523c40ba6bf98354413ff3f4c85f782cd2a3cd9e6ef2f38c18a79ecb8c444326c7b043feb5fc3f8cafe043e9217362255"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hc.apache.org/httpcomponents-core-5.1.x/5.1.3/httpcore5-h2/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/5.1.3/httpcore5-h2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.15",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "303baf002ce6d382198090aedd9d79a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
        },
        {
          "alg" : "SHA-512",
          "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
        },
        {
          "alg" : "SHA-384",
          "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents.core5",
      "name" : "httpcore5",
      "version" : "5.1.3",
      "description" : "Apache HttpComponents HTTP/1.1 core components",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e3311847fc70a84038fb2c079dd08c4a"
        },
        {
          "alg" : "SHA-1",
          "content" : "d1638d1e5f2793f187d4144c702a93524ba6fd3b"
        },
        {
          "alg" : "SHA-256",
          "content" : "f2bf2f2c7772169c9e30699719667ad30f9b46c4e9d7841907deb2d12d9923fe"
        },
        {
          "alg" : "SHA-512",
          "content" : "c9b439da0fb0124f37676686c69f8fdb824a30e0d6a3b9ebc0ebca5555727ae18cc5a146d8874b4cfe6fa966d5eb6083a44c379a76017ec79863596a23c571b3"
        },
        {
          "alg" : "SHA-384",
          "content" : "63d37103c0b040ed9f0c70af0bcc9792c68afe8c7da5f445f30458c7c802524f07a1bdb573661e680955a257e0fb6b4c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5ddd51ea89b40049c0b92bdfd0fc59fd2963c025895bece1b9438166e9e468b8b54694e9e72a8d026f681ec92824f224"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0a1d52398f2a13124591cc6fce1fee5f353c29c9726b4f68813b01f077940947"
        },
        {
          "alg" : "SHA3-512",
          "content" : "eecbd33885bb1718a1803951d9217b108e42e39cedfeac99bd0938cec94674b1c67d6f4d6141c8e225061a51a1ac3af07f553501ff2b136e358a3eeffbcd3ea9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hc.apache.org/httpcomponents-core-5.1.x/5.1.3/httpcore5/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/5.1.3/httpcore5"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&type=jar",
      "group" : "org.xmlresolver",
      "name" : "xmlresolver",
      "version" : "5.2.2",
      "description" : "An XML entity/uri resolver",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0e77f628aa613bbe3145c6a24f8973f3"
        },
        {
          "alg" : "SHA-1",
          "content" : "5624ede8b8e374979194acaae9f34cff23b62b3e"
        },
        {
          "alg" : "SHA-256",
          "content" : "173904bdbd783ba0fac92c5bcc05da5d09f0ce7eed24346666ea0a239461f9b4"
        },
        {
          "alg" : "SHA-512",
          "content" : "18f9f0ab3426800c82a707bf5e85a281955695fc703dc6c80c055227e5b78d825329f6b0eee0605b80c3c5cc33c7b81056a7504dd4c2f289e41d608d0ad1c357"
        },
        {
          "alg" : "SHA-384",
          "content" : "3c3e1b18e2e0ac1f4b67e17ba189c86d7f69bbf0f1bb491cb65a2a4a4efc76f695559bc61900e5ec5ad694b137547207"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1623fc11b9650912008cc32276d58c6a3a89e730f3343f4db546218a654bed959050b6a2553393a08a4779c8c36a7b18"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e5d26342451df2725301cf0ca980906e1b90c2dbbd67561e78a6fc77aafb1789"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f5199748a7503a51444711a1414ceb5034f0e8730a46a6f20dd2e71c95eaf9e0323b1f41f0b7c70f6051780ed90c6b78282b0f3ff6a302794d0be281374dd3a5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xmlresolver/xmlresolver"
        },
        {
          "type" : "vcs",
          "url" : "scm:git@github.com:xmlresolver/xmlresolver.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.17.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7730df72b7fdff4a3a32d89a314f826a"
        },
        {
          "alg" : "SHA-1",
          "content" : "b17d2136f0460dcc0d2016ceefca8723bdf4ee70"
        },
        {
          "alg" : "SHA-256",
          "content" : "6ee731df5c8e5a2976a1ca023b6bb320ea8d3539fbe64c8a1d5cb765127c33b4"
        },
        {
          "alg" : "SHA-512",
          "content" : "dfd5ff7fe7f852b9caabc81e5a00e20616f98405085f059b64dc2121feb5fa6cb327e11a3d2f954c079811c31f6fd484e90f932d45078796fbfa7dbf1f1eb5aa"
        },
        {
          "alg" : "SHA-384",
          "content" : "c6ed55a5c2b05332890a43a3ea73b30f42dc23c92ebd054a8b0d29ca8f49fb9361f7325cfa90715be457804b087221b5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bb9e148a87928c3053bcccee361d5d8d81b3c6ea41a390d96c615afd242409f909361c945f3b4238a297e4ebb2ed413b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f28f34565f25dd65fd1a47916e917df9e3ff2c6721897ea57391a238227c96a2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4c8e7a5f10d091bb240e7eb59287d0e4e4420e7a2d2be2b8060111e479540ffae89040377c99ec7f458cd54e1ac0ed0778951cd1f34d5d90571b8a303fbb9baf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar",
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm",
      "version" : "9.7.1",
      "description" : "ASM, a very small and fast Java bytecode manipulation framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e2cdd32d198ad31427d298eee9d39d8d"
        },
        {
          "alg" : "SHA-1",
          "content" : "f0ed132a49244b042cd0e15702ab9f2ce3cc8436"
        },
        {
          "alg" : "SHA-256",
          "content" : "8cadd43ac5eb6d09de05faecca38b917a040bb9139c7edeb4cc81c740b713281"
        },
        {
          "alg" : "SHA-512",
          "content" : "4767b01603dad5c79cc1e2b5f3722f72b1059d928f184f446ba11badeb1b381b3a3a9a801cc43d25d396df950b09d19597c73173c411b1da890de808b94f1f50"
        },
        {
          "alg" : "SHA-384",
          "content" : "166e2be10a19ca6a6d7cadb542eb1c948562483f02557b467a50a3d19d01318e12e5c3b495c482f3f5369be1b7f20eed"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e301862376e84df61c3547dbf637252750224fb5b74feb82f20e1527a8e3152c45f620192a9111a2db5e2f0e73ebd7ca"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7edcc4ff09b3ace15091a8c550f552a324b5cee6c1527944db5823df7eba8d64"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9d220edc5528e4d788605721490f3d29483dd4bd506765e85d781048419aa89b686a70e316b82ef2a856ead56bb7be6b5d52d77b7ca6f27d5e0e347e9669d731"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.ow2.io/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.11.0?type=jar",
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.11.0",
      "description" : "Gson JSON library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0c69b9199d3a4e6c34dc03619ff7feee"
        },
        {
          "alg" : "SHA-1",
          "content" : "527175ca6d81050b53bdd4c457a6d6e017626b0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "57928d6e5a6edeb2abd3770a8f95ba44dce45f3b23b7a9dc2b309c581552a78b"
        },
        {
          "alg" : "SHA-512",
          "content" : "b8c91426a8275b42ea5c55b104308ffbe656ae3354bc661f62173352e53a4818a009e4dd82bc6cf518c77fda5a4d2eab0d3ad832581a8f0d87966ef04e6c025a"
        },
        {
          "alg" : "SHA-384",
          "content" : "8720df1ca6f2258a71b7f2307e2b49f0ad2379bc93e93be6a6c619e52b95dbe5a080a49149e8708ce1890e97b47b9bbf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e3e268c6f8c75f018c7c8160fba7fe373242d45a2313b5c7823f3f75fcc04bbf93cb43c08ba2998b01b8a3c685d77280"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aa4162683be07c5de9c962e88301054ea42a9bed2257a5e4e650545624a2c094"
        },
        {
          "alg" : "SHA3-512",
          "content" : "31730c961b8920673ac3e973a16272752a46df479bfc0ce4dfb6dd324e32d34e5006247d6b5508b8fdc785ba5ffb42534ea3fa2d7094191febcac60654230e24"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/gson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar",
      "publisher" : "Google LLC",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.27.0",
      "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fb183180666ce3d0a24ef7ba02d7193c"
        },
        {
          "alg" : "SHA-1",
          "content" : "91b2c29d8a6148b5e2e4930f070d4840e2e48e34"
        },
        {
          "alg" : "SHA-256",
          "content" : "24c923372c58e35d0b9f16a028929bb9aedc77521867c274f2bd0735df5ba1f5"
        },
        {
          "alg" : "SHA-512",
          "content" : "479f3c5e25a7ccd90adf70a9b1a71bae18205681ce966618b2ba28aea1b10c087b10ca7172e7b34384901b5e8d2dd009f1cdcbcd2a01be55082d276245de0a35"
        },
        {
          "alg" : "SHA-384",
          "content" : "b71b73336df13a8d102933d851f2ceb486d8554cfdc717f38fb2d36234a7b0c9bc015112c9d0c7c3520a081fa85c55b7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "94e94fd4ad6e3340aff5b059746395abc4952d4b7f570576f5eee0efb7f8801f2ac0b4c95aba400afc8ac1204e96e630"
        },
        {
          "alg" : "SHA3-256",
          "content" : "faa04401fbf3938684fa829d86310ac894c0646b2cdff18106f5384fcd427f84"
        },
        {
          "alg" : "SHA3-512",
          "content" : "18fdd0dd19823353693fab456226914179623be005d27a85250f5e8758d433c9e88f639556a61a03210339be6dafa86a57068e92e0254b305f1a17add4b805c9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://errorprone.info/error_prone_annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.48.3?type=jar",
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "3.48.3",
      "description" : "checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9fe3deae54d20bd78960459c952ac7d4"
        },
        {
          "alg" : "SHA-1",
          "content" : "c48effe7d78de3cf5e8a98c614281ec6a2466a77"
        },
        {
          "alg" : "SHA-256",
          "content" : "443685b1b232803baaf803c15d6f5a425473c6f7b81c5f276dfcf93288e389a5"
        },
        {
          "alg" : "SHA-512",
          "content" : "582f8f7b1899905cb10ab393e19a3bd955b1c4d47a0fa9ea33fbbe35fe75134abf15f750047b926b23ae7db959f2e0cedea47851a02acc865ecbc077deede29a"
        },
        {
          "alg" : "SHA-384",
          "content" : "6486d3698feabe271378a236da34f55c69f0100dea980bcbfe1be313cb736f85082924e1b8d5c09c0195195098854cfc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dd62a854e8601cd0c1c54433d545175a91d484a22cb2062ad7e34f5cb5125fefa38220165317756fa73b4862795e9ba9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3ded58567a04a0799a3645eb1913fe7ac96ac386d52abdfabb73be8c051f3b83"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4dfb61410ac95058dbc2478e88b64ab5373e75bfeb80d64f82ae3ebf3f26f1c993799f367d7c37afc38a0bff8d4cd7a8094db9875369f8542f70561e92b58659"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@3.48.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://checkerframework.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar",
      "group" : "org.pcollections",
      "name" : "pcollections",
      "version" : "4.0.2",
      "description" : "A Persistent Java Collections Library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3bc80c4568bb9766e119df617ef8b553"
        },
        {
          "alg" : "SHA-1",
          "content" : "c8398b4443deae11e6eaffbc04a371b4eb8f6b8e"
        },
        {
          "alg" : "SHA-256",
          "content" : "2bbeef5797a241300c4f7513cd546239629ed7deda4fc0c31df90bb95f5f13ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "b1c87f1569c61b079fb50bf4cb0e885aefde3138ab8f1777386aa47652bf9ed359e4437ecff3c6f09e7974c10af88b6c27baaa147b95e1fd69b3fdf3fdbd4da5"
        },
        {
          "alg" : "SHA-384",
          "content" : "a9a0266da1d32de32547431c6f1a629d697f5330a1cb85485b698958d1b5861797cc8037b8dd9cfb6979b52e51b8aede"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7971fad6691a1b90eb2729119582ee638b58a70f11c3232bd277183ce675e4c70dae63a0ba56982c87efc0bc3c2ea338"
        },
        {
          "alg" : "SHA3-256",
          "content" : "338d7fdf8c11b4fc538c05420fb2c6426dab2209e2b1e2a20f1549277f4a4a4f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5722d084f2f3aaa11147ce496c548647555669895d8f456d501a07ba0027a86eea44335c906efcd7a035b7a9ecc1ffe55963023b3581f3005b8acf81f7c9c7fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/hrldcpr/pcollections"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/hrldcpr/pcollections"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar",
      "group" : "com.github.oowekyala.ooxml",
      "name" : "nice-xml-messages",
      "version" : "3.1",
      "description" : "Associates XML DOM nodes to their position in source, to enrich error messages. This builds on top of the standard org.w3c.dom API. Should probably not be used in performance critical code, but can hopefully cleanup reporting logic in places where user-friendly messages are important.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "39c913451ff2d2ec740c58a77a26fa16"
        },
        {
          "alg" : "SHA-1",
          "content" : "4c3863b0f015af5cfd9abe02fab364fb99867167"
        },
        {
          "alg" : "SHA-256",
          "content" : "0b4ceb5b8362d43c9c6c49b1bd57f1c5da54d3c5c7c305fa39c0a04462bb4799"
        },
        {
          "alg" : "SHA-512",
          "content" : "6b3e7c2f1d4b9a46c8dc113b60deee5e2a70b57f308886074816e0d7e3a5460cfb7c1c547171c0ad125deb551bafbb41b911c52db8bac448be3504b0d407a7fc"
        },
        {
          "alg" : "SHA-384",
          "content" : "c79cd24010cfcfcc712509412dacbfb5bcc4a64e98bfd6a638698350c4f45c1a2c6724491368cc56a4d5947cbe0482e1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "218130aec89a116471d0dd34b9c733f144e36f1cbcd2b705fea4ed2f7fb90e8c6a5386aaff037bc772e180868b13c03f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "02b4007b4ada909e9bb676189310b233c8c2c254e2bdc901928030ef0f96f346"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f2e7883ab42ba31eb380ed9dc7199f3d7d4b0c0c8b06432ebe502c6e117017abdd579f86032a14bf842fb68889a13d1bd504a60a212f889e171e78003c0322a0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/oowekyala/nice-xml-messages"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/oowekyala/nice-xml-messages"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.15?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.ant",
      "name" : "ant",
      "version" : "1.10.15",
      "description" : "master POM",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "688b6e5ca5900863c26af4fe4ee7e924"
        },
        {
          "alg" : "SHA-1",
          "content" : "da854f5503ee061a5a3b2cfcbe98ee27aa4a5ef9"
        },
        {
          "alg" : "SHA-256",
          "content" : "763acda4a69588c9ea8817a952851ff0c2fc4bffa1d081c2565dc407f29d5794"
        },
        {
          "alg" : "SHA-512",
          "content" : "d5109838090a4463098c4a82c171d07b92d42633010e045388fb8a68744fdcdd2b07a75a9fb56783e83ecbcc80664119ccc44537993125d6724956e114508316"
        },
        {
          "alg" : "SHA-384",
          "content" : "346e03bb241031fbb3941463cdbbe5a8bca2ca72e34a8ae01959891f963ca5c789cd9f5b4b743539b1fececebeb0d25a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9cdc37dce024e2ca15b5a6e47725964bfa6b20c1772969017a093d29e144135a75842a0716bf597acd12b4fbd5882e57"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c3f3875aa7a96132ca860e8a297b33e7fe36b0c9ccbcc31ae931936f8687a3eb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "beacff02db1fd51c1758511998e873d2c54e27d811fb51812bdc1f28b470f989a7adf762110900d0388864d10cc98cbc3c9e5fc9a6224b1137d55d00351c0c8e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.ant/ant@1.10.15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ant.apache.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Ant-Build-from-POMs/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://nowhere.net/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ant-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/ant.git/ant"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.15?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.ant",
      "name" : "ant-launcher",
      "version" : "1.10.15",
      "description" : "master POM",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "32e60fe28d324dc9cd7ffbc29f8f3730"
        },
        {
          "alg" : "SHA-1",
          "content" : "81431ce614ae38b187de683381f4a35a1db3b1c6"
        },
        {
          "alg" : "SHA-256",
          "content" : "5c8551990307a032336d98ddaed549a39a689f07d4d4c6b950601bf22b3d6a1b"
        },
        {
          "alg" : "SHA-512",
          "content" : "6fc2b33cde07493704c201b759e6813ba5f60ffd3925a52bb097a7fffedbc950bcc4fbc93fe0a86ec2a41872b16b92868b6be87632d3e8e0dc89a5b4143ccb9e"
        },
        {
          "alg" : "SHA-384",
          "content" : "d03acc5fc0bf3049a7a21bb27ebf6c457ce6907b73f2eeb7278b8a98fb41b87fb9f59e516572a73417ef15e58bdb4640"
        },
        {
          "alg" : "SHA3-384",
          "content" : "debecd815ae9b5b8ec22f401088c7178bda2fe835e4cf26147bdc90d0275b9b111907966140b3684e49c9ca3a576345a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1f7d41e186067ecb6160b8f72794c7befed5651b5d1cc673e05b136746fdd602"
        },
        {
          "alg" : "SHA3-512",
          "content" : "13fb946ae1f02b82c2cfb364e4ea27ad21ac3bb41c178865bc1aca6ee2ccbbbed7450811eab52fe647b6593e4b9b40264250ef79d2de19218c1fe90f6bbb9196"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ant.apache.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Ant-Build-from-POMs/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://nowhere.net/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ant-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/ant.git/ant-launcher"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-ant@7.9.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.9.0?type=jar",
        "pkg:maven/org.apache.ant/ant@1.10.15?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.9.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
        "pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.11.0?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.48.3?type=jar",
        "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar",
        "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar",
        "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.11.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@3.48.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.ant/ant@1.10.15?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.ant/ant-launcher@1.10.15?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.15?type=jar",
      "dependsOn" : [ ]
    }
  ]
}