{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.5",
  "serialNumber" : "urn:uuid:347c702a-32b7-307b-8483-b6dfe403c7f4",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.8.0",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "76ffec6a7ddd46b2b24517411874eb99"
          },
          {
            "alg" : "SHA-1",
            "content" : "5b0d5b41975b53be4799b9621b4af0cfc41d44b6"
          },
          {
            "alg" : "SHA-256",
            "content" : "6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81"
          },
          {
            "alg" : "SHA-512",
            "content" : "417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d"
          },
          {
            "alg" : "SHA-384",
            "content" : "5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.plugins",
      "name" : "maven-checkstyle-plugin",
      "version" : "3.6.0",
      "description" : "Generates a report on violations of code style and optionally fails the build if violations are detected.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.plugins/maven-checkstyle-plugin@3.6.0?type=maven-plugin",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/plugins/maven-checkstyle-plugin/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-checkstyle-plugin/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MCHECKSTYLE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-checkstyle-plugin/tree/maven-checkstyle-plugin-3.6.0"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.plugins/maven-checkstyle-plugin@3.6.0?type=maven-plugin"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeAggregateBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-artifact",
      "version" : "3.6.3",
      "description" : "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b83c1943a0783f3f81d4cd4c83c363e1"
        },
        {
          "alg" : "SHA-1",
          "content" : "f8ff8032903882376e8d000c51e3e16d20fc7df7"
        },
        {
          "alg" : "SHA-256",
          "content" : "61b20da4e1e3db837630d0810a6a7a5ac9fb7ea31b0a55638062aad6e479c09c"
        },
        {
          "alg" : "SHA-512",
          "content" : "53726aee76ea01de2253c623292f64b5bf7784c6e223ebcc7548a2136922cbdf69d3bc42c44d00e6fe2015d2304b67d02d7a988d400da2ed036d489c6ed8fbe6"
        },
        {
          "alg" : "SHA-384",
          "content" : "d5905d7b94a605e7b7bbc72d2806ee0c475210436c2b2220b8a61b73a58b4cec0fce3bc7d24158d994bb8a73d954b868"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.6.3/maven-artifact/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.6.3/maven-artifact"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-core",
      "version" : "3.6.3",
      "description" : "Maven Core classes.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f8acb450254136ba84d6fa40294e2795"
        },
        {
          "alg" : "SHA-1",
          "content" : "eca800aa73e750ec9a880eb224f0bb68f5b7873b"
        },
        {
          "alg" : "SHA-256",
          "content" : "f572ed9e2a6ea3e30522d13448c5d9b3b80ce62a23dac652111952d4941e2a3b"
        },
        {
          "alg" : "SHA-512",
          "content" : "fe0e2bd7c34267f7c8139d996bee99f41d29bcb6d1bbedbceb055eda31355ef179ed5e319fa97496eb85499bfc5f8738f7ac7f2c17a7118cb87cfacd984708de"
        },
        {
          "alg" : "SHA-384",
          "content" : "6d8776a9dec094f9c58c9b649a024a5a67c04268b260d7fb583de7dd7287b799abadda99755be9d45e55c03910cf1ca1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-core@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.6.3/maven-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.6.3/maven-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-core@3.6.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings",
      "version" : "3.6.3",
      "description" : "Maven Settings model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c7da2b5dfdb0b0ba67e1279a32f40054"
        },
        {
          "alg" : "SHA-1",
          "content" : "bbf4e06dcdb0bb33d1546c080df5c8d92b535d30"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3904bcac30f11fb49e44f5cecaaebb2e9a7a5e4a9a55f20484fbb9fcc1bb66c"
        },
        {
          "alg" : "SHA-512",
          "content" : "dae78e5bedde2009c8a7fdf0b77c91b87b8c4c4cb5bc73f799107edd75597a3c90dc497abdfa43254e7dc31eb7707384254d91fb656c74bb5d86cd868e36209b"
        },
        {
          "alg" : "SHA-384",
          "content" : "a920fa55fd2df6cb39e61a341074feaf38ed5746d516d0281a7ec5dd53bfb34bb935d4ae2e7097fe557ddfff4e9d74ee"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.6.3/maven-settings/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.6.3/maven-settings"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings-builder",
      "version" : "3.6.3",
      "description" : "The effective settings builder, with inheritance and password decryption.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ed6418ee483bd6215770362f68c133d5"
        },
        {
          "alg" : "SHA-1",
          "content" : "756d46810b8cc7b2b98585ccc787854cdfde7fd9"
        },
        {
          "alg" : "SHA-256",
          "content" : "ba611bdc73b691a73b704443bcd7606f625f06cb79588968e101271acbfa0b15"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9f9f538a409d7cf2bd2517854f2d6aa45e0476865f217a11832f042ec361c67998241065540c3269d3db3915c903b15b6e4fb57af9623b192f9d8089110ecbc"
        },
        {
          "alg" : "SHA-384",
          "content" : "17de0c4b32cb3a748e37e687e06003157f474c9f6ffff2d23b1e7a0844aed47202a4b39d305d3f484dd8d4efbcddea3a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings-builder@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.6.3/maven-settings-builder/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.6.3/maven-settings-builder"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.6.3?type=jar"
    },
    {
      "group" : "org.sonatype.plexus",
      "name" : "plexus-sec-dispatcher",
      "version" : "1.4",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0a46e5bc9bc2fbd3b68091066aff2737"
        },
        {
          "alg" : "SHA-1",
          "content" : "43fde524e9b94c883727a9fddb8669181b890ea7"
        },
        {
          "alg" : "SHA-256",
          "content" : "da73e32b58132e64daf12269fd9d011c0b303f234840f179908725a632b6b57c"
        },
        {
          "alg" : "SHA-512",
          "content" : "5b947edcb05a1c17648ec9fe53dd2c66b4a86dd2b950d989255f6edd636fd5d50d18b8f31b3a1736dadd9cff6790a3d0355f2ed896c3eb7f72e009199fe9957d"
        },
        {
          "alg" : "SHA-384",
          "content" : "8d6e72c364a12016aaa2ad1ae7dda8a83af32f47576696eff4fe1d3d7a8142f182beb71d65f9ca668ff38b470d40dd3f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://spice.sonatype.org/plexus-sec-dispatcher"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/view/Spice/"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://repository.sonatype.org/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.sonatype.org/browse/SPICE"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/plexus-sec-dispatcher-1.4"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4?type=jar"
    },
    {
      "group" : "org.sonatype.plexus",
      "name" : "plexus-cipher",
      "version" : "1.4",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b2d6fcf0d5800d5b1ce09d98d98dcaf"
        },
        {
          "alg" : "SHA-1",
          "content" : "50ade46f23bb38cd984b4ec560c46223432aac38"
        },
        {
          "alg" : "SHA-256",
          "content" : "5a15fdba22669e0fdd06e10dcce6320879e1f7398fbc910cd0677b50672a78c4"
        },
        {
          "alg" : "SHA-512",
          "content" : "deb948be3a9f6a2fa74adca17e54b1074948267b3a35dd4000d92c559d0387650770ccee096ad8f01dd51c36caf63878dc0bcf57dfb1f2e3e1a9d51204096617"
        },
        {
          "alg" : "SHA-384",
          "content" : "29d6722d6d4c412a98ed95f1fd6620047b22ce8d7e3160bcc49ca616a016b57be0c4d35daa8896ef93a80bcff77725ec"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://spice.sonatype.org/plexus-cipher"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/view/Spice/"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://repository.sonatype.org/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.sonatype.org/browse/SPICE"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/plexus-cipher-1.4"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-builder-support",
      "version" : "3.6.3",
      "description" : "Support for descriptor builders (model, setting, toolchains)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f43b5ea301aaff0c77aa3b743965da0a"
        },
        {
          "alg" : "SHA-1",
          "content" : "e9a37af390009a525d8faa6b18bd682123f85f9e"
        },
        {
          "alg" : "SHA-256",
          "content" : "3285308ea243a9967785417af5e21ae0c094099b20dfb0b7e1c3d211a87a5e59"
        },
        {
          "alg" : "SHA-512",
          "content" : "1f72981bf568facf16865dbfb1d5955ecbf82d90b5ed3da2bc096fb7e0f67056202d16078d9ad46945de9b59846aadc8ac010d23ab374dffbef5e7534bdbf1fd"
        },
        {
          "alg" : "SHA-384",
          "content" : "03caa416ef387c999dcec4a7f3cbc66f84e5f1b61c22f2d4730dbcc7ee48118ed4cc1170a605c83b2d0956346b205c9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.6.3/maven-builder-support/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.6.3/maven-builder-support"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-repository-metadata",
      "version" : "3.6.3",
      "description" : "Per-directory local and remote repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7c49cd8e557ab6584ab9e4d2cd55f6a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "14d28071c85e76b656c46c465db91d394d6f48f0"
        },
        {
          "alg" : "SHA-256",
          "content" : "2e7f850b20664a151e6ca73dd3af34e639901435c2fe717717e3cbc7ddead3d4"
        },
        {
          "alg" : "SHA-512",
          "content" : "9fbaffa07e4bfc091d4d8818330481bdc9d1d96448087321bb2914aac10ccb1c7b5cc6be0f6c76b8c0232b9cb69e4cdeec4fe40df5e9f2d472a4a027e5a3b3f9"
        },
        {
          "alg" : "SHA-384",
          "content" : "510834044a480d914eeb1a78f51cc0e47ee837a9399f843a0a44bbf75bba71109d8b5d4eeb8c789367d01e5ed881a760"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.6.3/maven-repository-metadata/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.6.3/maven-repository-metadata"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model-builder",
      "version" : "3.6.3",
      "description" : "The effective model builder, with inheritance, profile activation, interpolation, ...",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "afa042b1716f60625df9d9a4ed70c6f8"
        },
        {
          "alg" : "SHA-1",
          "content" : "4ef1d56f53d3e0a9003b7cc82c89af9878321e82"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d9a508edae881054fdb6ad530a5e053a0689ab1318bf7a099016e758b8323ba"
        },
        {
          "alg" : "SHA-512",
          "content" : "d65f71a4c755be518061fc2d33582c3da422cb3d52a01cd68bdf906c0fc4bfc1977da7714f9622452a02d34e00b7d4b1b1e4986bb59cbfdc5333bf12c9c7e699"
        },
        {
          "alg" : "SHA-384",
          "content" : "2745612bde0c1484f01db481819e5277940b22d7d7f07710130c87c73f91d5ca10e1fc94559d639cace3a831c1679635"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model-builder@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.6.3/maven-model-builder/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.6.3/maven-model-builder"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.6.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-resolver-provider",
      "version" : "3.6.3",
      "description" : "Extensions to Maven Resolver for utilizing Maven POM and repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0e5608a1e59e1045934bdef2d2fa0850"
        },
        {
          "alg" : "SHA-1",
          "content" : "115240b65c1d0e9745cb2012b977afc3d1795f94"
        },
        {
          "alg" : "SHA-256",
          "content" : "2379a5cf0b13ae9e11535c2c34a31b57c3866d9cbb7e116b81f9e288d1823702"
        },
        {
          "alg" : "SHA-512",
          "content" : "9febca461a031acd195b96b05fea2f28333a2cb587119a5493a3e9061af87bed4e7e1619acce9a505ad579a71f0a5e740cf78a3642095c2bc45a3d73c358e226"
        },
        {
          "alg" : "SHA-384",
          "content" : "72ff99262231234d1d44facece3aa045baf28d3ec52c32712b1df980642a5c35eae5770b975493115810d64434c703c0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.6.3/maven-resolver-provider/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.6.3/maven-resolver-provider"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-spi",
      "version" : "1.4.1",
      "description" : "The service provider interface for repository system implementations and repository connectors.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8b9930bb63937ff878d2edf783a654b4"
        },
        {
          "alg" : "SHA-1",
          "content" : "905a024ff050e804a8a4df53eeee63cc7d153438"
        },
        {
          "alg" : "SHA-256",
          "content" : "878a03db532fc9e3e80a78ad68bba2c6a1f435b449ebd0ef9dcbf6ef39bba536"
        },
        {
          "alg" : "SHA-512",
          "content" : "250bccfb03d380b0fa64996e7911fa1c58253f28d933746487b8c0b04474bb2d72afb0360656f651a487fac065ce78c966b059d8aab358e8ba3593aca1eeae0e"
        },
        {
          "alg" : "SHA-384",
          "content" : "cdf69253f6f8e60d536d2550b947ceb59df486d40a7124ca33d769176144d1011f577303594a544f48ada54c46c8d9d0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-spi/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.4.1/maven-resolver-spi"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.4.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-util",
      "version" : "1.4.1",
      "description" : "A collection of utility classes to ease usage of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "96e142730857ccda441a5b9baefeed73"
        },
        {
          "alg" : "SHA-1",
          "content" : "3f6d4f4bc3e24b46a776b47ccfeaed9d2ed01549"
        },
        {
          "alg" : "SHA-256",
          "content" : "6b2184872fa7cc2ef5a90481b56af9711c15b371e69ab52f0f31bf24e910dd82"
        },
        {
          "alg" : "SHA-512",
          "content" : "35a0b284fefad99b77c60f15d091c1bad3417baad1fc86fb6850a347a8a75a9cea26fa227ec601577f4096184b82ce198b4472441e95fce556f7d332c6a155cb"
        },
        {
          "alg" : "SHA-384",
          "content" : "29608703ce5c5130762d9c117602bcb5c842b27bd4576291cae8342f835628781589ed5da02ae54bb0cf444f2ca3dc11"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-util/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.4.1/maven-resolver-util"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-shared-utils",
      "version" : "3.2.1",
      "description" : "Shared utils without any further dependencies",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9c8c48e58b12b4584278c355f6c98bd5"
        },
        {
          "alg" : "SHA-1",
          "content" : "08dd4dfb1d2d8b6969f6462790f82670bcd35ce2"
        },
        {
          "alg" : "SHA-256",
          "content" : "3ba9c619893c767db0f9c3e826d5118b57c35229301bcd16d865a89cec16a7e5"
        },
        {
          "alg" : "SHA-512",
          "content" : "4cab9de8654b3744ceb1a62b51853e076c191cae8193e8393a979cd428833b994ceed591806960e100942dde3eeb65538169d42666004e3623b6129475fe2cab"
        },
        {
          "alg" : "SHA-384",
          "content" : "1bc09d2aee6158c845b91788f45e300f9134fe0b0d965324ae1f56575dacd5a0eae2927ce4e09529e966ed5fd6434c35"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-shared-utils/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven-shared-utils/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MSHARED/component/12326452"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.2.1"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.inject",
      "version" : "0.9.0.M3",
      "description" : "JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "643a13084e0ac59cdda06319e1b348ea"
        },
        {
          "alg" : "SHA-1",
          "content" : "3665002ba4d16dfa779ef658a63d0608c4bd898b"
        },
        {
          "alg" : "SHA-256",
          "content" : "15335c4dcf082f599fb8eddcfb58d6a7e9a9c97de2883c257089a479b9b24522"
        },
        {
          "alg" : "SHA-512",
          "content" : "76267078f3dd887fd7c4a0931d0ae057d5f51478f712ce4bb5530cfa5c2aa18a8dbe935b32c1afb01a4e2cde44d30579baf5868b8b63ee066ea0714fd9d8a81c"
        },
        {
          "alg" : "SHA-384",
          "content" : "d24164f8aaae165de8533530b90168228e7d107a5eeb63997bf6e2d41f1adfaabf29aa9ab4f08e3445c69aa57f6c09b8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.inject/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/sisu/job/sisu.inject/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/sisu.inject/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/sisu.inject/org.eclipse.sisu.inject"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject",
      "name" : "guice",
      "version" : "4.2.1",
      "description" : "Guice is a lightweight dependency injection framework for Java 6 and above",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "57c18dbf01a6ef7fa4da3fb594cd243e"
        },
        {
          "alg" : "SHA-1",
          "content" : "41e5ab52ec65e60b6c0ced947becf7ba96402645"
        },
        {
          "alg" : "SHA-256",
          "content" : "158fd8f52d2a4b4ce4293ac2b833bb2427f5ddfe30df4ae0fd4675a1038a3b79"
        },
        {
          "alg" : "SHA-512",
          "content" : "51eec8b514cb7b4f05b8e5846e4cfe5dfc42a3e3171ced079a83e122e7113d96defc6edfada375e072f965b01450e170072b1f85fcd11800804239b93c2878dd"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ba79400b5419f5963c7ad5f3fcde7a55674e2630edd68e12ca9e8797ca41a777489a34297b6c9678f0f6bef4be66484"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject/guice@4.2.1?classifier=no_aop&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guice/guice"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guice"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guice/guice"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject/guice@4.2.1?classifier=no_aop&type=jar"
    },
    {
      "group" : "aopalliance",
      "name" : "aopalliance",
      "version" : "1.0",
      "description" : "AOP Alliance",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04177054e180d09e3998808efa0401c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aopalliance.sourceforge.net"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-classworlds",
      "version" : "2.6.0",
      "description" : "A class loader framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "67e722b27e3a33b33c1b263b99dd7c43"
        },
        {
          "alg" : "SHA-1",
          "content" : "8587e80fcb38e70b70fae8d5914b6376bfad6259"
        },
        {
          "alg" : "SHA-256",
          "content" : "52f77c5ec49f787c9c417ebed5d6efd9922f44a202f217376e4f94c0d74f3549"
        },
        {
          "alg" : "SHA-512",
          "content" : "6a58048d9db54e603b9cfd35373cf695b66dd860bec878c663b4fc53b6b3d44dd5b0c92e7603654911b1f78e63ef277cf6b272fe069a360989138550545f274d"
        },
        {
          "alg" : "SHA-384",
          "content" : "e839707ea5c4351f2703c6861ee4d58e08df0f7509110af13d4b3824e6ec5cfd65508fa80cc3f222baf5cf6c4ab5d5ac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/plexus-classworlds/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-classworlds/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-classworlds/tree/plexus-classworlds-2.6.0/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model",
      "version" : "3.6.3",
      "description" : "Model for Maven POM (Project Object Model)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ebf3c5e5556a22271bf315d0cd5b2b56"
        },
        {
          "alg" : "SHA-1",
          "content" : "61c7848dce2fbf7f7ab0fdc8e8a7cc9da5dd7827"
        },
        {
          "alg" : "SHA-256",
          "content" : "17cef1f58e146ef0d7d9e96b3b92d98a1d6fd7d2b3288ba538e8ff1e0d9160cf"
        },
        {
          "alg" : "SHA-512",
          "content" : "7df3d781dd0c3a5947c76a02bb811d2bff0eb9bd0ba1efc3a55001576c58612bb1fd221ceb9cedd7ed84dfdb64c973b61af22c56636e1cfb03a55cfbe83655f6"
        },
        {
          "alg" : "SHA-384",
          "content" : "dc128cf5bca0d6c14716170efb7d2e37048f73c9b76393b766490580323a58297578c7aa5d49f63b8f48518fabb7320e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.6.3/maven-model/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.6.3/maven-model"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-plugin-api",
      "version" : "3.6.3",
      "description" : "The API for plugins - Mojos - development.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6819bbe98ec09c2e65a497195f1d3344"
        },
        {
          "alg" : "SHA-1",
          "content" : "063fe5967b9c4c1b6fa6004be76e1c939e8bd1d6"
        },
        {
          "alg" : "SHA-256",
          "content" : "61a48effa6d0c68b07ba50df17b270a7f5527212022f250f6d11dbc11efc0e5b"
        },
        {
          "alg" : "SHA-512",
          "content" : "07090ed707bb3364219da130bc7b38a2a2b9fd31bae51144202b52e5e9f8d9690e8b3fe360bb3327fbeaed3b555c42b52144fb87a5854c8ca2226c07d62e0ed6"
        },
        {
          "alg" : "SHA-384",
          "content" : "4c328407527e490bb7bc735150747b8d5fb4baaa4a9e1b947baa005fcbfebc672a14523046c4e4c9a07cdd509c699ebd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.6.3/maven-plugin-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.6.3/maven-plugin-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.plugin-tools",
      "name" : "maven-plugin-annotations",
      "version" : "3.13.1",
      "description" : "Java annotations to use in Mojos",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "28e0cd46a9e26fb2b222eb8509295a49"
        },
        {
          "alg" : "SHA-1",
          "content" : "ba70695f2f396589c49d5da5a99114ee71d03961"
        },
        {
          "alg" : "SHA-256",
          "content" : "8e22e4b806eb760990a0a9a79a8988d26af060b3342e00c62f7a0664f4d73575"
        },
        {
          "alg" : "SHA-512",
          "content" : "8444cddd5c95cbda780dd0711f321ae92e6bf9d6101dbef65bf4eab9232452c88bd2db1d6578b9c0263a35e614835f440994e01edb87acae53d4216c0fe47640"
        },
        {
          "alg" : "SHA-384",
          "content" : "51a67a4a4aca0403f4840583e64176959c01195be401f6b7c01617d804ba8147236ae283feebd1035e0506f5a03746a5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/plugin-tools/maven-plugin-annotations"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MPLUGIN"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-plugin-tools/tree/maven-plugin-tools-3.13.1/maven-plugin-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.13.1?type=jar"
    },
    {
      "group" : "javax.inject",
      "name" : "javax.inject",
      "version" : "1",
      "description" : "The javax.inject API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/atinject/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/atinject/source/checkout"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.plexus",
      "version" : "0.9.0.M3",
      "description" : "Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "964e7bc9837b270566f18b87af65f5d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "b493c7abcc6e04fa0a6a20d489a3db0395c76f70"
        },
        {
          "alg" : "SHA-256",
          "content" : "c99674d3773e26154885661711f0b6d63aa5008f5cc99227a236756d4ad9de5e"
        },
        {
          "alg" : "SHA-512",
          "content" : "68c5df01ad522917d954b62cb3b11376b3446920e8d5cb35737de508e6acd91a36b34144933f427bbe1d29dca9097ba9dd2431c713fe18069f271a80b519f051"
        },
        {
          "alg" : "SHA-384",
          "content" : "bd39a6cc9c18c62e64393da231b61efbf5bdeb8c0306e455bbc6e33f4b614e14023ccfbec83c943994da6684ab453092"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/sisu/job/sisu.inject/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/sisu.inject/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/sisu.inject/org.eclipse.sisu.plexus"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.reporting",
      "name" : "maven-reporting-api",
      "version" : "4.0.0",
      "description" : "API to manage report generation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9c49fcb81d69bb5ec513d624c181fc05"
        },
        {
          "alg" : "SHA-1",
          "content" : "d3ad7e3d03463b5bd77e7d3ce94539cc723c8dfb"
        },
        {
          "alg" : "SHA-256",
          "content" : "cb2cbde3c9c7288f7398a250dcf3c90cf92714cff301f22b298e1091b5def33c"
        },
        {
          "alg" : "SHA-512",
          "content" : "5a76ac4d7d9bbd2c834bfa16062bbf9523588e4ace9badfd2820b5cc5b7efbd1aa148479e4aa1a0f94347fa9ab7fd1ab6e9055d35b6f9c49161aa6a9c2ba6bc0"
        },
        {
          "alg" : "SHA-384",
          "content" : "a839758279aff4fa8da0e4c5970281791ce296772f4178f1c1a07215f701f8eb1a4f54bf73a4eac15a8f6524a35ce1b0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-reporting-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-reporting-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-reporting-api"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-reporting-api/tree/maven-reporting-api-4.0.0"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.reporting",
      "name" : "maven-reporting-impl",
      "version" : "4.0.0",
      "description" : "Abstract classes to manage report generation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "302ed7d914dc813380d361d1acb83c2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d3753b5c13a873a5ddb71f404c6fe1179a4688c2"
        },
        {
          "alg" : "SHA-256",
          "content" : "e9e70fdb26ff8b1f15435e3a68866a25c85b1694007e0fbdfe84e48e946fe463"
        },
        {
          "alg" : "SHA-512",
          "content" : "ba9375f585e019dd617570f1b1e9e0d9c5f892bc50cef901b62bb77af5251f33187d72768ecc1e6b75aaa8701cbf7917d1d9fb341059a1a73abc700cccb86cf6"
        },
        {
          "alg" : "SHA-384",
          "content" : "61415b631b105f16898ee7e88f49cffb6f58440b91115743e3938c8c0cfbedb176b90a6913242f7d084e850c996d0b26"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-reporting-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-reporting-impl/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20in%20(maven-reporting-impl)"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-reporting-impl/tree/maven-reporting-impl-4.0.0"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-site-model",
      "version" : "2.0.0",
      "description" : "The Site Model handles the descriptor for sites, also known as site.xml.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4da689094c6e4a2d6457d21ce959ac42"
        },
        {
          "alg" : "SHA-1",
          "content" : "6a43c5b58b9acbf789618efdda23d5cb9fb0981f"
        },
        {
          "alg" : "SHA-256",
          "content" : "f6ec9ef75a41d1b826e5ecf02d92c5de90a6bc70ea93d5340988703223bf2205"
        },
        {
          "alg" : "SHA-512",
          "content" : "cbc57a27b6aee02de03e5736e753174c85ab9ca484e3ecf29f14d0e5414bae6c7d8d85746dc0be36e69a465f646e3414b4d42cfe0afe5ec84696c7183dce44fb"
        },
        {
          "alg" : "SHA-384",
          "content" : "5792b264ac5100c74ee032f0cd17d6e206de13c0edc9fdcfaac15720f6cb1257398fdcadfc9e4dc82974d45fc5846122"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-site-model@2.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia-sitetools/doxia-site-model/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia-sitetools/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIASITETOOLS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia-sitetools/tree/doxia-sitetools-2.0.0/doxia-site-model"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-site-model@2.0.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-site-renderer",
      "version" : "2.0.0",
      "description" : "The Site Renderer handles the rendering of sites, merging site model with document content.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0af057ade4d5bc3b41a06cf1100bbd93"
        },
        {
          "alg" : "SHA-1",
          "content" : "b68214ec1d3250a4594f598f054977d961e66ac8"
        },
        {
          "alg" : "SHA-256",
          "content" : "6cdee370194f4b9f742d12ef46528042f480d9bdf3de832de2792e1ae9ffc68d"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbd9b5c101c908cfa1a1152d86bd85b34aeab040af2031eed82e40391f2a1f8672665c29e798d9eb0ffc8bbd8daf7d5650ac5498c4674d45e3a2136497bd039d"
        },
        {
          "alg" : "SHA-384",
          "content" : "3f0a3411760b923e905272ffef3acdcb521823509c854d676392748b1610b2aff000c1ddac0e06b20839d5f509d113ca"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-site-renderer@2.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia-sitetools/doxia-site-renderer/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia-sitetools/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIASITETOOLS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia-sitetools/tree/doxia-sitetools-2.0.0/doxia-site-renderer"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-site-renderer@2.0.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-skin-model",
      "version" : "2.0.0",
      "description" : "The Skin Model defines metadata for Doxia Sitetools skins.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9daee5a484a8a9cb32b2fe6cfea42531"
        },
        {
          "alg" : "SHA-1",
          "content" : "86913a4d7f1acbf26d426c97adecb18e21938ebf"
        },
        {
          "alg" : "SHA-256",
          "content" : "3ced0d90353f49e8eb1458f54664b93ec117d79b9789a576da41e2f6f99723e0"
        },
        {
          "alg" : "SHA-512",
          "content" : "c2c7b6b284566175ab474cc65d3cae4e788e0443a0002d8987879e85f1c0a34a05cd02c4ebac0ddffa616d927d6879bfa962ee765bd26e0c96acfe5b888d574f"
        },
        {
          "alg" : "SHA-384",
          "content" : "75878eed8636aa36bed4c9d94749d7366fb37fd6f85a733d69b61a42693334e0777500bd0d1dc3743be20eb043ba6bc9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-skin-model@2.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia-sitetools/doxia-skin-model/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia-sitetools/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIASITETOOLS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia-sitetools/tree/doxia-sitetools-2.0.0/doxia-skin-model"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-skin-model@2.0.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-module-xhtml5",
      "version" : "2.0.0",
      "description" : "A Doxia module for Xhtml5 source documents. Xhtml5 format is supported both as source and target formats.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2369dd687d9b13d115157299d09ca7d4"
        },
        {
          "alg" : "SHA-1",
          "content" : "15fbcfe42e0a50eb33adbc061c9b4db84ec0470e"
        },
        {
          "alg" : "SHA-256",
          "content" : "c91557679a0eb9fde3175055628ceb7b8fd5ab6d308340770d236fb06265dc26"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a6e7cdbbd4cac4f7f275ae4668a61fee7610b1aa4cc1277c17c01b6e28c2e12e82403404d839a727b9aaf08d5c33328c95772e18e3416a5dbdda7bad5a8a13b"
        },
        {
          "alg" : "SHA-384",
          "content" : "11eb926fb6bf0c57d461bb890488c800a374857bea22e6543f2b82273a23fe66ed2f9c6115f1ac7a9169f71160cc76d7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@2.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-modules/doxia-module-xhtml5/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-2.0.0/doxia-modules/doxia-module-xhtml5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@2.0.0?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-velocity",
      "version" : "2.2.0",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fd4bb44db19036ab360720360f09dccc"
        },
        {
          "alg" : "SHA-1",
          "content" : "75a983b74a4c0adcd0751528ff397ae308ef6d0c"
        },
        {
          "alg" : "SHA-256",
          "content" : "3e7e902f492c973cf210ddb8267843a3b65e83f5067467e2f4d9af0051f6b8b9"
        },
        {
          "alg" : "SHA-512",
          "content" : "c8cf2a0cb9b96e78d71559a45a21fc8c74df5088f9934790efdc1bc2da14dc598a551f90addae210798d6a1eecd7c56934e301a601bfc5f1add9a35ee0a364dc"
        },
        {
          "alg" : "SHA-384",
          "content" : "74927582b56f2e46ab5a268ea38e45092d1e1de35c0f2263337cd5470b3934cc239a32eca6407922450ef139f8490ad4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-velocity@2.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-pom/plexus-velocity/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-velocity/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-velocity"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-velocity@2.2.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.velocity",
      "name" : "velocity-engine-core",
      "version" : "2.4",
      "description" : "Apache Velocity is a general purpose template engine.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8dc3c7a26823ee88253f7aa9250c094e"
        },
        {
          "alg" : "SHA-1",
          "content" : "55dfc20bbc4968cf70c5ae5165b5b0324e0067d9"
        },
        {
          "alg" : "SHA-256",
          "content" : "1bf78c2ade46f209bf93ebe72ed2af5b989ca7a1de0a015fc1b92a62f56b6549"
        },
        {
          "alg" : "SHA-512",
          "content" : "af60619861ba97a672a530247a5468230613701c441602be7e633444b41e417c0279aa8914c98d603d2510e857cc43f2442dfbea1110d2579046d963be5f764e"
        },
        {
          "alg" : "SHA-384",
          "content" : "c5306caa3bd659e26cd7f7485fae8c7aa77354c1f44818d2f0629f9bd1d76528d9051e8977bbb7af52728797b054fd50"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.velocity/velocity-engine-core@2.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://velocity.apache.org/engine/devel/velocity-engine-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/VELOCITY"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?general@velocity.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=velocity-engine.git/velocity-engine-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.velocity/velocity-engine-core@2.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.velocity.tools",
      "name" : "velocity-tools-generic",
      "version" : "3.1",
      "description" : "Generic tools that can be used in any context.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "76f13879ead8693fd4d5751a8a236089"
        },
        {
          "alg" : "SHA-1",
          "content" : "07aaa49086a64cd9dab967a8437cc03abbfad655"
        },
        {
          "alg" : "SHA-256",
          "content" : "8258cfdcaa16127f35ffe610a3fa4f76b7ebe51b88922c73c4ee39ce8f378ce5"
        },
        {
          "alg" : "SHA-512",
          "content" : "51e7249e92d516f9e8a92a1068856d920edee512563131cca2dede45ed6de0e8667dfe0f54cd59712f255f9019d92ea521b8182622ba303af3a45b9740a6d54b"
        },
        {
          "alg" : "SHA-384",
          "content" : "7aadd12f098af99f43a390b4620ffba74008dd3308fbdd18ca0c012929b80196f3977b8748c967312e12546f8e065ce1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://velocity.apache.org/tools/devel/velocity-tools-generic/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/VELTOOLS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?general@velocity.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=velocity-tools.git/velocity-tools-generic"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-digester3",
      "version" : "3.2",
      "description" : "The Apache Commons Digester package lets you configure an XML to Java object mapping module which triggers certain actions called rules whenever a particular pattern of nested XML elements is recognized.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "41d2c62c7aedafa7a3627794abc83f71"
        },
        {
          "alg" : "SHA-1",
          "content" : "c3f68c5ff25ec5204470fd8fdf4cb8feff5e8a79"
        },
        {
          "alg" : "SHA-256",
          "content" : "1c150e3d2df4b4237b47e28fea2079fb0da324578d5cca6a5fed2e37a62082ec"
        },
        {
          "alg" : "SHA-512",
          "content" : "a2063f01fd50f96cfd8765c49935249a77df47965ff0ae375bb1f1e47e3cdeb5e82eaf0b0e32183e581c01821499f9d4c57419e90352a7aa96b97850950e8652"
        },
        {
          "alg" : "SHA-384",
          "content" : "1691e34753c8ce3bb16729de8901f65def9362a989887e7b5d3cb05ded854e5b25b01b7725201228a97d17c4d68eb5f1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-digester3@3.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/digester/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIGESTER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/digester/tags/DIGESTER3_3_2_RC2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-digester3@3.2?type=jar"
    },
    {
      "group" : "com.github.cliftonlabs",
      "name" : "json-simple",
      "version" : "3.0.2",
      "description" : "Java 7+ toolkit to quickly develop RFC 4627 JSON compatible applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "148c0d1bdc1bcb24394627d6930ee9ad"
        },
        {
          "alg" : "SHA-1",
          "content" : "2337afdb06134a12fc0239299c3ceb2e9c209516"
        },
        {
          "alg" : "SHA-256",
          "content" : "fda65a9ad0e1ac0c88987106e89aa4d8b2a2495e7e042371efa83813f65b7295"
        },
        {
          "alg" : "SHA-512",
          "content" : "c77f7423fd96b5b6159236536e4e4b509032cea94368186b86c99f4ec72cf40ecfb26821cc7124077363902ce2b91644e32e53fa7de3fce9885b400b0424ecd0"
        },
        {
          "alg" : "SHA-384",
          "content" : "805dced7fef08b98489ff09ffedda93998369ed6a024674f09ae8d4e62e8ffab5da235d64e5f91eabc1840f6695a7e43"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.cliftonlabs/json-simple@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cliftonlabs.github.io/json-simple/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/cliftonlabs/json-simple.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.cliftonlabs/json-simple@3.0.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-module-apt",
      "version" : "2.0.0",
      "description" : "A Doxia module for Almost Plain Text source documents. APT format is supported both as source and target formats.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f6613830c1f558b909b32d3e3e271911"
        },
        {
          "alg" : "SHA-1",
          "content" : "0505b4e8d57eb3f8c3d66adcca85ce09311742ba"
        },
        {
          "alg" : "SHA-256",
          "content" : "f4a846c448ca85358279184a310f6ee3f46fa39688f74a72961c1bfe222f28a6"
        },
        {
          "alg" : "SHA-512",
          "content" : "97bbf8b640a29efd19693e09403bda9b1ab0c5b78fd3ea1e383b57d61be8d8fc112a2d2098fee1bf8b84b5b23c52bca1f820245274fb959c74e2c5ff66435705"
        },
        {
          "alg" : "SHA-384",
          "content" : "cb4781e22a3c1f17c7cd630c38a704d5cf7289dcbbd90667ae63eaacd925a93d22678e700a6ab0a59f03757a823a05ba"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-module-apt@2.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-modules/doxia-module-apt/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-2.0.0/doxia-modules/doxia-module-apt"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-module-apt@2.0.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-module-xdoc",
      "version" : "2.0.0",
      "description" : "A Doxia module for Xdoc source documents. Xdoc format is supported both as source and target formats.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd12065dc641017da7006cb39f0490e5"
        },
        {
          "alg" : "SHA-1",
          "content" : "fe3a51c0226cb7cdfdcc97b73681f6ee80fad72c"
        },
        {
          "alg" : "SHA-256",
          "content" : "7956aca14f8adbc48bac86b218701dd44cc990063a69edbfca363b105994a474"
        },
        {
          "alg" : "SHA-512",
          "content" : "34d0ff9cf1de22f57764fb3fc5212794393faf97d7f25a2aeb459cdc3768dd8a9d7ba1a722ab8856a9e9cfae8d0f6155d069275028f6d7e064ca1cee909e283e"
        },
        {
          "alg" : "SHA-384",
          "content" : "f42887fa6cfe11eadef20b1de3445c7985764cee1524768044e7cd9b5359a3d252e852099130715a12bc51255bcc92de"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-module-xdoc@2.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-modules/doxia-module-xdoc/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-2.0.0/doxia-modules/doxia-module-xdoc"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-module-xdoc@2.0.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-archiver",
      "version" : "3.6.2",
      "description" : "Provides utility methods for creating JARs and other archive files from a Maven project.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "742b3136d8ff1fcb66f5fd7f3c267c8d"
        },
        {
          "alg" : "SHA-1",
          "content" : "a2d949d87fed6db197cc3cceec93012dd2317ca0"
        },
        {
          "alg" : "SHA-256",
          "content" : "1f895a587df4844d9b7565e8e9a6352afe1d55532458a0dbeb746bc1d02e9216"
        },
        {
          "alg" : "SHA-512",
          "content" : "352f7af9cff067f4a4e959dd9d450f5eae6cb5dd6ac37c11813f11f83cec0b31143f0f6f30860403aedb9f6bd03c7d7a7fea322ee9b283b5c3a053673177133c"
        },
        {
          "alg" : "SHA-384",
          "content" : "f4d5965d5713ed15449677d971777fba4dcff34109cb3d573af8d9a307675a57cf7cf41b31ea6de543f72743c6ed8ecc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-archiver@3.6.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-archiver/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-archiver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%3DMSHARED+AND+component%3Dmaven-archiver"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-archiver/tree/maven-archiver-3.6.2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-archiver@3.6.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-sink-api",
      "version" : "2.0.0",
      "description" : "Doxia Sink API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0ac989158733a584c6b82e6ab1edc8ec"
        },
        {
          "alg" : "SHA-1",
          "content" : "d767d78857c1fb3cbd21ae3a7870894476ecb0fc"
        },
        {
          "alg" : "SHA-256",
          "content" : "fba33eaee3b01547bcd14b05ebc37f7dacef1819ad9ee7a5b27899afd3472cf4"
        },
        {
          "alg" : "SHA-512",
          "content" : "7eb92a30b7d30c5a397ac1358349560d6b8cc4ff6ca8b0d2d4ada8052bf442b6f860123355fc588ab0de46ae791c9305185fe06fb3b4ab02a74563ed7cfe3282"
        },
        {
          "alg" : "SHA-384",
          "content" : "55a70ff149446ab395900dd6bb15f5df1d9abd95466263df2ad1b24c385c7d5321268b0171095bef8043e205ebbb7d14"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-sink-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-2.0.0/doxia-sink-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-core",
      "version" : "2.0.0",
      "description" : "Doxia core classes and interfaces.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c0fb5fa304380a070a896e79a62b6932"
        },
        {
          "alg" : "SHA-1",
          "content" : "6b8dd422ff321fdbf32a0196b85cce3d63cfe68c"
        },
        {
          "alg" : "SHA-256",
          "content" : "939183cf5ced6741745b2475a4adf78ca85885ee0dad6dae28dd3f25bd447ff3"
        },
        {
          "alg" : "SHA-512",
          "content" : "254ba191aa9a3badee94990bdfce0d629faed0634990060fec014801f02cb8c902be4fa887ee7ad8fbdb0628e132257946f55e2cf34d2aee9e80d4e59db919b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "67f5e1d315f1277e41e976cd19bbf09af2e68500d73e947e18b77c42b996d7ae709af296cd6f822a9bc080827a35eb32"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-2.0.0/doxia-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.17.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f6232d0e290d58bb93f74f67165bf91f"
        },
        {
          "alg" : "SHA-1",
          "content" : "ddcc8433eb019fb48fe25207c0278143f3e1d7e2"
        },
        {
          "alg" : "SHA-256",
          "content" : "4aa4ca48f3dfd30b78220b7881d8cb93eac4093ec94361b6befa9487998a550b"
        },
        {
          "alg" : "SHA-512",
          "content" : "98bc665c16268ff1074f415f493ba66d214ac23665b6e964086b60d523b35b1b03fd2e79211e84aa8ebf0921ea028f992827e4642fd086d7104a408b454d38ce"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dabc3cd47eec79ae537e48739f9abbc64e9b75f63809f35f062d54b8d737de0ba282d7d35a236940b9152e1c54f5918"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.17.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.12.0",
      "description" : "Apache Commons Text is a set of utility functions and reusable components for the purpose of processing and manipulating text that should be of use in a Java environment.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "544add6fbc8d4b100b07c3692d08099e"
        },
        {
          "alg" : "SHA-1",
          "content" : "66aa90dc099701c4d3b14bd256c328f592ccf0d6"
        },
        {
          "alg" : "SHA-256",
          "content" : "de023257ff166044a56bd1aa9124e843cd05dac5806cc705a9311f3556d5a15f"
        },
        {
          "alg" : "SHA-512",
          "content" : "7d198cc288e4d515f37c81d0dcd1210bce3594d2a06a11f6a78566d33c33acdb4f292b0b42c87281b69fe3af891966bca708e25fa29b1b3536e9f951f5b57d7c"
        },
        {
          "alg" : "SHA-384",
          "content" : "4f471c41486a396f25e6956750440aa05c294778ae1ffaafba1f8596f0d49da45b56ad829d59343900fca7c0db461bbe"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-integration-tools",
      "version" : "2.0.0",
      "description" : "A collection of tools to help the integration of Doxia Sitetools in Maven plugins.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b8e18118b11a20e0ddc66b235989682e"
        },
        {
          "alg" : "SHA-1",
          "content" : "ce08d289ed826416983860fb2adced6dd7ade550"
        },
        {
          "alg" : "SHA-256",
          "content" : "4aee72f9b30b507964c2f52b63f70e7b41fb9d957359cb5dc13c428abb4b6189"
        },
        {
          "alg" : "SHA-512",
          "content" : "f1283e59206ef36d30b461a3acd492e0293ef43408e3836b383cef2008dec2c67855bd834477dc6c570948eb23c0563513ea1e77ed70c4fe740cf497b5aedf7f"
        },
        {
          "alg" : "SHA-384",
          "content" : "571f23ff6805482534a2900ea0d31f60990e66a23ca84c7c1277dd7e835a6c366444758b74449c06f34e417e6f023b97"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-integration-tools@2.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia-sitetools/doxia-integration-tools/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-doxia-sitetools/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIASITETOOLS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia-sitetools/tree/doxia-sitetools-2.0.0/doxia-integration-tools"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-integration-tools@2.0.0?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-interpolation",
      "version" : "1.27",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c2edbe0dbc934692794aaeac6006055a"
        },
        {
          "alg" : "SHA-1",
          "content" : "8dc73f4ff5eafcbb7ec035ba54736e828b272533"
        },
        {
          "alg" : "SHA-256",
          "content" : "3fb4fb6143fdf964024c3cb738551524b9ea84e5c211cd660c559ad0703e5230"
        },
        {
          "alg" : "SHA-512",
          "content" : "34ae1399e75560d6aec6743ce37e10d2236342ec58145c3fdd7b03340f4ed3ef500f824c845d452dbb8c3f14d118c855707de4a080074fa572daf7ccfef4dddf"
        },
        {
          "alg" : "SHA-384",
          "content" : "cf31f04d414db3c864a403628707df8b36c379a984d75804e5cbfeeea5fea54d2510620de045c0b01a7745063b3135fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-pom/plexus-interpolation/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-interpolation/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-interpolation/tree/plexus-interpolation-1.27/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-component-annotations",
      "version" : "2.2.0",
      "description" : "Plexus Component Java Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a2397189a5ce25e7d2d44effa9f5176c"
        },
        {
          "alg" : "SHA-1",
          "content" : "a506f84636ea7ae370d04167dd155c103e616f68"
        },
        {
          "alg" : "SHA-256",
          "content" : "50edb93c73786e62822b4fe1336e22880fdf147191373cf5c911370e16748fcf"
        },
        {
          "alg" : "SHA-512",
          "content" : "33595f37df5b5f11a863082e2ef90d871f52bc6c83fb593b0747a4c7eb91c3b5ab9bfe804a54b7d82ee6f289e2d47c443c8dafe4159d07b6c80394a5666db2f6"
        },
        {
          "alg" : "SHA-384",
          "content" : "4850c234dfc3c37bc7f50b8ad5f86abc42927e0135582461a0d2d8cd0649ed304352cd0e91ccd006c55c6d06f7940104"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-containers/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-containers/tree/plexus-containers-2.2.0/plexus-component-annotations/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-resources",
      "version" : "1.3.0",
      "description" : "A component to transparently retrieve resources from the filesystem, classpath or internet.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fcc594fc0965b615ec74294fc30e00dd"
        },
        {
          "alg" : "SHA-1",
          "content" : "0f082cbb44a0fb317e405ed6bfbd1ca983f38e14"
        },
        {
          "alg" : "SHA-256",
          "content" : "827baaa0215caedcdca59d091f04480566f7a43996183b9f9871fecff7abebea"
        },
        {
          "alg" : "SHA-512",
          "content" : "0ee6b764a48a23a3c99982ea793881a172a4cf548bd7351f59c8570f3106972e7625cfc60e3b681c966df794e4771a6f80e9574bbdbb2a0666d1d4ecd22a307b"
        },
        {
          "alg" : "SHA-384",
          "content" : "1f14a093e0428e286b0f2a221ff5c313573971a0d3cb91efc4dc2967e8b575803ee5463c291dfdefa541d8b9af254b2e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-resources@1.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-pom/plexus-resources/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-resources/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-resources"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-resources@1.3.0?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-utils",
      "version" : "4.0.1",
      "description" : "A collection of various utility classes to ease working with strings, files, command lines and more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0fa4c6aabfa676c4a1a1bf0c7473f684"
        },
        {
          "alg" : "SHA-1",
          "content" : "2162c639aa9b081ef2a0be9d41643513e284bf99"
        },
        {
          "alg" : "SHA-256",
          "content" : "96b9cc44439191d2d0635974e2d44e768736b4fb2abcb65f94cd95e41912fa8b"
        },
        {
          "alg" : "SHA-512",
          "content" : "ecf609d495c9e7728476ca35d4290c94d862c393afc6a98090571f4047d4184d1c5231fd6af4bc68fe7d832eca26171f86af5ec590d6f2f70740b720a6f636b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "713234f501e1911062a1e4272e10ab355c7dfb8f67ee1068dd35e71f6c1bd97becf4cf41a242877f8272db4028408e3c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-utils/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-utils/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-utils/tree/plexus-utils-4.0.1/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-xml",
      "version" : "3.0.1",
      "description" : "A collection of various utility classes to ease working with XML in Maven 3.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cd868918ebc742350840124ea4422ab0"
        },
        {
          "alg" : "SHA-1",
          "content" : "b0e73c21402f03c2765674b8dede21673b3288cf"
        },
        {
          "alg" : "SHA-256",
          "content" : "c1a510a87a62bd2d74ac1472dd31c3f9e9b0b8b8568f37d77c0f135415bebd05"
        },
        {
          "alg" : "SHA-512",
          "content" : "422f2ccdda00dd8c90c2f5b5f4ad6f0410fb6f2bcb3429d196f7f39c96a44a6709c70539648214d5b7686a70240a6c16c7b985b943f8002d318f90896230a259"
        },
        {
          "alg" : "SHA-384",
          "content" : "da397eb08963f4366d2119af1d993efa00fee25e50b09454422805ce83e662507e2afc7f6b4171a9c5da111d7ada3365"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-xml/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-xml/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-xml/tree/plexus-xml-3.0.1/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"
    },
    {
      "publisher" : "Codehaus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-i18n",
      "version" : "1.0-beta-10",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7f36c0459c853750c627f682ec7bcf52"
        },
        {
          "alg" : "SHA-1",
          "content" : "27506f59e54cc80b8c28b977c2bcd0478094e0cc"
        },
        {
          "alg" : "SHA-256",
          "content" : "b87f25b512ffafcafbf4a05ab943812e9c6915291370c6b46016eb3836886c41"
        },
        {
          "alg" : "SHA-512",
          "content" : "c06555d10b1f1e66ddb93f3f5045de305b3e7b04f761a9d1956e2aba32d9d7541affc2f2281eae2be48b32d233da08da9f905153c6a0804de98d55b2d3025fae"
        },
        {
          "alg" : "SHA-384",
          "content" : "5e2a8327bb2d682e2e8aa69526006d831bda94eaee64b20174b7de88bd476b461be35564f274b4255546609578ecf0f8"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://plexus.codehaus.org/plexus-components/plexus-i18n"
        },
        {
          "type" : "distribution-intake",
          "url" : "dav:https://dav.codehaus.org/repository/plexus"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/PLX"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.codehaus.org/browse/plexus/plexus-components/tags/plexus-i18n-1.0-beta-10"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "group" : "com.puppycrawl.tools",
      "name" : "checkstyle",
      "version" : "9.3",
      "description" : "Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "72bde27b288d420763b53dd192037ed5"
        },
        {
          "alg" : "SHA-1",
          "content" : "f8c4b25a65d8e4b9b5f60e3fb3efb9c9ad2c7d7b"
        },
        {
          "alg" : "SHA-256",
          "content" : "0463e304980f5460b964f481ccc25a10fb253b60100c19e50fc992892895977f"
        },
        {
          "alg" : "SHA-512",
          "content" : "c584dc9fcba152add7834e5695e097c2c7792f4adbfcb8b01bb567f8404c733c84d88487c5deb66c765a509a01150f3a9601541225dd227c3278d08bb5d0f186"
        },
        {
          "alg" : "SHA-384",
          "content" : "c9013ab06bddffc55e0acfdc6247d745444260e70f1e2786c6e50c3bc250fc3518741494f0206d96a7c44ef8fdd53db7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "LGPL-2.1+",
            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        }
      ],
      "purl" : "pkg:maven/com.puppycrawl.tools/checkstyle@9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://checkstyle.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/checkstyle/checkstyle"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/checkstyle/checkstyle/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/checkstyle"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/checkstyle/checkstyle"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.puppycrawl.tools/checkstyle@9.3?type=jar"
    },
    {
      "group" : "info.picocli",
      "name" : "picocli",
      "version" : "4.6.2",
      "description" : "Java command line parser with both an annotations API and a programmatic API. Usage help with ANSI styles and colors. Autocomplete. Nested subcommands. Easily included as source to avoid adding a dependency.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "390577632c9eb557d18d819897aebf6a"
        },
        {
          "alg" : "SHA-1",
          "content" : "2c4196c67c0bc65f7a86cba64787b10d61c3cc63"
        },
        {
          "alg" : "SHA-256",
          "content" : "4754d96eaf5314f35a287da5c67848b285067868fca6d1f5121a74f67f065b61"
        },
        {
          "alg" : "SHA-512",
          "content" : "82be707fba836c85a9e5ff5fb0e52005b4670f0b81a55299a2acf38dcd0f848de6428b5d399676fdffa5e9849dc06e72848854ca592cae6aac03756906ff2c39"
        },
        {
          "alg" : "SHA-384",
          "content" : "908a93c8e4ddfa183ee860356e385076272990656a4f5059c9eba214e4eb5b605ba3c65b6af6d94a11a7b8486cf524f6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/info.picocli/picocli@4.6.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://picocli.info"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/remkop/picocli/tree/master"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/info.picocli/picocli@4.6.2?type=jar"
    },
    {
      "publisher" : "ANTLR",
      "group" : "org.antlr",
      "name" : "antlr4-runtime",
      "version" : "4.9.3",
      "description" : "The ANTLR 4 Runtime",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "718f199bafa6574ffa1111fa3e10276a"
        },
        {
          "alg" : "SHA-1",
          "content" : "81befc16ebedb8b8aea3e4c0835dd5ca7e8523a8"
        },
        {
          "alg" : "SHA-256",
          "content" : "131a6594969bc4f321d652ea2a33bc0e378ca312685ef87791b2c60b29d01ea5"
        },
        {
          "alg" : "SHA-512",
          "content" : "2c3763a8fbc7af110df5d6bb57692759b23e8bf961a53694c69bde4cd9d8c3a8eaa55cf376ce34c6c4e2035a99d7abf08c6ffa3b75d18a6d93a9c1ca95927ea8"
        },
        {
          "alg" : "SHA-384",
          "content" : "62a62dab4a27733a810b97fe5544eb1b5b25d2df83ea8d93802cb0e6fd1b4b3ca5a130c51aa9198deefc30cd0f062841"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.antlr.org/antlr4-runtime"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/antlr/antlr4/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/antlr/antlr4/tree/master/antlr4-runtime"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-beanutils",
      "name" : "commons-beanutils",
      "version" : "1.9.4",
      "description" : "Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "07dc532ee316fe1f2f0323e9bd2f8df4"
        },
        {
          "alg" : "SHA-1",
          "content" : "d52b9abcd97f38c81342bb7e7ae1eee9b73cba51"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a"
        },
        {
          "alg" : "SHA-512",
          "content" : "7762b348caecead49038a38a89754ff7d9be6199324315495ba47cf24f52c06faadf9306d925c8fe47c587589a939c82e491e1c730267fdf354243a68c0f96ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "dcd3845917b8fb189cf4034b0d7c6d266ec7110f85ffbd2711cdea9eb94b4fa3e1cee9120b484c6a120b82769230ed3a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-beanutils/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/BEANUTILS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/beanutils/tags/BEANUTILS_1_9_3_RC3"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.2",
      "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "040b4b4d8eac886f6b4a2a3bd2f31b00"
        },
        {
          "alg" : "SHA-1",
          "content" : "4bfc12adfe4842bf07b657f0369c4cb522955686"
        },
        {
          "alg" : "SHA-256",
          "content" : "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
        },
        {
          "alg" : "SHA-512",
          "content" : "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "31.0.1-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bb811ca86cba6506cca5d415cd5559a7"
        },
        {
          "alg" : "SHA-1",
          "content" : "119ea2b2bc205b138974d351777b20f02b92704b"
        },
        {
          "alg" : "SHA-256",
          "content" : "d5be94d65e87bd219fb3193ad1517baa55a3b88fc91d21cf735826ab5af087b9"
        },
        {
          "alg" : "SHA-512",
          "content" : "c8d8aa38e6fb04c409c37922efcbbe182f65156a853f691d8381d56eea208adf22f7a28873bb7895210e41857dd4411aaf952682a2692051220e281910d0798f"
        },
        {
          "alg" : "SHA-384",
          "content" : "47f0a3fca2671c653cc883e5f2ff35023948a97f736207ea99fff80332aabc00756a5eebaca042364a8fbab16c5db059"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@31.0.1-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@31.0.1-jre?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.1",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "091883993ef5bfa91da01dcc8fc52236"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae"
        },
        {
          "alg" : "SHA-384",
          "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "listenablefuture",
      "version" : "9999.0-empty-to-avoid-conflict-with-guava",
      "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg" : "SHA-1",
          "content" : "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg" : "SHA-256",
          "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg" : "SHA-512",
          "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg" : "SHA-384",
          "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/listenablefuture"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/listenablefuture"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.2",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg" : "SHA-1",
          "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg" : "SHA-256",
          "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/jsr-305/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"
    },
    {
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "3.12.0",
      "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ab1ae0e2f2f63601597a5a96fca8a54f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d5692f0526415fcc6de94bb5bfbd3afd9dd3b3e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "ff10785ac2a357ec5de9c293cb982a2cbb605c0309ea4cc1cb9b9bc6dbe7f3cb"
        },
        {
          "alg" : "SHA-512",
          "content" : "ff20c424e130c31c30b4f4f5b4374f8f98f94ddae2b123f3c213f147be6b3de57854ee5651b02dd97d352c1c1df2a8bfeef73d5307a71372f46a6002eab24d78"
        },
        {
          "alg" : "SHA-384",
          "content" : "60641d5967c60154359437cf49d8b0c14e7c1d876ab1fff4932590b19edcad0e65975299004ac896fb190f45b69ef1a1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://checkerframework.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.12.0?type=jar"
    },
    {
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.7.1",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5260e1257140bed1936991931cff5ed8"
        },
        {
          "alg" : "SHA-1",
          "content" : "458d9042f7aa6fa9a634df902b37f544e15aacac"
        },
        {
          "alg" : "SHA-256",
          "content" : "cd5257c08a246cf8628817ae71cb822be192ef91f6881ca4a3fcff4f1de1cff3"
        },
        {
          "alg" : "SHA-512",
          "content" : "32747ed9abb289da6ec8f3acb3a3be47c1271323847c8e3c1e9f58e9fc4a211221bdaf988990e8ec97bdba3986927ec81cf9d3f3b5939fff8cbdfb0ec7afc7fe"
        },
        {
          "alg" : "SHA-384",
          "content" : "45a2519bd3e638c68f8de82ae3066549e75db98fbc7f8de6e31c6db04ca38829d5e3f69bf9fad3a83b181cef543e0c14"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://nexus.sonatype.org/oss-repository-hosting.html/error_prone_parent/error_prone_annotations"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.7.1?type=jar"
    },
    {
      "group" : "com.google.j2objc",
      "name" : "j2objc-annotations",
      "version" : "1.3",
      "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5fa4ec4ec0c5aa70af8a7d4922df1931"
        },
        {
          "alg" : "SHA-1",
          "content" : "ba035118bc8bac37d7eff77700720999acd9986d"
        },
        {
          "alg" : "SHA-256",
          "content" : "21af30c92267bd6122c0e0b4d20cccb6641a37eaf956c6540ec471d584e64a7b"
        },
        {
          "alg" : "SHA-512",
          "content" : "51ea975179f809cb260751d11a513881b643bf016d15949bcb63b57d3c8868a2197e0620ccbaa5739e032797ec6faa3aa6d64606e999fce32930314780ca4115"
        },
        {
          "alg" : "SHA-384",
          "content" : "d2a54e4bb17793a98f85fb8f91138cd3b3d311385b7fb2c09d05c3112d42218a6da29154ba184f00031919548022aa71"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/j2objc/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/oss-parent-7/j2objc-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar"
    },
    {
      "group" : "org.reflections",
      "name" : "reflections",
      "version" : "0.10.2",
      "description" : "Reflections - Java runtime metadata analysis",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1d0070839d825f57fe6f4d8e2a82989b"
        },
        {
          "alg" : "SHA-1",
          "content" : "b638d7ca0e0fe0146b60a0e7ba232ad852a73b31"
        },
        {
          "alg" : "SHA-256",
          "content" : "938a2d08fe54050d7610b944d8ddc3a09355710d9e6be0aac838dbc04e9a2825"
        },
        {
          "alg" : "SHA-512",
          "content" : "d04700d4b6d3f28faa611e10ce863df1d6c82dfc6dd1b27cb910e44c19089ca08bef939e2bca7bc79274836f8e9d8801c4326232d24a38dba0a4893a20c7c42c"
        },
        {
          "alg" : "SHA-384",
          "content" : "2604ea7e2330b2c60dbc4177076b50b28a056083fe34cca9005b63f7efbba4d8513d1f21b56c296a73292b2003ce1722"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "WTFPL",
            "url" : "http://www.wtfpl.net/about/"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/ronmamo/reflections"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ronmamo/reflections/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ronmamo/reflections/issues"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.reflections/reflections@0.10.2?type=jar"
    },
    {
      "publisher" : "Shigeru Chiba, www.javassist.org",
      "group" : "org.javassist",
      "name" : "javassist",
      "version" : "3.28.0-GA",
      "description" : "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1a2dd8c76321cef26cc2669fe70a2557"
        },
        {
          "alg" : "SHA-1",
          "content" : "9a958811a88381bb159cc2f5ed79c34a45c4af7a"
        },
        {
          "alg" : "SHA-256",
          "content" : "57d0a9e9286f82f4eaa851125186997f811befce0e2060ff0a15a77f5a9dd9a7"
        },
        {
          "alg" : "SHA-512",
          "content" : "49d3109104f01efda1ae8a6145fdb91d1b1331587e2981f6cc1a1b991c50af97e8febfea5d9d224a106cab877c1e4850d183eb3c7316b82e62e51b6ca3fc29e8"
        },
        {
          "alg" : "SHA-384",
          "content" : "b71fc9564c478edebbf19b4044bb9cfb80996f779685d79f6a779d98ce3823b5aa234b91b9da35317ebf4534e1e65a31"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-1.1"
          }
        },
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.javassist.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://jira.jboss.org/jira/browse/JASSIST/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:jboss-javassist/javassist.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar"
    },
    {
      "publisher" : "Saxonica",
      "group" : "net.sf.saxon",
      "name" : "Saxon-HE",
      "version" : "10.6",
      "description" : "The XSLT and XQuery Processor",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9a608de0abc9291900ecb9313b19cbe5"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c961655bd2e6ec11054bf7142c502406359f635"
        },
        {
          "alg" : "SHA-256",
          "content" : "6d08df82e4ed86b6abb1a02c7b74a268fcfc5e004e83bb4ff006ec3a509bd356"
        },
        {
          "alg" : "SHA-512",
          "content" : "b315d17f6cba23da29f1949ed4fe1c95245da88db8d048b11111f25686bf273cbb9de8d2a30a7e70f26c6d4799b2e649961eacc50e215a91e782834c7a8e4b38"
        },
        {
          "alg" : "SHA-384",
          "content" : "e93bd5cf65164c703ac0b04d3a55fce4d6826f5b479250032a1d06b619d15c561d8ceaa24486e5ae10d5383eb6a15501"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-2.0",
            "url" : "https://www.mozilla.org/MPL/2.0/"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.saxon/Saxon-HE@10.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.saxonica.com/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://saxonica.plan.io/projects/saxon"
        },
        {
          "type" : "mailing-list",
          "url" : "http://sourceforge.net/mailarchive/forum.php?forum_name=saxon-help"
        },
        {
          "type" : "vcs",
          "url" : "https://dev.saxonica.com/repos/archive/opensource/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.saxon/Saxon-HE@10.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.17.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7730df72b7fdff4a3a32d89a314f826a"
        },
        {
          "alg" : "SHA-1",
          "content" : "b17d2136f0460dcc0d2016ceefca8723bdf4ee70"
        },
        {
          "alg" : "SHA-256",
          "content" : "6ee731df5c8e5a2976a1ca023b6bb320ea8d3539fbe64c8a1d5cb765127c33b4"
        },
        {
          "alg" : "SHA-512",
          "content" : "dfd5ff7fe7f852b9caabc81e5a00e20616f98405085f059b64dc2121feb5fa6cb327e11a3d2f954c079811c31f6fd484e90f932d45078796fbfa7dbf1f1eb5aa"
        },
        {
          "alg" : "SHA-384",
          "content" : "c6ed55a5c2b05332890a43a3ea73b30f42dc23c92ebd054a8b0d29ca8f49fb9361f7325cfa90715be457804b087221b5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"
    },
    {
      "publisher" : "Codehaus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-archiver",
      "version" : "2.2",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "61dd3bbc4682a29a286baa58f9c7f859"
        },
        {
          "alg" : "SHA-1",
          "content" : "13e55f4c2b7cdbf59a9bbd668d3c058d1a40664b"
        },
        {
          "alg" : "SHA-256",
          "content" : "9154a5e6e1f95a1c74d4254670fec8d7aacd5692115710fe7e1381636c6be38c"
        },
        {
          "alg" : "SHA-512",
          "content" : "fdf3fe088b5bffb79406b61f8aefb77d6b197c6e5e521dfad4c422cab2a6fe696d17055b0e500476109e545fdbb33d7c62462df45b769fdb63b1d47bbc5fe5e2"
        },
        {
          "alg" : "SHA-384",
          "content" : "daed6c961ce6f2c82690a611c39f53c318abaec2cea6a2996c908b75bb946edf983912b91a58f3ccdf36f1530a7e4183"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-archiver@2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://plexus.codehaus.org/plexus-components/plexus-archiver"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/PLXCOMP/component/12540"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/sonatype/plexus-archiver"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-archiver@2.2?type=jar"
    },
    {
      "publisher" : "Codehaus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-io",
      "version" : "2.0.4",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bbaf4deaddcc590be52643888630f693"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc773899dfb3f857411ef49db46f17d7a465a634"
        },
        {
          "alg" : "SHA-256",
          "content" : "58f2898b70709f1216fa3afe69e0a7cdb41ad6a3927b2507a4a89941c9e4ab76"
        },
        {
          "alg" : "SHA-512",
          "content" : "4c31ddddb41985a016911549b28d3dd4ca774b7036f21eba68c8d82e7f9e3a6e80dc10a14b676ebc14d681725856ae6b577352626e0b728f6180748fbdc59aff"
        },
        {
          "alg" : "SHA-384",
          "content" : "6147f61f2290cc8c4146d7f3209d59d428376e91b2147df3dc9999f0e0963c9f0221098215d49ea476e72a0e090eb89a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-io@2.0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://plexus.codehaus.org/plexus-components/plexus-io"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/PLXCOMP/component/14319"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/sonatype/plexus-io"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-io@2.0.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-api",
      "version" : "1.4.1",
      "description" : "The application programming interface for the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4566dcb75f3d95fcc4c2fc83ae562f71"
        },
        {
          "alg" : "SHA-1",
          "content" : "ceee6b7ea1bc252afa585fa32f76c2cda206bdcd"
        },
        {
          "alg" : "SHA-256",
          "content" : "33dc67306cc95da14e5444e8b494d967924abf1d01bae1894676164cbd3f6112"
        },
        {
          "alg" : "SHA-512",
          "content" : "da56ddeecfbb6d285d08fa60f88fe125d1f08f48ea24013b83b6aadf24835c034c9b45cdb815d99505b35e0605c48b6d7e5949f1735a874049b0790e8a8461dc"
        },
        {
          "alg" : "SHA-384",
          "content" : "5756381d718729e842637a3865b1b597757575ff087d4a248b04eaec300f990ff505c174055f00918ab26d14e9ecff88"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.4.1/maven-resolver-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-impl",
      "version" : "1.4.1",
      "description" : "An implementation of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc950efda251e95bd270e82ddc902ba5"
        },
        {
          "alg" : "SHA-1",
          "content" : "1658cfa27978c5949c3a92086514a22ca85394e4"
        },
        {
          "alg" : "SHA-256",
          "content" : "345507f0c8f54a0d0fc6634b70327ab1ebd027ff85c41f593c111ff4cb65a80e"
        },
        {
          "alg" : "SHA-512",
          "content" : "d3132d89be995b13c81ddcca34f4cb22128a774ab133d685369b685e945cdb5c6a4a539cc67043bcf1d11a15f7fc417c464f7c1b34774c2abe7e430cc30c4347"
        },
        {
          "alg" : "SHA-384",
          "content" : "da965507c985b3ec25f11e700b34b3baa3b35d97d42b21d90e09a795c582503564458170672191dcd4a032cdbd498bc8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.4.1/maven-resolver-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.4.1?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.maven.plugins/maven-checkstyle-plugin@3.6.0?type=maven-plugin",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-core@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3?type=jar",
        "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.13.1?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar",
        "pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0?type=jar",
        "pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-integration-tools@2.0.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-resources@1.3.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.puppycrawl.tools/checkstyle@9.3?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-core@3.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-settings-builder@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.4.1?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.4.1?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar",
        "pkg:maven/com.google.inject/guice@4.2.1?classifier=no_aop&type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar",
        "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.2.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.4.1?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.4.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.4.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.4.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.4.1?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.inject/guice@4.2.1?classifier=no_aop&type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
        "pkg:maven/com.google.guava/guava@31.0.1-jre?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@31.0.1-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.12.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.7.1?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.7.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.13.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.reporting/maven-reporting-impl@4.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-site-model@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-integration-tools@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-site-renderer@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-module-apt@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-module-xdoc@2.0.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.apache.maven/maven-archiver@3.6.2?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-site-model@2.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/commons-io/commons-io@2.17.0?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-integration-tools@2.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.reporting/maven-reporting-api@4.0.0?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-io/commons-io@2.17.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-site-model@2.0.0?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-site-renderer@2.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-site-model@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-skin-model@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@2.0.0?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-velocity@2.2.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/org.apache.velocity/velocity-engine-core@2.4?type=jar",
        "pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-skin-model@2.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@2.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/commons-io/commons-io@2.17.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-velocity@2.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.velocity/velocity-engine-core@2.4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.velocity/velocity-engine-core@2.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.velocity/velocity-engine-core@2.4?type=jar",
        "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
        "pkg:maven/org.apache.commons/commons-digester3@3.2?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.github.cliftonlabs/json-simple@3.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-digester3@3.2?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.github.cliftonlabs/json-simple@3.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-module-apt@2.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-io/commons-io@2.17.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-module-xdoc@2.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/commons-io/commons-io@2.17.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-core@2.0.0?type=jar",
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@2.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-archiver@3.6.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-archiver@2.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-archiver@2.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-io@2.0.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-io@2.0.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-resources@1.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.puppycrawl.tools/checkstyle@9.3?type=jar",
      "dependsOn" : [
        "pkg:maven/info.picocli/picocli@4.6.2?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
        "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
        "pkg:maven/com.google.guava/guava@31.0.1-jre?type=jar",
        "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
        "pkg:maven/net.sf.saxon/Saxon-HE@10.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/info.picocli/picocli@4.6.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sf.saxon/Saxon-HE@10.6?type=jar",
      "dependsOn" : [ ]
    }
  ]
}