{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.9",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "8e595cdb67f17e4b41e046456970591d"
          },
          {
            "alg" : "SHA-1",
            "content" : "69e8ca804520d09ce4657e7235bae84d01cbffa6"
          },
          {
            "alg" : "SHA-256",
            "content" : "aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8"
          },
          {
            "alg" : "SHA-512",
            "content" : "1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b"
          },
          {
            "alg" : "SHA-384",
            "content" : "b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c"
          },
          {
            "alg" : "SHA3-384",
            "content" : "289f9520bd73a2031276248a6ef8f0891c691062c2d1ea86a2bc9ea8db2c52377d92a53be9957179e71aee3deda26a8c"
          },
          {
            "alg" : "SHA3-256",
            "content" : "32b50a7efe5d491a4039c0017eca3cf49d98b55fc66d06b3dd06209487323474"
          },
          {
            "alg" : "SHA3-512",
            "content" : "1daf813da53e5d5cda4d0302ff3a5e388aa45d96ebe6dcbe240f35d33f14b1e6390f6bbe7f21f3ed8cf96ebd9f5516a08b18487b7339715109c81cebfc1563df"
          }
        ]
      }
    ],
    "component" : {
      "group" : "nl.basjes.codeowners",
      "name" : "codeowners-reader",
      "version" : "0.2.0",
      "description" : "A library to use and verify the CODEOWNERS and .gitignore files.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/nl.basjes.codeowners/codeowners-reader@0.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/nielsbasjes/codeowners"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/nielsbasjes/codeowners"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/nl.basjes.codeowners/codeowners-reader@0.2.0?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "maven.reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "ANTLR",
      "group" : "org.antlr",
      "name" : "antlr4-runtime",
      "version" : "4.12.0",
      "description" : "The ANTLR 4 Runtime",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7fe001eac486c91a7f168cfe7adfb395"
        },
        {
          "alg" : "SHA-1",
          "content" : "dd105cf6ac9f7417b3782c178f6dbd06bf75df57"
        },
        {
          "alg" : "SHA-256",
          "content" : "db353b34927d6e10cd790905cea3c8e17283db464daf572e3eadbb9ee569da34"
        },
        {
          "alg" : "SHA-512",
          "content" : "4abb69a3c6895edeec64c11d61886fbeb68eda5ebb21094f596e4f7add8afa9ff049c05fa916264b9185ac9013b16d8eabf44fb65da0b6871997c8f1473a3771"
        },
        {
          "alg" : "SHA-384",
          "content" : "cd35940addb3277bf74ab06266371ccc43e7e7b1cfb6698e024304f2b32b3f3b9eb78fd9f119bc4cb04bfd9b5c15eae6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6e159bd89432e3f3028ca72967e9155c2ca02482a0196c4451da79185ba402ef6f63784f02356e3ae56c21af696180ad"
        },
        {
          "alg" : "SHA3-256",
          "content" : "405afb6ae207ccba4e8c557250cc9bd2fe095514659128d313dc70b5341e4963"
        },
        {
          "alg" : "SHA3-512",
          "content" : "78d32315ed8d294fa68b4af6dda0791af76ba61864ef5736520d5173c73963a014c1f977dcd0f236a07e728516fbf78cc75a49acd5c484783da1ef16c3ac4fcc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.antlr.org/antlr4-runtime/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/antlr/antlr4/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/antlr/antlr4/tree/master/antlr4-runtime"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.12.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7abdf3e1c7bb44ae120be4b7dc1995f0"
        },
        {
          "alg" : "SHA-1",
          "content" : "e5e3eb2ff05b494287f51476bc715161412c525f"
        },
        {
          "alg" : "SHA-256",
          "content" : "74bd60c8eebd3d43f77a66c69c86540c257a3a098172f8b1d7fcdc9ed3e139ea"
        },
        {
          "alg" : "SHA-512",
          "content" : "12fa3ea9f841f1ff847d89c31dff5edc2e05939efa7b2395fa8b82949b209fe9cbda613ca9290c19d0ddfa6017a4391156efaf548aeb12fd0918928e285f0623"
        },
        {
          "alg" : "SHA-384",
          "content" : "de2993427516b5fd96d44d5269d4b853dfeae5fab2949606873218633a4d0e8492ac985a0590fbd74a1274ff89c7073f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bc73c7de65ff28740182bc0b226b42a861137be17761f4abffdf8228b8af0289f34dfb6e6e07fd1cfb9ea6936a78b40e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "694e837f8152a70fff1e0c0aa90da00c29f2a501fde74b1cc0d50182107589fa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "387337bf3605b6714a3006c47c069accddf8ac3c34b8f2681aa1dbdbebc319a3bd60107437edc389eff17fa649347c6650ee8317a39e3ca150fdaceb86f3818b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.enforcer",
      "name" : "enforcer-api",
      "version" : "3.3.0",
      "description" : "This component provides the generic interfaces needed to implement custom rules for the maven-enforcer-plugin.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3ee4996235560306dc08ad420c21a626"
        },
        {
          "alg" : "SHA-1",
          "content" : "70ae0b985de2aa6c294f4111eb18857bbb08cdf8"
        },
        {
          "alg" : "SHA-256",
          "content" : "cf7e047b4727b65f992392f1b5465d5b741758f141a0a9f304b849a98fdd1621"
        },
        {
          "alg" : "SHA-512",
          "content" : "826ce7bbd36fd6ae2f363aa51804882d53b6df6435b1a3491ce4ac3ee0cc9e7d967fbce546822935dd5087245811d63f2d91d029811032872eecf909b3859b4d"
        },
        {
          "alg" : "SHA-384",
          "content" : "5fe5c2dfa9f398bb77305e82e16c961f425ec021906008b7aa56e01d23d9f230f34b6f5c4d71c90e9637cf75386bed9c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1ba4362a913f70651366a2e31ced0154ec670adc67e91be574cd77a65362f2e9923f8dbe60ae40c8f80631068f96abc8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "046f0c31fb25fc1867d043a4ebc030a97682f370bd6114299e81a17b594773d5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "db73f61db2bd0b96aff7b5f5c716da70b2b4c9fce4a4e023b65c042e92c4a1e41804b9220d18c625fb974a21f4cc7e1cc439f291fb7e6730137ad3ca7d2baa90"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.enforcer/enforcer-api@3.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/enforcer/enforcer-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-enforcer/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MENFORCER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-enforcer/tree/enforcer-3.3.0/enforcer-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.enforcer/enforcer-api@3.3.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-core",
      "version" : "3.9.2",
      "description" : "Maven Core classes.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "31034f248ee2282fca742fd342bc5df3"
        },
        {
          "alg" : "SHA-1",
          "content" : "99d78fc569a74cd827b6944022da2f19c49e7033"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d544e975d9ca300f779f42b476d32032410c5a1c5e968b9b2140a702fa9e6f7"
        },
        {
          "alg" : "SHA-512",
          "content" : "72adbdc22abcaac4c49f3f6a1a3993422a9b31b0b094ce37edd066f5728ca523dfd1e84dd8da776069571c5b34e8d6423b8a480b09b44d0f27078583373823b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "7496aff8b977856aa4a67e0be57cc3c975885430f14d7496b78a1c56cc5e2985df5944fd2e99839bd1a68b27095ecae1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "83d83bb51a93cdfe73e2db6ab361cf15e848ee752857d34533996451bac8796afa4746d6f898e7acfdc5e0ca2e48f9dc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "df3003748a5c9dc1682554188e12252057a09e40c6ad8904a096792c7946f791"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b331f4beee9cb9f55c8f33d4a4f9df4f9c9ac15a7cd1975a91f5bfe621ecf5a4213bccda21cba15f272e88eae118732da7d82368d626ff3dd4167b9af7116f5a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-core@3.9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.2/maven-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.2/maven-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-core@3.9.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model",
      "version" : "3.9.2",
      "description" : "Model for Maven POM (Project Object Model)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2e2737fec3bdea1d0b0f898719b7bebe"
        },
        {
          "alg" : "SHA-1",
          "content" : "24adda115170fa12710f7a269f85fb93e2bab024"
        },
        {
          "alg" : "SHA-256",
          "content" : "0c91583df8b399df87033dbb4c5efe55a0cf6f659da21714c3b0f6f5f9689e28"
        },
        {
          "alg" : "SHA-512",
          "content" : "396961214ffc487cdce03e0e3714928936e1ff30ecd325472d7b37059655263c119f161ab7d175e0e96d5571811625f59e2e2a0108766a46f0d1dec8cd65c56b"
        },
        {
          "alg" : "SHA-384",
          "content" : "60b2b68476c00482749e021c01b5cdff65c84bf3a7742c4a4c2d4899baf694e216b29a1e4b166a16cba5ca311fbec751"
        },
        {
          "alg" : "SHA3-384",
          "content" : "08052f23ee50b6c17ef2b256bfabf16aedf36dbc06042ff91aa00fff885b5cc5340b5154b15496523ba7ef8b9cd7318d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c8870621c6f34b3ab25603e74caac34767238272d9b19f15043f3ae783a53e2f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bd08d07b2d636e4c2318656fee28f30621f66318cad4767539328aa2a6e4f174d616231ef5bb120869e8a18094416ba81b6c6b5eb57acb2cb64fea59a18f5a69"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model@3.9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.2/maven-model/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.2/maven-model"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model@3.9.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings",
      "version" : "3.9.2",
      "description" : "Maven Settings model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "321175a738c7de9ff35360fb2e6481e3"
        },
        {
          "alg" : "SHA-1",
          "content" : "1b71b5935c433f61a3482e134682161a544183a6"
        },
        {
          "alg" : "SHA-256",
          "content" : "ffd180b75ce1050465b2904f5e79db2fcb8628017433afe3b389e32e51360322"
        },
        {
          "alg" : "SHA-512",
          "content" : "48c906b62b30a1c9c28768120e18103ed3b2fb971e2fcad9b4cbd90889c29eb9cee9a9940e864354364d52d3a905c01e9d483f2f01037d2887585aa4f43865bd"
        },
        {
          "alg" : "SHA-384",
          "content" : "b53864bfaf96b6866a5bb9e131b93e972fee8cd8aadd4766b81a4fb4790cf86fca769d533c2cd32062e3643995561262"
        },
        {
          "alg" : "SHA3-384",
          "content" : "be170af66c3972dbcd74d6b45f80a1470806b4505d52572815f67a118e139d3b1eac81a94664afc53657d20d44ebcec7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6a102bf3f61dc1233d2620945f4beead767786415e81247502ba34581d2d9c2e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d4df33ac940c4fe87a26378132d193fba5163d1959fe00f9af761c2cae72475fa17bb5b32bd267b796a1a6833800f7c1e79f64cabc465a3208334876eee11674"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings@3.9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.2/maven-settings/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.2/maven-settings"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings@3.9.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings-builder",
      "version" : "3.9.2",
      "description" : "The effective settings builder, with inheritance and password decryption.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "429eb418496fcf696626c0415514d890"
        },
        {
          "alg" : "SHA-1",
          "content" : "1c61cb0cf780aca25e100226c0e76f3d9f4629e0"
        },
        {
          "alg" : "SHA-256",
          "content" : "936ee7c856e72557d6280a7cf96c2f76eea570e29b11ee0d0057d89722513ed7"
        },
        {
          "alg" : "SHA-512",
          "content" : "3eb284f59449910b255d8c18e61fe1713abcd8baadaafbdc18e7c8d356f69fb7959d163f0b836ed46f2bddaa0eca571f8eeeefa8559ae18a31997959c6a8a1f5"
        },
        {
          "alg" : "SHA-384",
          "content" : "faae42465006594bd538fd95f148546fec1abcf7af985a5a39e59a965d3b3ac7b7929309fee9c33b2002340cf009ca11"
        },
        {
          "alg" : "SHA3-384",
          "content" : "79abecbda04b9c79be0c45d290398a954e1e2ed8a728d8fc31f27e650c4969a4172a8d3607749fbee0e09579782fcd98"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4bdaafb41c028914317d2885316fd63e9fd1bcb39872ef714d87fe25589f635b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "086a40b04ef15a3125f99b036ec20da9492dd73f76f2811e8d43c5b15585b0e73aef7d109fda38482e0ead0c03cf0932666f5df43cd4b864a68c6df520d37845"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings-builder@3.9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.2/maven-settings-builder/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.2/maven-settings-builder"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.9.2?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-sec-dispatcher",
      "version" : "2.0",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e68635a721630177ac70173e441336b6"
        },
        {
          "alg" : "SHA-1",
          "content" : "f89c5080614ffd0764e49861895dbedde1b47237"
        },
        {
          "alg" : "SHA-256",
          "content" : "873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb"
        },
        {
          "alg" : "SHA-512",
          "content" : "ad4e814c8baff780a4eee064903e52b09ae00420a59fb075ef72dbb8d64d12d3d5009b03d56c15f93587d931c3a7f06cad6351ab2dc9415ccc6eeab0daebeb07"
        },
        {
          "alg" : "SHA-384",
          "content" : "4af3426b6409cce7d5fcda4e2af407fc2dbae9873e06d98332bcd032c0039d9080a291e42223ea2bbef9825d3d63493f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "41720858dd5804f9cb26a8878c16dbdf0372a90e99c037809fe76c3de2c5517ba252af8f8cdf534c1a09900702e6a917"
        },
        {
          "alg" : "SHA3-256",
          "content" : "50fa723aefb551a3fd5888375d01f1d776c534cdf833baea392818e9bfa8166e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a43f823d31b377c0c7ec8d36ace69e5dbcdaf4dc4ebb45ff0561fea9e12d74c06090ee24b29b06769d4031693faf5d7e3146583d3a64bfaef6b7c79773a8831f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-sec-dispatcher/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-cipher",
      "version" : "2.0",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "55d612839faf248cbe3e273969c002c2"
        },
        {
          "alg" : "SHA-1",
          "content" : "425ea8e534716b4bff1ea90f39bd76be951d651b"
        },
        {
          "alg" : "SHA-256",
          "content" : "9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a"
        },
        {
          "alg" : "SHA-512",
          "content" : "8f187b07867a7c29d77454aae4b76479300238d9c4e777c1afa2aebe33b88dab916e29111dd55acac1341849f4579fe91a5470fdd45ccba0e05709c2ce3a1d65"
        },
        {
          "alg" : "SHA-384",
          "content" : "6973eefe06a8992aa8db1775c0f43a84cbef54eeea9122a5a30c362af3e4fb13b6cbd6fba229142e2a4495f97d71f409"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ea780d218f96e61005c5582bf3785ddbb33b53ccb4efbffd76ab58166cf261d3c256d52fea28759380684b7e9b0db8eb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e2e51d5350ffdce341464ddcdf9ae60108bff40bf5174dc6be43e33ffcd84af9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f3e17ea31bdefc8094ba3495b8231ec7f90c7175839b009d9fd230110b66ac4c68c912fda1a6e644d93dbce639d738e2535f1ade5841e072a604f5f8ac536729"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-cipher/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-cipher/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-cipher"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-builder-support",
      "version" : "3.9.2",
      "description" : "Support for descriptor builders (model, setting, toolchains)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bf8f8115c163db4e1f62c0c178cf6309"
        },
        {
          "alg" : "SHA-1",
          "content" : "7d6a3b947f22fb48f07e26ecf6bd17a7a37e3d09"
        },
        {
          "alg" : "SHA-256",
          "content" : "701d5793dcd28f09562744b4c3452f77ae94238424a07fb676cf76734deb13bf"
        },
        {
          "alg" : "SHA-512",
          "content" : "c0195e20c9b6b934333753761e380dd49a64c747cf741994be7a426877c3a0eab56e64facdac1e6416acec233c6cfb6008c0caf968934e78e73039ca409122d3"
        },
        {
          "alg" : "SHA-384",
          "content" : "b5d4bd21618453cbe1f5fcb346c9aaa57009c516de1061e13eb172a5daf2fa00c78e8b8ea1c301a666cea870ff6f5f0f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f9a469dd1f260a7fa73de2c693212870242d2dff4f71bdfe5a8d9d771ce9955f3d71cb6c7212a49fb32ba0f3e9896fd0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1257e24461608b54f8b5bb88927b7cbb53cdcb6dd08e61365ff36ff373bab2fb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ecc07c6bfb5fd040e554d0bc04bb451c209a89705d8c953b5506307fe35645b8959a7eba248b100240214072a92945a33d08bf4e8bbd956817b65a8cfe22f3f1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-builder-support@3.9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.2/maven-builder-support/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.2/maven-builder-support"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-builder-support@3.9.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-repository-metadata",
      "version" : "3.9.2",
      "description" : "Per-directory local and remote repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "79dad8fc88c7fbdb69d8549f0d051898"
        },
        {
          "alg" : "SHA-1",
          "content" : "41920d69d891a0c26fdeeab910ba04f6e96c8631"
        },
        {
          "alg" : "SHA-256",
          "content" : "2ab4ad3dd4cf1052747344ebcfa89addfd75f1067d893f8721a22430fb360e8a"
        },
        {
          "alg" : "SHA-512",
          "content" : "9e88e4eeb12e0aa5b7fe6382c7570a38699c0cba96d3cdb678aca1754868b67ad4a5c0b125613f75f64f896d599b194a93ff50f8b4ad255771170d720c59ed9e"
        },
        {
          "alg" : "SHA-384",
          "content" : "7b86c84d82504f7fb7e4a29f4b758509cf15fbc5112b805a7b566af7f532612945cb06bff8a2f839c6a66bb6039aa0cc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "88e10bd77e243e35476d69947c1820da23911a441086b692167c53e9b18cf9ef49fb6e1818e0590cdc3137c8decd1ebb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1435b8f60538a74c509826058bea5023c8f646a5ea51d2fae80d8e3b914a45b0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2c287f2bb68396e7337c2d404ff772172cc0c489fdacc6a04fa8fcdc0a30dcba200c6c7ba2b5c4a7008418c9fead4619a323ba792ba3951435b10903b14777db"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.2/maven-repository-metadata/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.2/maven-repository-metadata"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-artifact",
      "version" : "3.9.2",
      "description" : "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8bbf3e613b6ecdd9b7d547813eb6518d"
        },
        {
          "alg" : "SHA-1",
          "content" : "46dc61a88743a4b674b20f7f5a5495ee9b48b087"
        },
        {
          "alg" : "SHA-256",
          "content" : "f2174221d412a79572817b5aa77125348f43266670b6329a9881cdccf7bbc4b1"
        },
        {
          "alg" : "SHA-512",
          "content" : "2aa00dc77406c976ebba210681ef77380183d9e8872afd5d07230998b4948e7bb1f2b238d167c8954306116d1f415360aacd95b222af2b3b2f2de977da4d9475"
        },
        {
          "alg" : "SHA-384",
          "content" : "36f67e3522166878b2cc9d60e22738cd1cbcfff48d4e58935f3602487d41ce9312bc2ce8bdcf5d15cb092bfbb52c7339"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f1e97f15466e5a752b19e790c8d89e2befd000aca4f631f10de6d9723e91296426ef88061c82cc98175880a854164a28"
        },
        {
          "alg" : "SHA3-256",
          "content" : "14ceec199804d93017ed25687d9a6fd4719263e1aea15ec0adab3d6f710e0085"
        },
        {
          "alg" : "SHA3-512",
          "content" : "08eb3fbbc8281c9306f1d6b827919f05ffba83d3e6346cd6bcebeb0a1de7d0397d9860d034a0bcd810d4013ee783f5e8fe776c41e05317ea556431e20d7da894"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-artifact@3.9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.2/maven-artifact/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.2/maven-artifact"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-artifact@3.9.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-plugin-api",
      "version" : "3.9.2",
      "description" : "The API for plugins - Mojos - development.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "201351a8adeabaa41ba4ae8c76ec7f27"
        },
        {
          "alg" : "SHA-1",
          "content" : "c7b62f1c819330288af8bc8b2ed363d30423e8be"
        },
        {
          "alg" : "SHA-256",
          "content" : "27de347c74dd1d3eb984ae8611874116c486f9f0027f6a4e03f1b69d2ef4aabc"
        },
        {
          "alg" : "SHA-512",
          "content" : "4b0bed46d47c3c1353b4ce7aa64597980dbf1b553dd28f46d71f4ad7c9ccde188740b27d26be3a146644728073b9358d6783711047df4064cedeaa76cf5ed510"
        },
        {
          "alg" : "SHA-384",
          "content" : "24f68991137ff9c64e6ea72b73dfc6399d9dc4e2a56dcc2969fbde7de978b2784d12208263e9618dcc6150fd5aa34e0e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0028e1b8c6ff6f03cfc586e528bcc5467b75d929b51d461caa2f7423b6672958b212c6a66dc9718e770154ffb6e9b6c2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "71cb23274ddaafcff0c49e12a3fd8d7b3afc4d44151df52bacb447514ac5ae2c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ce0f3a23e2f570b3dbde30c31fdf0fc5223891f90344547ad306b5c7ebc519de2507013dd78593b86dfb3632f4ae8f9519d4659de75156a4d010d7057ff83dd5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-plugin-api@3.9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.2/maven-plugin-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.2/maven-plugin-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.9.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model-builder",
      "version" : "3.9.2",
      "description" : "The effective model builder, with inheritance, profile activation, interpolation, ...",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6dc94052883c991ccef9de29fa44f030"
        },
        {
          "alg" : "SHA-1",
          "content" : "2cb41ae8b5eb2493143695ec3e97801860660bfd"
        },
        {
          "alg" : "SHA-256",
          "content" : "1649e8b21eb17ceb528fa0830211482ee229bac177bff309824baaf25c2ad142"
        },
        {
          "alg" : "SHA-512",
          "content" : "137bc980f46243836c58919e57405c653746ac0b88b6374dca637b270ccf16f017b6d1b9ae7b7a84dd33678983b6d9c5081bc5500510598f274749511ab51929"
        },
        {
          "alg" : "SHA-384",
          "content" : "9c84bf1a84018e62f6adf9fdaf88a5a49c54645500b1a9848a8699e089c9ff0a86f4ac386e96884ec2489776e48bb98b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d7c95b2f717e3cb7c9867c26738be5e23a7ffcc7a72eee0a3f646f82583890f8a6db9dd572b48e21a3fd6f44c493adf1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4180ebe6dc05f54fe97f0ddc2f2c9ab90eb57e59d1744157bdcfe90747e4971a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "44b5fdc480b537ed5cc1bc475edfd4f89531f42922ce8bf130167c2cca44006ac6c1121a38895db85be062cbcff7ab08276c6075ec0c1cd7363aa48857f4b8c3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model-builder@3.9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.2/maven-model-builder/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.2/maven-model-builder"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.9.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-resolver-provider",
      "version" : "3.9.2",
      "description" : "Extensions to Maven Resolver for utilizing Maven POM and repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "72aee234b7a09b2737a68eda43caefa1"
        },
        {
          "alg" : "SHA-1",
          "content" : "ba07d5c4593c362735e7d9840b2103cd104d97da"
        },
        {
          "alg" : "SHA-256",
          "content" : "0cae807ff07bc3bfce26d2bb8f2a53b3f6b74600a5406b4c11a32d1fedaddf99"
        },
        {
          "alg" : "SHA-512",
          "content" : "02bd241bb9d14a3a864c2711f9a5558510739472224e29cb276a67ae6c8ef2213d68ae56839b83ab9eca9bd76a5dfd34be48d264442e51e8bd1dfa19ae1bc9bf"
        },
        {
          "alg" : "SHA-384",
          "content" : "9c5e8c659e5de107c198a3bcb7e19c653499bc0cb01edacb148b9f6b0d4e76c9e7b1197a88e0bccbb11a5b9f0db0197d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ceb4683c8cab0ca5ebdc3f8384b016e3482b4178099a0e489a1e5bc829b6e36937558c7191a9208fb2596350571c6a82"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b0c63ef01f59df8b8f1378be977ddee0e57e987752a9d40cd7a6dbfc8f2b8271"
        },
        {
          "alg" : "SHA3-512",
          "content" : "61926ae2de3283555e8aa89476f51c5ab8049210d375981a61d38cc38db702a211d7be796ef05553f4b5af8d4e41f59e297c37b7772eb89382cbcb3d85ec94df"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.2/maven-resolver-provider/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.2/maven-resolver-provider"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-impl",
      "version" : "1.9.10",
      "description" : "An implementation of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6bee43dea0f48403251dec337f28c466"
        },
        {
          "alg" : "SHA-1",
          "content" : "ff625f066d47769d9f9987243aa487cf48474721"
        },
        {
          "alg" : "SHA-256",
          "content" : "6fc7cc06dd6364805e42b89dcaec2d0875ffb1fee8774938783918cb2020f2d8"
        },
        {
          "alg" : "SHA-512",
          "content" : "f54c4ba7a1f0476ad269220cf7cac7c5e0f1f54f7e9023fd5565566efbe2065ba005598967d50147114a8f9de162509460053241036134c4e994c020d2b905c6"
        },
        {
          "alg" : "SHA-384",
          "content" : "9d1997e7c335fd3e76606f9ec5fc7f1447bd779eb218c7b437a6a4553595cc3e7e2927438552d32167b755c993ee301e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ca96e0aec4aeffee020af784ca77b3e13089b93dc32d3ee245bf1cdefd044435a8a0c04f621f873ab5671142912bc7be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aa5bc5538f0421e6afd7eb79eb9290f45c16192720cd03cf70a96630d15069b8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ab8ef07b639e98e37a38e5c1f60c193a9d8d4fc61c312ff84b29329fd6f1ffe28bca94f35b73eb840cdb120a17321c3186345c7d17972453a58e68a01508228f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.10/maven-resolver-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.10?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-named-locks",
      "version" : "1.9.10",
      "description" : "A synchronization utility implementation using Named locks.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6e9a432c51de1b269c4321a4d5ecc7f1"
        },
        {
          "alg" : "SHA-1",
          "content" : "56dc105d305725ebfcb496af92ec50804119e75b"
        },
        {
          "alg" : "SHA-256",
          "content" : "f55d2e75468509a92fc841d818283168ea458ebcb34a3011531cac812e309155"
        },
        {
          "alg" : "SHA-512",
          "content" : "19a6844d82000309ddb0f8f965d5e80889fedddad365ac00903673b2b2555b44842276671af489f70a926ede1a9e0c207979d6b483e78bcdcc6008712729eb78"
        },
        {
          "alg" : "SHA-384",
          "content" : "44de4f6162857a16914da85746ea3efe33fdd3162da1126a83401ef119c4ff9c05139d2d4830da63a3784b42c3f2eb38"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a13cc447c649417d69a7e7d6f36f9d345f536027ec357d240ad9d65de131bd579e9992ea1c058574919ff4ca7df50a93"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2c214b0cecaa3239284b75f4225b1d817515e2a08900e51525a159fde8fac44b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1829f311d8da1a2d1c4746354c68e08c4a1b6858a4f2a487ceef760b811610b970d98ed230658d1f828c78e41069e2cf6296bcce6de98a2eb0f9c03bf30cc4be"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-named-locks/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.10/maven-resolver-named-locks"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.10?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-api",
      "version" : "1.9.10",
      "description" : "The application programming interface for the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fb3915adc97d4aff2acb16605b9d06c0"
        },
        {
          "alg" : "SHA-1",
          "content" : "70920a458a3b765b8239726d75a1cea5e21386a6"
        },
        {
          "alg" : "SHA-256",
          "content" : "5ee57c89259d0a41f56291864ca7db12349ce11eca8ef62be5680c7c244705d0"
        },
        {
          "alg" : "SHA-512",
          "content" : "c9e8f3c4c66343f057fbb181b455ba033066b126c5fed585be47d60fee948cd16a39d521ebb9c8640abaadc38659e28da0ec4d82a4d9c6a95a8ad8a6d3d60fd3"
        },
        {
          "alg" : "SHA-384",
          "content" : "3a8adb004c81d8805cdacbf552fc64ceef4894661f9c86ca7ad4a3a54cff29098057aa62fae1f0b9fe4ebaf6f6032edc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b0683c6b294124103173d4303f6597ddf929e80341bf8ec74a73f4e66228d3d748e57911784c18709b7cbce25a35fc88"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0f53c6ddc9220445be9bd2202e00dab73641cdffc5b53d1f9973a6e05d766154"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bbe30cb51a533751dd0ffda4db931d4aee1b8e46826f922b26379ddb970eecee0b585af63381aebf3bb470069892650d2c533f588eb99a2568c322091595433f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.10/maven-resolver-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.10?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-spi",
      "version" : "1.9.10",
      "description" : "The service provider interface for repository system implementations and repository connectors.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "11b58ff2d7bf76b219556915cebe49aa"
        },
        {
          "alg" : "SHA-1",
          "content" : "bfb8483f801da24bdc61a31e63d86617be897644"
        },
        {
          "alg" : "SHA-256",
          "content" : "7554650b663fef31c594c75f600b2241bbed9306d1ee5637047da55e9a443df3"
        },
        {
          "alg" : "SHA-512",
          "content" : "d54e73064513182bfd432a387e992765c9a877eea88f52f22e54280da5744daef3a893db54751f01209c602f9ee1cd79732d6ffaa9e5efea90601f17c6ccbed5"
        },
        {
          "alg" : "SHA-384",
          "content" : "d8f8eab6bb2f47db7d3228b8dba497f3e55747d904eb6205bd00f0613954344820026a160c09a498cb2a41835365feee"
        },
        {
          "alg" : "SHA3-384",
          "content" : "35514c9264f9788247803be252afc4025e834521f8e756c5601a1a1199bee76d8ea3078ee2308cb7c1aff479baf10993"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3ce83f8171e5dbc22c545db1909e69398c0e3a630936ea7cc5edc4091eb6c986"
        },
        {
          "alg" : "SHA3-512",
          "content" : "50b6b8af520858075d39b51c9f6b435e5296aac8502ff40b6a6e8d7efa2ef23e2e6e2b7314593d877dd8acd4f22c07b92dcc8345085d930264166dffcca59183"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-spi/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.10/maven-resolver-spi"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.10?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-util",
      "version" : "1.9.10",
      "description" : "A collection of utility classes to ease usage of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "642f07aa8af0250c766ce87e89791985"
        },
        {
          "alg" : "SHA-1",
          "content" : "7aa9a7d80728453903601700f60273238073bd84"
        },
        {
          "alg" : "SHA-256",
          "content" : "c6eda39bd4b7670e7314ffa006e4dc9da48617e2a6ff26e5af118f0be6a0cdd4"
        },
        {
          "alg" : "SHA-512",
          "content" : "d8f1c5265cabf740e88fcf3a68ddd41855437672e2fc63fef0a0fa48baecb07aa7b7110282433b233b4c37c64599b48f77648f6f11f9b8ad91ea7664c7311c9e"
        },
        {
          "alg" : "SHA-384",
          "content" : "5cc93cb7611293a7a61aca51c4ece96001143ea24c52f2d580b30ff176762cc52f8a7ca2a13fa416657749125c2f12db"
        },
        {
          "alg" : "SHA3-384",
          "content" : "eac95d7a402f8aa67a534180d5c3604de63b5cb5317443637fbab8f381b2d60ddf2bc42de821a8d49e09681fcf2c38b3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "21cc51ac098638d2df058fd63512d4f3e11059928a320db50a726e02ee8ae511"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d72f9f6e5718f966760aff7b63c0c9864805c73bb7c46ecf0de97561aeccc44482de8f4fc9d32b4eafa23b74d8b3ec3f036c26e2a9056dd0698f32e8c1d55903"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-util/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.10/maven-resolver-util"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.10?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-shared-utils",
      "version" : "3.3.4",
      "description" : "Shared utilities for use by Maven core and plugins",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "908f2a0107ff330ac9b856356a0acaef"
        },
        {
          "alg" : "SHA-1",
          "content" : "f87a61adb1e12a00dcc6cc6005a51e693aa7c4ac"
        },
        {
          "alg" : "SHA-256",
          "content" : "7925d9c5a0e2040d24b8fae3f612eb399cbffe5838b33ba368777dc7bddf6dda"
        },
        {
          "alg" : "SHA-512",
          "content" : "c6693f8a061de74ac59c61d185f5b130cb574405cfc37febb8e73806ea64eea822a4a75c24098fb49b7871373091543a6f4c526c0842589e528cacad40e5554a"
        },
        {
          "alg" : "SHA-384",
          "content" : "bc5b42831ff598f42dda54738be004a619d60201a009b04cb3aaa0dc343d0e4fbc423b19739391eb7c33efcac3c08dd5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "385bebb35d7ea13d92ae6a5afa9257b184a1fcf40cba077a103c7a91d39a4d3e0180a475febdba73ac75949968e77186"
        },
        {
          "alg" : "SHA3-256",
          "content" : "888fde30d4f9a9e1b7c4c5e4d61f9cf0499192e5bc1212538e2e3320688e44da"
        },
        {
          "alg" : "SHA3-512",
          "content" : "40b55bb907452777443b8162d456bf1d48e02bfd9124062faed9c9bf51e0f522d40b02f4c24eb39f760469ad226570876f0de6afecd74903112ec794f0aa9a78"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-shared-utils/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.3.4"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.plexus",
      "version" : "0.3.5",
      "description" : "Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "30c4a9fa2137698ed66c8542f1be196a"
        },
        {
          "alg" : "SHA-1",
          "content" : "d71996bb2e536f966b3b70e647067fff3b73d32f"
        },
        {
          "alg" : "SHA-256",
          "content" : "7e4c61096d70826f20f7a7d55c59a5528e7aa5ad247ee2dfe544e4dd25f6a784"
        },
        {
          "alg" : "SHA-512",
          "content" : "38d7dbe023f9751cb5e30bf154e31696590317dc7b7f768811fe0f5940513fcea4665670cd47d0b72ded85453b10f7d129b0b7428b155a41c903c7b56c986e8d"
        },
        {
          "alg" : "SHA-384",
          "content" : "2e943a72f0ca201d50ba90b4cf70c3c1f7b5ffc3bbfdee45875bc2f6f2e2a3a93acbba3a2f1e7ffb32b70e041633b6de"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a7b121732001b6f225b0687e7747993f48b3fc1d9a4325b4321a4c59adae36b49677193f5e31e3b1f11a6cd266e459f3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b879a16dd84d8d4f39c1009029b3a3a55e18049c7910f77814a32ca088b56585"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8f8fbebd2a3024bcf6f2e27e8206e3f3c2b2673217c1220743b1869bf60341490db7d1877d9eaf3c452500690df98ccda11a19bda996b74a6ebedc37bc9bc554"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/sisu/job/sisu-plexus-nightly/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Sisu&component=Plexus&format=guided"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/sisu/org.eclipse.sisu.plexus.git/tree/org.eclipse.sisu.plexus/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar"
    },
    {
      "publisher" : "GlassFish Community",
      "group" : "javax.annotation",
      "name" : "javax.annotation-api",
      "version" : "1.2",
      "description" : "Common Annotations for the JavaTM Platform API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "75fe320d2b3763bd6883ae1ede35e987"
        },
        {
          "alg" : "SHA-1",
          "content" : "479c1e06db31c432330183f5cae684163f186146"
        },
        {
          "alg" : "SHA-256",
          "content" : "5909b396ca3a2be10d0eea32c74ef78d816e1b4ead21de1d78de1f890d033e04"
        },
        {
          "alg" : "SHA-512",
          "content" : "2453330b27a0822bba440c28b98ae1d83d60d97dfa2d040562dd5126b3548e0caa040fea3b886ac6feb0a858e6c1bc45b6c5472b180f1f14792e5ca33e355959"
        },
        {
          "alg" : "SHA-384",
          "content" : "37a46eaa1d011969d28ff0daaecd67a560169b3ae70c40102331d85a71139ca07110169fe367f484735914ce5c6b86c0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e2f8df1aad5867355fd1d3de2374d077e3ad885e6bddac3ce7c7bc72a34097e33bc5dfe960f839a7feb515bd5a92ffd1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2e2acc7429faecd2e74c0c441209b1a5b0ccbc245ccd8391425c4b1e4b2fbc94"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9a28cb34c7761e695ccea04cc6df1e0f9cd18fef59bf50d5943ddc06802e616bc2bd55211e863c65f7f7661f963ba8ee9e569324642b87bc1703dc6f07cba5e3"
        }
      ],
      "licenses" : [
        {
          "expression" : "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl" : "pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jcp.org/en/jsr/detail?id=250"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/GLASSFISH"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/glassfish/sources/svn/show/tags/javax.annotation-api-1.2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.inject",
      "version" : "0.3.5",
      "description" : "JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1b296b0ddd911ed3750b3df93b395cd5"
        },
        {
          "alg" : "SHA-1",
          "content" : "d4265dd4f0f1d7a06d80df5a5f475d5ff9c17140"
        },
        {
          "alg" : "SHA-256",
          "content" : "c5994010bcdce1d2bd603a4d50c47191ddbd7875d1157b23aaa26d33c82fda13"
        },
        {
          "alg" : "SHA-512",
          "content" : "f4790768c0d958b3429a3241abb15f9bb6e2fd7f43a5e034dde6a3a6820e6941c00f10ad084d5c38f8edc144e7acbea7ba3dc8952f01dab41e443803db2a4efc"
        },
        {
          "alg" : "SHA-384",
          "content" : "b76e74a0cda6d88c1c03d40e71d238fa13e2070485c026945ee8dc6da62eacb02071a65df35fa3e4d9d6b343a89fb605"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a2d3bae2f5e518c7d11e584f6b8b7368f3b927c3405f48e27d4225d4e2f4917fb5623c0071fc47f081200b7d754571d1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b998bcdf4f8b5550a543865408e94fadcf1dd37ac19ec37269ff5307220b2775"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e9331e8a1b4281b45abec89dd9b7dd948207ebd7bed6be5978a5792d59327f7a4d4ee87c6f60392021f24f28439ab4ca4b6305ef6528e1c241c7a27c883b5931"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.inject/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/sisu/job/sisu-inject-nightly/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Sisu&component=Inject&format=guided"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/sisu/org.eclipse.sisu.inject.git/tree/org.eclipse.sisu.inject/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject",
      "name" : "guice",
      "version" : "5.1.0",
      "description" : "Guice is a lightweight dependency injection framework for Java 6 and above",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2560169296aa94492af34af2115e9511"
        },
        {
          "alg" : "SHA-1",
          "content" : "da25056c694c54ba16e78e4fc35f17fc60f0d1b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "4130e50bfac48099c860f0d903b91860c81a249c90f38245f8fed58fc817bc26"
        },
        {
          "alg" : "SHA-512",
          "content" : "b9c7a9b815d9ce387ebf6d58a71541da1be3cb8d847358133dc1f35ca45315bb9db11c13f3238adb643670759a58fd106247039f42c10759374a9b361c62e99e"
        },
        {
          "alg" : "SHA-384",
          "content" : "1f7e6e7555c97752e2a3a7dc07473384762467c24a0fc8f4c93c0f209ef361ecd4bf2be847281798dd84f68fc8c54b2f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "59b895108174073d9889ba3e18566eb5e0785310e90dbd918dfb06af5bdf0d72e8a54094c6109090f43e242daa4d6ebf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5a9518cdc72dd7fb8d7848500cb8c97c7689e64a52028dabf44e61a933ffd853"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5b53b7ee09cf057f83acf86de3f35fc45c04cd95c01e78b59fc1b4d9322e17ecaec1d6c5d37cd37084b602c1a74f6457342e27c6271fd140ade3190448c9fb27"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject/guice@5.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guice/guice"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guice"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guice/guice"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject/guice@5.1.0?type=jar"
    },
    {
      "group" : "aopalliance",
      "name" : "aopalliance",
      "version" : "1.0",
      "description" : "AOP Alliance",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04177054e180d09e3998808efa0401c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aopalliance.sourceforge.net"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "31.1-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e37782d974104aa3b0a7bee9927c8042"
        },
        {
          "alg" : "SHA-1",
          "content" : "60458f877d055d0c9114d9e1a2efb737b4bc282c"
        },
        {
          "alg" : "SHA-256",
          "content" : "a42edc9cab792e39fe39bb94f3fca655ed157ff87a8af78e1d6ba5b07c4a00ab"
        },
        {
          "alg" : "SHA-512",
          "content" : "532664e3dd33699bdfb296e355bc58fde77edc019c10f464ae49fe2494a68fd25d1623a9c86bc72830ca9f1354226366ac6f3c09d77be952641e971386a4ebbb"
        },
        {
          "alg" : "SHA-384",
          "content" : "829ba1c473782158d43a0e56c932b45139f121a504613b27eacf6b0774354e52c5eccaab5c2da3753b5686b93f0169b4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "55f70ee4afad92540faa9d260109c00190e6d1bbacf10b22e52f599103284c1a8b2a2043d8fafbe1309245290b5fe614"
        },
        {
          "alg" : "SHA3-256",
          "content" : "dd534fb7df6b380d8701290b0b0c4e388cf42f8179a436c509c0899afde91e5c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "617288cc45858588e0626edd21382d38b87cd0e6c78221e3a1626f579d5b4acd4adff37b72e3e51c73e91132f43951d12369624dd515f87bcc0c54213db43ede"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@31.1-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@31.1-jre?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.1",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "091883993ef5bfa91da01dcc8fc52236"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae"
        },
        {
          "alg" : "SHA-384",
          "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-utils",
      "version" : "3.5.1",
      "description" : "A collection of various utility classes to ease working with strings, files, command lines, XML and more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cdec471a77f52e687d0df4c43f392a71"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6bfb17c97ecc8863e88778ea301be742c62b06d"
        },
        {
          "alg" : "SHA-256",
          "content" : "86e0255d4c879c61b4833ed7f13124e8bb679df47debb127326e7db7dd49a07b"
        },
        {
          "alg" : "SHA-512",
          "content" : "e2d4e7bc919deb022d0fcc428da066d62c34a02d248b184ffc3edcea08ffbdc354cd018240b21a0495eafcd01723a692e583803ccb10d99fbfa97f58a49f967f"
        },
        {
          "alg" : "SHA-384",
          "content" : "ace26d0a31c11f312f1f6c1300d35fa6d9ed173d1f2718639e7f0b68d987d0d8fb57ec95eb187c250a8656cac3252711"
        },
        {
          "alg" : "SHA3-384",
          "content" : "01fba8224fd90332e30c8633fc6cb3d4190af08d39f117f0b4c65d440fb8c174aa777fa52275db918dc941c3e5339518"
        },
        {
          "alg" : "SHA3-256",
          "content" : "79a135751f0df24eb9dd9d1d0c9c8907158234cddb1b710ebf43cc7a344a533b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f1f21811c5c5125479290ed3b5b2b07c11ee4b9671bcbd24e7e8b8a4123a2686673ee064ba38c1e195acbe2b533ca738289be3064ec77062a32a756ed851fba1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-utils/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-utils/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-utils"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-classworlds",
      "version" : "2.7.0",
      "description" : "A class loader framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6ed852b1a004288c44438381e6aaee1e"
        },
        {
          "alg" : "SHA-1",
          "content" : "fe6f1acefd1a302dd4bc6d9d7f15358828d2a44d"
        },
        {
          "alg" : "SHA-256",
          "content" : "c60ae538ba66adbc06aae205fbe2306211d3d213ab6df3239ec03cdde2458ad6"
        },
        {
          "alg" : "SHA-512",
          "content" : "8057b6c7d52aaa61a51aba6ec613e8bd1a094d62a84d50a37bfe7776ff53780f1602b6169242c3a60b28c9d496458baaac5377575553e4af881643490ccda912"
        },
        {
          "alg" : "SHA-384",
          "content" : "4b079cab0a5f50631ef134f6578f4772f59897977d20ddef071920c107ca13cc3ce85d7b3c2bad586fb7a29fb4a4e07d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1e4500603fc2ac0c080f4a7b127171103295571bc7e570e50f6c479c62667cf78cf177c09b92f39702864fff83e35f9f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ff715bac48dda5b19e29e18e47dbba9015cfcdf3a949c19154ae9ea3e5951c60"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7bb6f86ea7300d4321fb78a0cfcbd2acc2b6639abb75e68e4bf1e301622ee1d41bdeed728aa49d74578918fe5da954860a29a9a6249e651db3edae941f816bf7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-classworlds/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-classworlds/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-classworlds/tree/plexus-classworlds-2.7.0/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-interpolation",
      "version" : "1.26",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1049ae9f5cd8cf618abf5bc5805e6b94"
        },
        {
          "alg" : "SHA-1",
          "content" : "25b919c664b79795ccde0ede5cee0fd68b544197"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3b5412ce17889103ea564bcdfcf9fb3dfa540344ffeac6b538a73c9d7182662"
        },
        {
          "alg" : "SHA-512",
          "content" : "6c3b40442adf721d325ee9cbf935d758223a04b3bd8e0f3b60fdb652175c1ca65a6010f7ea8288617ffa73cb1f19d2737c79c403d343b285e0f9afb1729caa60"
        },
        {
          "alg" : "SHA-384",
          "content" : "93dcdffb567f4b7d24eecf9fb0733243ebfe1fd80c92fe69532fed9d1727a58ffa5ce7da4ab26b5c6aa8a6a59beb3844"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7489d45be45f74f7639db3b18ae6075d32d84adfaa9c4568f3fe2b2fc35c7de73ffce6f42e494466a8c81e78747b0f17"
        },
        {
          "alg" : "SHA3-256",
          "content" : "62145ec219beb405063de848cb54e0d63efc8c255322998858d7df74f8d1ae18"
        },
        {
          "alg" : "SHA3-512",
          "content" : "12fba4d2ffab1f89003e375bf74df3fc5d0f831906f9716f2ab2fc5a4ca7084c8a61500b24c5fa0ded27d1cef14b030df70b34c148c138136070e27f7cc41536"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/plexus-interpolation/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-interpolation/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-interpolation/tree/plexus-interpolation-1.26/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-component-annotations",
      "version" : "2.1.0",
      "description" : "Plexus Component \"Java 5\" Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "141fd7a2ae613cb17d25ecd54b43eb3f"
        },
        {
          "alg" : "SHA-1",
          "content" : "2f2147a6cc6a119a1b51a96f31d45c557f6244b9"
        },
        {
          "alg" : "SHA-256",
          "content" : "bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac"
        },
        {
          "alg" : "SHA-512",
          "content" : "cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2b335733d7683e8bae312b0608af7c17b1aa22a1b9cbc4cc11549faf6bacc51c7591f1073aac99e5d70fdea31c6253c4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2e9f44d1c5df160563d3cedaf01929682fb3e0432beca7c782d8ba0324fb32b1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5051e4210310ec60fae9f32284a93da3cff63bf43a7dda30eaf2715d24cfc7f2353a6c2731521f4d6ef32e7a3e2526b6a41c8a11b0889c8dbf7ffc7914812641"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-containers/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-containers/plexus-component-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.12.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19fe50567358922bdad277959ea69545"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81"
        },
        {
          "alg" : "SHA-384",
          "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def"
        },
        {
          "alg" : "SHA3-256",
          "content" : "18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "group" : "javax.inject",
      "name" : "javax.inject",
      "version" : "1",
      "description" : "The javax.inject API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/atinject/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/atinject/source/checkout"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/nl.basjes.codeowners/codeowners-reader@0.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.antlr/antlr4-runtime@4.12.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.12.0?type=jar",
        "pkg:maven/org.apache.maven.enforcer/enforcer-api@3.3.0?type=jar",
        "pkg:maven/org.apache.maven/maven-core@3.9.2?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.enforcer/enforcer-api@3.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-core@3.9.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.9.2?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.9.2?type=jar",
        "pkg:maven/org.apache.maven/maven-settings-builder@3.9.2?type=jar",
        "pkg:maven/org.apache.maven/maven-builder-support@3.9.2?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.2?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.2?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.9.2?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.9.2?type=jar",
        "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.2?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.10?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.10?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.10?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.10?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar",
        "pkg:maven/com.google.inject/guice@5.1.0?type=jar",
        "pkg:maven/com.google.guava/guava@31.1-jre?type=jar",
        "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model@3.9.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings@3.9.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.9.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-builder-support@3.9.2?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.9.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-builder-support@3.9.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-artifact@3.9.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.9.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.9.2?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.2?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.9.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.9.2?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.2?type=jar",
        "pkg:maven/org.apache.maven/maven-builder-support@3.9.2?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.9.2?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.9.2?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.2?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.10?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.10?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.10?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.10?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.10?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.10?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.10?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.10?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.10?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.10?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.10?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.inject/guice@5.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@31.1-jre?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "dependsOn" : [ ]
    }
  ]
}