{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:fa4fa493-cd46-3186-a06a-60472bf35489",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-configuration2@2.14.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-configuration2",
      "version" : "2.14.0",
      "description" : "The Commons Configuration software library provides a generic configuration interface that enables an application to read configuration data from various sources and requires Java 8.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-configuration2@2.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-configuration/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-configuration/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CONFIGURATION"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-configuration.git"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeAggregateBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.20.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17, 21 and 25 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4b29562ded527aa074e1d44f8646dac5"
        },
        {
          "alg" : "SHA-1",
          "content" : "65897b3e5731220962e659e001904af3c3cbeba9"
        },
        {
          "alg" : "SHA-256",
          "content" : "69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4"
        },
        {
          "alg" : "SHA-512",
          "content" : "1c72db334ea44f932c35e602b78907865f5bab43e30c871c9be67c8184eaa778f32d7bc3ab525d5921cd28619d3f9babfd483f17de54f007ee07db2e074b0307"
        },
        {
          "alg" : "SHA-384",
          "content" : "77dd27c4d5e9372c002bd6878d2cfaaec3cf46dd57d65de63d7f2e09351344531cfa81a537b56628ac6db18adee7e484"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3456de40eef224b3ad195d2f218dd28eacb0da07607aee7ead94bd8d54bd8311d51c28d4066db4bf8b69a2df48c415f5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "36e3f71352fa14bc580db45a05b09b063392c6d39acf9e24ffa6a67bbc07a336"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6ecbc05bb5cd3f7537078b0cf51b0a5f7189dfa60c22e5ec0d6b9e2fd3f7fa7566770b5da87e0c9929f48769933c3e3a473fd5cc7231672fca36ab1fee1f8670"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-lang/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.15.0",
      "description" : "Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "756b7c5438d89a0c311d811c1a06d19a"
        },
        {
          "alg" : "SHA-1",
          "content" : "9899093aa40f0199d6c39b131b8f087cdb37e399"
        },
        {
          "alg" : "SHA-256",
          "content" : "58d2da30f058512a1e7f914e39241deca4dff5c27a085b4ed2faa9e7208067f6"
        },
        {
          "alg" : "SHA-512",
          "content" : "be41b2c3a347bfd6eea3a957fb9a8d631c32b973fbbbe3e097d544d893ab4e587c3dfc38e89b4039b815b17d268cc7940e1ffb464050c7924acb56cc422613fb"
        },
        {
          "alg" : "SHA-384",
          "content" : "d3df5a4656967277d738e9d981d7b065dcda91f25553f8fc5c3d26edf07079cc5526508b0951da45ef614663ee9d471d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bedce93fea6c4aaaf7feb52f75d4265c41b3b0d39976248b4d9d5b879d18403335364b3f845585ce5fceb80a34c592df"
        },
        {
          "alg" : "SHA3-256",
          "content" : "48fd7a8921eca0e1dc185a0ad5f8e89ab3399f0327bc57cd9e09988fce75d1ef"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f996b808d5f7bff8ac7aa79a2f73b93a4edb687cace7b54089246b6b4005ebbaab00f752a79205479023c802a56e42605806113d6af36e28469fa6a63ae710d2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-text/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.3.6?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.3.6",
      "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well-known logging systems.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fe0ccbe8971fed954a0ad6528fe3ef24"
        },
        {
          "alg" : "SHA-1",
          "content" : "63e78ca6cd446c0ad166d14f03ed99e7efb3896d"
        },
        {
          "alg" : "SHA-256",
          "content" : "f8ead8943401081dea0aa824b5b1ba40a0e4ed297a572a0f02258150a0b62357"
        },
        {
          "alg" : "SHA-512",
          "content" : "5aaa082507e2f5031df7653e5feae7bda7a5fc4913e87ca5f7a202ee2d81e7b33c9f8d4419c4abe34f6dc56a0a85833340ae832f0630c23157ea6860c4273df5"
        },
        {
          "alg" : "SHA-384",
          "content" : "4b1d12ca87349e1dfa72ea6781d7107c446814f796805bdf20d251b14384e281c8b325aa7c833aede577570dd1aa1cd5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c3397f7065b350dff865a8ac054c995237d51bfb6e46d5a05c81ebfe77c897a0826eef3c6be63b95cacbd571754c6393"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8954c3daddea14224e55ee21ca11e8c5a3454a9e12059de6429646108416f0f1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f7042e83035f90c56df777d894fd15689f6aee6eeb67b024687314eb4a33c75affe6840940dda4e2c88d690ed1679303d75071462444cae3b2b80fb425ac35d0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.3.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-logging/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-logging"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-beanutils",
      "name" : "commons-beanutils",
      "version" : "1.11.0",
      "description" : "Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "32ed51f196dfda19e0dc1ce53eeed29e"
        },
        {
          "alg" : "SHA-1",
          "content" : "ac03ea606d13de04c2e4508227680faff151f491"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e44ba68ec9a3f21286fa2a8bbb003b735c0f69101bb43144b79f4f8aaa74709"
        },
        {
          "alg" : "SHA-512",
          "content" : "4348670579601bc1151de2f27414635c4ea0b4b53061d116c09ba319e2c4f8e91d0cb0713a964668bd5189105ac1e2b6590881850880bf5ff23cc6409f270420"
        },
        {
          "alg" : "SHA-384",
          "content" : "a349c6a1e0a48cbf8d3528e4a39257db1b912c2ef060853837aa14d941154e9adc43248309ab6db7e8ac7730db7b081b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f3afdd778bb54bc6a9e41b5c31cf98078f005542b87cd0a3713d8e5152ff7eb6d9e2ed3206ce453a3af6f869fa714cbf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6dd4ec6d993b5792c51b5d6c4ea3b56f35b1c1f0ea65b182cb55c2432315aa68"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fdcaa942f7377fdb36c7977273c1e2177d23e7b13162db1a0e5d3958d87a8c77d08cd6797a7c30cf755d492fa75d0642de5678dfe1d5a936569dccde5549e512"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-beanutils"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/BEANUTILS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-beanutils.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.21.0",
      "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c49977029838babaf8a71485aa9aaef8"
        },
        {
          "alg" : "SHA-1",
          "content" : "d95f998db5f89900fe895daf6cd2cddcb2f1d64b"
        },
        {
          "alg" : "SHA-256",
          "content" : "4da851cb6abfb98bfe9eb77c5e5fc47f5414fa28b94e21b7fd9a646705dc167f"
        },
        {
          "alg" : "SHA-512",
          "content" : "3ceb4aa588d0b918e46b1ddda9ff41b5a765985bf66542d2728458fc3f83b9dedfd972ff5d919cf6f456fbaa9f8c4e5f0c0913848ec3a471c316374e683b1f2a"
        },
        {
          "alg" : "SHA-384",
          "content" : "05786582b0a85264688ad5b49ad6da09db1cdfe6301cf31ddea48f97f45b13ff25d9e3def1702890457fd5bbbd00f793"
        },
        {
          "alg" : "SHA3-384",
          "content" : "805bda170837bbedbecc5c63a5defc6a348777952906d8e6f33544866e86aa25c9d28f3b351e981d0fa49bb16e07884c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cbc2eafcba305c08e852133d0881d209799c4dc83d587869eed5f281d6bed4f3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "244e6a342d4b5a6e7d077426427979f26320be305f1cb33d933672c926ea3a96fe4f284c9f592970f604928209fe0e149613b64990202d595bce01a669de418b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-codec/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-jexl@2.1.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-jexl",
      "version" : "2.1.1",
      "description" : "The Commons Jexl library is an implementation of the JSTL Expression Language with extensions.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4ad8f5c161dd3a50e190334555675db9"
        },
        {
          "alg" : "SHA-1",
          "content" : "6ecc181debade00230aa1e17666c4ea0371beaaa"
        },
        {
          "alg" : "SHA-256",
          "content" : "03c9a9fae5da78ce52c0bf24467cc37355b7e23196dff4839e2c0ff018a01306"
        },
        {
          "alg" : "SHA-512",
          "content" : "dcd62490cc386516f66427f5e478c308f6937eb6d64a34a02de56255129ded20bedb85c01b5c794d95ca3c4d6a11d58fa920779c5e517b78a881c5a229e4fba2"
        },
        {
          "alg" : "SHA-384",
          "content" : "db60a120271ed224dbe535219de2d13603a5ec9e397ce5cb3006b10464ceb9a23a6c742fa1262352bed179032b7f4357"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8bf28ee3c9334fd57160f0d60006d2b20099d50898f919f901e9c97dd9e3ba634b4c02ba7f861e9d4076799a778524a9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cc6d0fc318a59e25d3eea3cea560e9502c5248a7bad1458a9db4727d344d2f41"
        },
        {
          "alg" : "SHA3-512",
          "content" : "652c1d03ed332fa6a3ca178e9af600508f0e2edb2840162dd86cff0827378e24144eb2996478973a11e30512dbb6ffeee32118505ff7194d37283935fcc9a51e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-jexl@2.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/jexl/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/JEXL"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/jexl/tags/COMMONS_JEXL_2_1_1"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-vfs2@2.10.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-vfs2",
      "version" : "2.10.0",
      "description" : "Apache Commons VFS is a Virtual File System library.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "df535626616b23cdb5555c40e556155e"
        },
        {
          "alg" : "SHA-1",
          "content" : "a306167fdb88152403c8b00595b1502ffacd5b76"
        },
        {
          "alg" : "SHA-256",
          "content" : "adf9dfb77a44f7b6e2dba3779cfa7142ab8a1f618eb7a9741083822e8d14be13"
        },
        {
          "alg" : "SHA-512",
          "content" : "c8302e679e0d0f0d9467f263dc37e792f35802e9762f78a7fb5a59108668d3751bc63f415c61e46a4eca409f306091abb6ef8bc95c2bc72807a0f91553195c7a"
        },
        {
          "alg" : "SHA-384",
          "content" : "c135ca13ef64d1eaa4bae40f4d5cb44ff028b15fffc68d69d281fb2758fbff1c0731d2438beb9145641b4660b98a0b84"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8e3d55557ac1f220bdef567f65723cb1131b34c6c585090a08f83af0f75906e1cd6420da361093bd345e3f11a12a6dd5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "78b4553aaf3cb58558d0a6739b3f6e7bd50911509169eb35d41ed77c151592e5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7a53485b995eed3c3f446ba1ddbc599f83bec62a950cb9e870c999e05fa39f8fac514493cfafc910af633cc5d6ab29ec218ac301af70c51475c4bd45bd8a232b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-vfs2@2.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-vfs/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/VFS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-vfs.git/commons-vfs2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore-nio",
      "version" : "4.4.16",
      "description" : "Apache HttpComponents Core (non-blocking I/O)",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "597c450f3401e98103e835824ab43e77"
        },
        {
          "alg" : "SHA-1",
          "content" : "cd21c80a9956be48c4c1cfd2f594ba02857d0927"
        },
        {
          "alg" : "SHA-256",
          "content" : "4018736ede2d321034e8517ea90baefb31831a8608afccc446d8a699fb1d00d4"
        },
        {
          "alg" : "SHA-512",
          "content" : "197cb4f4343a02d39d61db1c19bf10757aeb2078f51c4ace77a72a250b6d03b31fa1fc51f989f43df8c2a0cf8162a36664a8a935f4bbeb860c35770a3abd1899"
        },
        {
          "alg" : "SHA-384",
          "content" : "e8827b2eca484748dd776edcac779ae67b5c4394c5c2ac1a50c614b19142bdefb4c4e01f0cf376c578007ad515add88d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fb55a9718c2507954ffb779520b0233acdd0135222c7d01542083b3cd5dff669a8afffaf54d8bfe724e52c5c18c1403e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "37554263bc837817c08dcfba6b4a5ee978fa1d9f99945d27c0f3ba44195501a0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "18692a4310956c328ddebeac514a503904b84605463063f0539673f0480f0606c002eccd6f4dbacf91d124e11e130aa122efb855ec6b0aa0cf72ee0b26ac8ef7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore-nio"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.16",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "28d2cd9bf8789fd2ec774fb88436ebd1"
        },
        {
          "alg" : "SHA-1",
          "content" : "51cf043c87253c9f58b539c9f7e44c8894223850"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f"
        },
        {
          "alg" : "SHA-512",
          "content" : "168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838"
        },
        {
          "alg" : "SHA-384",
          "content" : "ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.21.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bc7e020873f086ede85f97bd9f013215"
        },
        {
          "alg" : "SHA-1",
          "content" : "52a6f68fe5afe335cde95461dd5c3412f04996f7"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d643a2afea8b058b762aa6fb90e5b256f6c729739f8b3784c3370ddc609e88d"
        },
        {
          "alg" : "SHA-512",
          "content" : "7ac1aa4d834cd7cdecaee223a64c63d481810c73dfdb5109f402234a05cadf754e414cead99072f5140d4f7042ee084161935fb28129a631d908d989c5bbac5d"
        },
        {
          "alg" : "SHA-384",
          "content" : "97c07e5c4f62484c98b6777f63ab032ee09eeb1c9ddae8332890126df9c665afb9cd554db02495171738720d23c53732"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e3e44c9f4a5f4075fb62a438a84015fe2abf878e9793835a7816dc3c35141bb79fe96dfdc6bb5aef96b7c5bbbcf453c1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1f8f4ce25b7169452dabb10ce843b3246378ea55c1971acd2300e417747b3a68"
        },
        {
          "alg" : "SHA3-512",
          "content" : "175630adf10305aeb31d737f833021a25582ffe2ef66fda6e7f694598af9c68cebbd205ade469eca4faaf6b9d349244289e62179d9cf48d93427090e2c008cf8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-io/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-jxpath/commons-jxpath@1.4.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-jxpath",
      "name" : "commons-jxpath",
      "version" : "1.4.0",
      "description" : "A Java-based implementation of XPath 1.0 that, in addition to XML processing, can inspect/modify Java object graphs (the library's explicit purpose) and even mixed Java/XML structures.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0f59e33e5a2e7265155b51a1fb592fa4"
        },
        {
          "alg" : "SHA-1",
          "content" : "f61af30d8db727b7bb53d285fe074f89d8b68951"
        },
        {
          "alg" : "SHA-256",
          "content" : "226cb33a644995b084b3bdd42f2eb861509e6db71d7a343d411ee321387b0860"
        },
        {
          "alg" : "SHA-512",
          "content" : "1a22928d2b5f12b93a7643c4ba00e41d61194c80e71e89cf6a97411b7da14a95677dd41dca8f4eda3c1cfa6475364b161e008f526b44b1bb1ff68dbd49ad0051"
        },
        {
          "alg" : "SHA-384",
          "content" : "d595a93c8779f7677930d90ffb57a5daef6da02bfd32dcaaf9df1842a54db9e868378f3f0f7eaa79610998955a3fa701"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1c95495e008d255868a0cc6c6eede85a2374eec298ea8c0c5b577ccc71907c89306b6b2fa2c6a148f663849bd569b425"
        },
        {
          "alg" : "SHA3-256",
          "content" : "76a6888bb46d79084bd3a027d3f5f09c607730f47fc067488434fbee7a0521f1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "efb8a8fbb1a6a2061516bd591ea40b7c8859c7be6e81a5ed329851d5f0bf51da3a2e33490d5d3376e931fc0c08c8f56af4bacf6bf68d6312389d859219176a59"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-jxpath/commons-jxpath@1.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-jxpath/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-jaxpth/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JXPATH"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-jxpath"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "xml-resolver",
      "name" : "xml-resolver",
      "version" : "1.2",
      "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "706c533146c1f4ee46b66659ea14583a"
        },
        {
          "alg" : "SHA-1",
          "content" : "3d0f97750b3a03e0971831566067754ba4bfd68c"
        },
        {
          "alg" : "SHA-256",
          "content" : "47dcde8986019314ef78ae7280a94973a21d2ed95075a40a000b42da956429e1"
        },
        {
          "alg" : "SHA-512",
          "content" : "eca19b8a6b04c279b7982b16f1763ca1d49b0081a8d4ca2b7419f057d22a0ec60795eb4d901c5eb25dd4a733248876aa2f522c17a6144a26c8ede9fb2f84531a"
        },
        {
          "alg" : "SHA-384",
          "content" : "3eceda91a1ce0a35c490eb4c0bd94b552f96b8e5064b257435d89d65fcc2b04c706d996415efe3cf8a7413db479c3710"
        },
        {
          "alg" : "SHA3-384",
          "content" : "717fa1ea46c7a6265351dd212a106870c427e71de0bde251a409ee6e7dfe02c61966ef306d20cea5d8712cf7bf58d07a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bb83f90bc8b898878455441b3712a2bf489b6584e6685e5cb82d78cab596ae46"
        },
        {
          "alg" : "SHA3-512",
          "content" : "762f05d93e4f9cc95a969f8fecad13f97064897c83f4e057e84fe054601275912b68be76bb50da7e8d90b30846712b77341eb26a6405c59c07b06e223e9b027c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xml.apache.org/commons/components/resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/xml/commons/tags/xml-commons-resolver-1_2/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-core@5.3.39?type=jar",
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-core",
      "version" : "5.3.39",
      "description" : "Spring Core",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "632d2a8c30962a69273775968c052651"
        },
        {
          "alg" : "SHA-1",
          "content" : "d2bff2eedf27b51d6ef9a2fc892aaff5b7a768dd"
        },
        {
          "alg" : "SHA-256",
          "content" : "3a1ddcf05420a9181bd9cacb6062a3edc493e14d555961ad50e1a6360eb1e75f"
        },
        {
          "alg" : "SHA-512",
          "content" : "2629ed79a0a3cfe7e467ac1a10f6d0d93f8ebdf9fe79bf67d99e5797e4efdb6bb1fd54ef882676b2175beea14079ca5ac6d8218c94134a66bd544d83fc8dc2b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "a58090e8a07cc13429b116c1d786269f3b1a1b16a63ce4711648e8f4e5c0b076e970dae2ee1e08fd1cb01158161b1bb8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "43f84a96b238a4492e08dd79e4450ccaad4c4f3f8adb45f16632593de313cf88905546f892e29989d8553512006e7680"
        },
        {
          "alg" : "SHA3-256",
          "content" : "99cb56d841b5920987b296da3af76ae51d80f4f78b56da4b127e9187793461da"
        },
        {
          "alg" : "SHA3-512",
          "content" : "74b21906fe06a990b8f910032c735af31c78cbf322452aa43b8a9bba22ceedaa0e6ad51e1f006b9c075b79654e3298c086adc6a9036601f01b5e4eab6ae899db"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-core@5.3.39?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/spring-projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-beans@5.3.39?type=jar",
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-beans",
      "version" : "5.3.39",
      "description" : "Spring Beans",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c2f99040fb8b0bc98515c87b968227d3"
        },
        {
          "alg" : "SHA-1",
          "content" : "87770ce736cbd777c07866cbc8a06b879765e3c8"
        },
        {
          "alg" : "SHA-256",
          "content" : "b6697a5d8facb81aa75e5a46d959d4256da9ce3b40d33f3b5bbd42a8b1ed5722"
        },
        {
          "alg" : "SHA-512",
          "content" : "53321d3395e51b2d0b6948adff4cce81a7a712c89af92ce27ad98a44e34bfb4efa0e617b951c0468deb0baafa258eaf61507982a6774d3d832593d129c93f3ce"
        },
        {
          "alg" : "SHA-384",
          "content" : "a4791a32da2ac30322814781da25680f019ef36e179461e6aee54e6f771081f1c61c673542b9e881d190988ecd98b5f6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3456cce03968d9d9a730b52e79c67615640e4d740d173fed9ddf98760fd2af7d28704df6ff0aa9e2935c17ca3704385c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c229d89e276b29a0fdda42fac26d7a0e526a994be452cdfff22bb03a504bf9cc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "08d43059f6948f7cda0c6d344d09d8e035289e51f2ba824c19e4b3f0f0714af836e8feb163b578ccfe97a9cd744b42d8382b4ed3020ba367c032e5bc768226ad"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-beans@5.3.39?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/spring-projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.servlet/servlet-api@2.5?type=jar",
      "group" : "javax.servlet",
      "name" : "servlet-api",
      "version" : "2.5",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "69ca51af4e9a67a1027a7f95b52c3e8f"
        },
        {
          "alg" : "SHA-1",
          "content" : "5959582d97d8b61f4d154ca9e495aafd16726e34"
        },
        {
          "alg" : "SHA-256",
          "content" : "c658ea360a70faeeadb66fb3c90a702e4142a0ab7768f9ae9828678e0d9ad4dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "363ba5590436ab82067b7a2e14b481aeb2b12ca4048d7a1519a2e549b2d3c09ddf718ac64dc2be6c2fc24c51fdc9c8160261329403113369588ce27d87771db6"
        },
        {
          "alg" : "SHA-384",
          "content" : "1d8b8aa3ad4edb7611a43e4e5b0f9538aa70df1d6ecf09cb977f6fb963797850d4350778530f2082aac9bedf09a27824"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2c62a7bf3f321aaa2ccd80e9fa633eb36a672a208c79e117a91e9812e3abfd7df3934930191d109be65441deed2cbd20"
        },
        {
          "alg" : "SHA3-256",
          "content" : "319bcec5b7eb366f63655cdf3cbdaa385e160f61edf3cbd94938e53b59905995"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dd44fc227d6e790255376ef0473746725fa7703d38ae3805715910d1846f41ac789acdc2d2ba1ebde874f7ee32d906608966612c90c618872aed3fca8e28e952"
        }
      ],
      "purl" : "pkg:maven/javax.servlet/servlet-api@2.5?type=jar"
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.servlet",
      "name" : "jakarta.servlet-api",
      "version" : "5.0.0",
      "description" : "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b950da93e08cf6d5a2d73dc7a80f9403"
        },
        {
          "alg" : "SHA-1",
          "content" : "2e6b8ccde55522c879434ddec3714683ccae6867"
        },
        {
          "alg" : "SHA-256",
          "content" : "33d3a5bda82c7d2f1b898685faa954f1fc34f7b0ae5c2f6ccc6d051e8a10973b"
        },
        {
          "alg" : "SHA-512",
          "content" : "667578d33b939b606bc38322e5cd8d0be4eacedf86e13f34b6c7c9d8ec6ef719ac7b4d830eba2588a4ea5c924fe3772960e94a99642a039f1781421e7eacb1e6"
        },
        {
          "alg" : "SHA-384",
          "content" : "329e54722e5da97d1c8d049c4dd68b0d8e22f72b299c2dd4db7f1bd3b07de4cf891402904760dca4584e30193741b11b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4b41bfe405d59203409fe3a5a5d11f177eabe7cd0eb7994dfe1f907c67c93a766959f703dfee1ef9925d420d0dadf9a0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b73926ebe8f21e0d3f440f9e7f3a229fae7975b34afeaa5c42d4334cb1d86121"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a85b76f03626ad4d02779d812190fb4b44fddf132dda92c0c908a7eb182f202b0f02f54eea500d92b3a5667d5288e03269530b63c7f72504f424d3dbf5f8c48e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.servlet"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/servlet-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/servlet-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/servlet-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.yaml/snakeyaml@2.6?type=jar",
      "group" : "org.yaml",
      "name" : "snakeyaml",
      "version" : "2.6",
      "description" : "YAML 1.1 parser and emitter for Java",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d8bd94536cee962cfff39730bffdb8da"
        },
        {
          "alg" : "SHA-1",
          "content" : "2bc14918a2f8d5414749ab12d0c590cd3198b8c1"
        },
        {
          "alg" : "SHA-256",
          "content" : "c8f7a98e7394adda02f6317249710e4d1b4c7a25aa8c7eace0c2eea52eb8bf85"
        },
        {
          "alg" : "SHA-512",
          "content" : "6acd69508b8287f4843048930ce0d87378d29974e13bb85a0c600424fca46b5069983679225b41a5d772feb776d1d8886e3c19165c15b4b50fbf7a9134364a5a"
        },
        {
          "alg" : "SHA-384",
          "content" : "2ef9d7fdd8e15a639f23f94708fa40e2cf8254a02ad9c204ac2be5e7258d6fc439c8b0440ba0dece8701a0d3ea64eabd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1adcf66914123e71160de433ed0dcd39c061e022ca944f66496b6109e43456dcc8c95948640125d24b51b1dfb417a7a2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f5158c7a4a070ab149e2b4703a579addec5a183d83f97b0a40b22b0fd297e9f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3688a0fb15be372db00605d3d469881198fbb91ada469995667bbcaadc5fb8119b71290558e534bfc739babc03e1b95d927cd62814c9a65b81e5c1976ca5d1e4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.yaml/snakeyaml@2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml/src"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.2?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.21.2",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "add2fbe739574bfd1877c2cca25f46d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "71ab8ff75b4fd74afdee0004173fdd15de1d6a28"
        },
        {
          "alg" : "SHA-256",
          "content" : "8c982f01f148d805f0aaac2339011244757e0df7c6ff8951f2fa3f433b8ed849"
        },
        {
          "alg" : "SHA-512",
          "content" : "1a47b012447bc8c3d0bc603b95fce1640d7fe7ead08bc33c106c0de811f061a1eda871863e4e1411e9c0c9c716d47c69960f7e492f54e8610f3e40c99f5c3962"
        },
        {
          "alg" : "SHA-384",
          "content" : "933e7dd454a933ff1fa451ff63d870708b9ca8cdf68b849594a08d9859468cc19b15836cef741f6c9ffb8cde31cc5c76"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f2ef8662730bd798307c483f18f1bd54fc4fd5c9cacf4eba0715222cb4a3e46ea60dde95994764604f0621a05a1ce0c1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0bcf55950a1f2eb63569142af0d863b2496791cf9da864ff9b8b73796250c5f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "58132245b550d327faf1c8a2a0bccc85188a2abbab806ea646ce3b83340a750df534ed51db3de2a2fa167e4612371ea1ab84ab8d1badab5509f44d9c73958396"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.21",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e0d0c3e7300954f73e43c67d933aaea4"
        },
        {
          "alg" : "SHA-1",
          "content" : "b1bc1868bf02dc0bd6c7836257a036a331005309"
        },
        {
          "alg" : "SHA-256",
          "content" : "53ca085f4a150f703f49e1aabd935bd03b43e1ea3d55d135438292af22cef56b"
        },
        {
          "alg" : "SHA-512",
          "content" : "d832a99867acc2d5afb2596da760c50e6a6b54c1bbc8e6c4186f267a16e1d55c7a916ef8b034ad6b277c41e3342b91dcdc2e3dcea8bdccfe89e7c147894591be"
        },
        {
          "alg" : "SHA-384",
          "content" : "30b15d68f8da6f6c26aa9f6c95d09152b6c1a8092cd976cf600d63d1751509a73865f937e0ad97d8d55bf20f6a749b44"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5205b51f6ed689cf31b58b98a61ca9e17a439c15d669dcb408ec4d430e77ac9ac57d39d5ca1f9973e8d184f6dd57ec4f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d6782d188a72b2bb96e4b595343e783012b3f98c30f7b9950244c21739334509"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b648f1e9ffe818227d53fbde409e61858ac22d3f78705eaf08065587ed512c9b33b0f5e2222356bfb33fb2973bb5a3184e31d2a7099f8fc8d2fd23eb4612a4bf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.2?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.21.2",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b62c1031b5f38fc58158fc0c559980cb"
        },
        {
          "alg" : "SHA-1",
          "content" : "7d11eac823392f28d8ee7bda77eaadfccbab83e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "12e8655b100267b44d0f14d01b1f5082a5105e616174dc4307be1a761e92407b"
        },
        {
          "alg" : "SHA-512",
          "content" : "31a16a40b2e1a1a9467a66c93884c034527fb5af641a79bd6a563d4c3aaa0cfc8d8250f930d13c7fd70c18db579940ec54a49538c5a2e0fb9780c575808000ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "cff72535be10b86fac89af4fd8eb0a7d89b0385712bff36cca6b94ad014acd9c2480bc3bc87b25b8621ccdf17cf8ae1f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1a7cd7206198350f0810989bc1448bb262099b14f3fc746d70651a3cf20a35948cc545326c07852dec25871605c862a3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7550f1f3812a13530bcb61db040d8b57415447395a62503dad6664e7dc62acc7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "94e8097f45134c4e30e84cba9a4bd10dcec3e69ac3a9e289278be8f4005befe6efe33dec7bf4c349c3cd65928c8a1aaa0ffdfa689e60ca240393634eb384ed6e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.25.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-1.2-api",
      "version" : "2.25.4",
      "description" : "The Apache Log4j 1.x Compatibility API",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4402dad7bedd8ca748212b09d64e86a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "351888743c1d0f7c9ec97a909ff2f7901f77df63"
        },
        {
          "alg" : "SHA-256",
          "content" : "7b1a61507950ea67b3d6b11437ee37fad9db06f855c92c25c08aee074c757395"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb1126e1638a1007de3068e9a0a5e200ecf44bb52a66de6792f9886b7d2cbdc2e8d5e61ffae448c10aaa09b81ddf956c3c6ae787aeb3a43f26b1813c9b5a900b"
        },
        {
          "alg" : "SHA-384",
          "content" : "14669eeef68415f5b5637e7ca1431915e3237d2cd93e43255b7065f1bd90069001eb6da631cc7dea976bba97db7baa2f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "29f4591ce3865a3551517a33646fc8bc6d60abf72317985ef382531ced78d9d562663601bdb2cf50518a2ff5f1cc536d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0527b5a19fffab06ee970752a5a91a01de9d511b98947d1164efd68e946cf596"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e3925296eb9f816c8f79145a92edf02d2d61514e84f4074c63656118813a538208e01631d608b8134ed1003b864d7470429a2ffd415792b8564f97dfff772e91"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.25.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-api",
      "version" : "2.25.4",
      "description" : "The logging API of the Log4j project. Library and application code can log through this API. It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases. Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5efb17ae45b749c1fbfedb3d93375cfc"
        },
        {
          "alg" : "SHA-1",
          "content" : "89ff2217b193fb187b134aa6ebcbfa8a28b018a9"
        },
        {
          "alg" : "SHA-256",
          "content" : "c4b642a7f047275215de117e0e3847eb2c7711d84a0aa7433e7b3c096daf341d"
        },
        {
          "alg" : "SHA-512",
          "content" : "e6d6a8ad6542f071978b46858063a1a6fa2a3709a69460078cab3cb57907c10cd7c0746b83af04d8284120c3382ebdbd1aeabda4c370041c187b903daf71a94b"
        },
        {
          "alg" : "SHA-384",
          "content" : "81407c406cee0bcb5bb052fbf1ecd162487db17e7f3b84489a6e5e9da14688b3082020abb01c20d1adf36b2592999f36"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c05228836eef3d6dc30f8210b81e2aa1a3bfb2960a34bde1e2b88f8fb3ce4cae21a1efe84e058553990fa60860916136"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bde486cc1dee149bbdec58c97085367c299be5f06d4b2e068bd26be14c6fa4b9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7bb13130a717f744141f1eb1fe9c7f8653de41936d870467e54c81a9c828be6ba0e28e7f3b72696c0cdc9f93ee6c6a5e64e58c7310f78f21f0a482e483ee8082"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-core",
      "version" : "2.25.4",
      "description" : "A versatile, industrial-grade, and reference implementation of the Log4j API. It bundles a rich set of components to assist various use cases: Appenders targeting files, network sockets, databases, SMTP servers; Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted outputs; Filters that can be configured using log event rates, regular expressions, scripts, time, etc. It contains several extension points to introduce custom components, if needed.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "62233cc04ded515e14b5fa4e88a9c5a9"
        },
        {
          "alg" : "SHA-1",
          "content" : "b963c3d6bfdf05c61ad47a74e9f9295131607df2"
        },
        {
          "alg" : "SHA-256",
          "content" : "10fee2c0485d54fa44ee75d314f6295508f7b932281873db61a91b88073200e6"
        },
        {
          "alg" : "SHA-512",
          "content" : "fc61e84587c6c060f89f71faad6a547b1fbdeba706d795daa210df947b08092b039ed40b0c9a4b507fd6207d33f796870209e47ca62c1f224895d2deb7b415fe"
        },
        {
          "alg" : "SHA-384",
          "content" : "1c097c50acd1577f0a7ea1a249f7aeaff0473c7ab0e67778ed7ab6566662b96401d9e24792c0a17dfc23128c54fb6258"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0b2172d1dbbc3a8631c18da988819bcf01011c1abb1396057464ab5e910afa40bccb92128c2139672f3e81da2fa72147"
        },
        {
          "alg" : "SHA3-256",
          "content" : "98edd5c29d25bef661121f16472567908473362d42d1f1e7e76a9ad69a45a8cb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "48891c8663657fc204af54e15c4773c8dbebc1597b4be635084f4a1a1d8687576e1df91258cb6e5933586dd3c6b6cb9fdbb2edbff3da9fba8c501ea514a64bb0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.commons/commons-configuration2@2.14.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.3.6?type=jar",
        "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
        "pkg:maven/org.apache.commons/commons-jexl@2.1.1?type=jar",
        "pkg:maven/org.apache.commons/commons-vfs2@2.10.0?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar",
        "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
        "pkg:maven/commons-jxpath/commons-jxpath@1.4.0?type=jar",
        "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
        "pkg:maven/org.springframework/spring-core@5.3.39?type=jar",
        "pkg:maven/org.springframework/spring-beans@5.3.39?type=jar",
        "pkg:maven/javax.servlet/servlet-api@2.5?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.2?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.25.4?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.3.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.3.6?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-jexl@2.1.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.3.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-vfs2@2.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.3.6?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.21.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-jxpath/commons-jxpath@1.4.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-core@5.3.39?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-beans@5.3.39?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-core@5.3.39?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.servlet/servlet-api@2.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.yaml/snakeyaml@2.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.25.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.25.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.25.4?type=jar"
      ]
    }
  ]
}